INFORMATION ON THE PROCESSING OF PERSONAL
DATA REGISTRATION
Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.
This information is released on the Woolf website (https://woolfid.com, hereinafter the Site), in the “Register” section.
Holder of the treatment
The Data Holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com
Data subject to processing
The Data Holder collects the following personal data:
Personal data
Contact details
Residence data
Data relating to payment
Purpose of the processing and storage time
Personal data will be processed for the following purposes:
Allow registration on the Site to proceed with purchases.
Make purchases on the Site by completing the sections relating to billing and delivery data.
Allow the Owner to carry out post-sales activities (e.g., management of warranty claims)
With your express consent, authorize the Data Holder to send periodic newsletters.
Storage time
The personal data collected for the purpose referred to in letter (a) will be kept for a maximum period of 24 months from registration.
The personal data collected for the purposes referred to in letters (b) (c) will be kept for a maximum period of 10 years and 6 months from the purchase of the product. If no purchase is made, the data will be kept for 24 months.
The personal data collected for the purposes referred to in letter (d) will be kept, unless the consent is revoked, for a period of 24 months.
Lawfulness of data processing
The processing is lawful because it is based on the following legal bases:
Execution of the contract or pre-contractual measures adopted at the request of the interested party.
Consent of the interested party.
Methods of processing and place of storage
Personal data are processed for the pursuit of the purposes indicated in this information, both electronically and on paper.
To achieve the purposes set out in letters (b) and (c), the Data Holder makes use of the company The Rocket Science Group, LLC, with registered office in 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (Mailchimp) which could transfer data outside the European Economic Area. Mailchimp declares to adopt adequate guarantees for this transfer pursuant to Article 46 of the GDPR (Standard contractual clauses).
Mandatory or optional nature of providing data
The provision of data for the purpose referred to in letter (a) is mandatory and the refusal to provide them makes it impossible for the Data Holder to proceed with registration on the Site.
The provision of data for the Purposes provided for in letters (b) (c) is mandatory and the refusal to provide them will make it impossible for the owner to conclude the purchase.
The provision of data for the purpose referred to in letter (d) is optional and the refusal to provide the same will make it impossible for the owner to send the newsletter.
Categories of subjects to whom personal data may be disclosed
The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:
by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.
By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the fulfilment of legal obligations, and public administrations for their institutional purposes.
By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, data centers, IT consultants). The third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Holder and will in any case be appointed by the Data Holder, external data processors.
A list of data processors is available at the headquarters of the owner.
Disclosure of data
The data will not be disclosed in any case.
Rights of the interested party
The GDPR guarantees the data subject specific rights and the latter, for each treatment, can exercise the following rights:
Right of access: you have the right to obtain a copy of the personal data we are in possession of, and which are being processed.
Right to rectification: you have the right to rectify the personal data stored by the Data Holder if they are not updated or correct.
Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.
Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made based on exclusively automated processes, including profiling activity.
Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.
Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authority Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.
The Interested Party may also exercise the following rights under certain circumstances:
Right to erasure: may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions that require their continuation.
Right to object to processing: may request that the Data Holder cease to carry out a specific processing on personal data.
Right to limit the processing: has the right to request that the Data Holder limit the processing operations on the personal data of the interested party.
Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.
For each of the aforementioned rights, send an e-mail address or the following address specifying the request and send the Data Holder the information necessary for the correct identification of the holder, also attaching a copy of the identity document to the following addresses:
By mail: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano
By e-mail: privacy@woolfid.com
Woolf will respond within a month. If for some reason the Holder fails to respond, you will provide a detailed explanation as to why you cannot fulfill the request.
This information may undergo changes or additions over time; therefore, we invite you to periodically consult the website of the Data Holder – https://woolfid.com – to stay constantly updated.
Latest version November 2021
