Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.

This information is released on the Woolf site (, hereinafter the Site), in the “Newsletter” section.

Holder of the treatment

The Data holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner:

Data object of treatment

The Data Holder essentially collects the following personal data:

  • contact details

Purpose of the processing and storage time

Personal data will be processed for the following purpose:

  1. with your express consent, authorize the Data Holder to send periodic newsletters.

Retention time

The personal data collected for the purposes referred to in letter (a) will be kept, unless the consent is revoked, for a period of 24 months.

Lawfulness of processing

The processing is lawful because it is based on the following legal basis:

  • Consent of the interested party.

Methods of processing and place of storage

Personal data are processed for the pursuit of the Purposes indicated in this information on electronic support.

To achieve the purposes set out in letters (b) and (c), the Data Holder makes use of the company The Rocket Science Group, LLC, with registered office in 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (Mailchimp) which could transfer data outside the European Economic Area. Mailchimp declares to adopt adequate guarantees for this transfer pursuant to Article 46 of the GDPR (Standard contractual clauses).

Mandatory or optional nature of providing data

The provision of data for the Purpose provided for in letter (a) is optional and refusal to provide them will make it impossible for the Data Holder to send newsletters.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:

  • by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.

  • By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the ” fulfillment of legal obligations, and public administrations for their institutional purposes.

  • By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacenters, IT consultants). The third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Controller and will in any case be appointed by the Data Holder, external data processors.

A list of data processors is available at the headquarters of the owner.

Dissemination of data

The data will not be disclosed in any case.

Rights of the interested party

The GDPR guarantees the data subject specific rights and the latter, for each treatment, can exercise the following rights:

  • Right of access: you have the right to obtain a copy of the personal data we hold and which are being processed.

  • Right to rectification: has the right to rectify the personal data stored by the Data Holder if they are not updated or correct.

  • Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.

  • Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling activity.

  • Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.

  • Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authority Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.

The Data Holder may also exercise the following rights under certain circumstances:

– Right to erasure: it may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions that require their continuation.

– Right to object to processing: may request that the Data Holder cease to carry out a specific processing on personal data.

– Right to limit the processing: you have the right to request that the Data Holder limit the processing operations on the personal data of the interested party.

– Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.

To exercise each of the aforementioned rights, the interested party can send an e-mail or write to the following address specifying the request and providing the Data Holder with the information necessary for the correct identification of the sender (also attaching a copy of the identity document) at the following addresses:

  • by post: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano

  • by mail:

Woolf will respond within a month. If for some reason the Controller fails to respond, you

will provide a detailed explanation as to why you cannot fulfil the request.

This information may undergo changes or additions over time; therefore, we invite you to

periodically consult the website of the Data Holder- – to stay

constantly updated.

Latest version November 2021