Privacy & Cookie Policy – Woody Film Srl

Privacy Policy pursuant to Art. 13 of Regulation (EU) 2016/679 – GDPR

This notice is provided in accordance with Art. 13 of Regulation (EU) 2016/679 (“GDPR”) and is intended for all users interacting with the web services of **Woody Film Srl**, accessible electronically from the address: www.woody.film, the company’s main domain, as well as through the redirect domains www.woodyfilm.com and woodyfilm.it.

1) Data Controller

Woody Film Srl
Registered office: Via Pasquale Revoltella, 27 – 00152 Rome (RM) – Italy
Tax Code/VAT: 17642791002
Email: info@woody.film

2) Types of Data Collected

– Navigation data: IP address, browser type, operating system, domain name, and addresses of websites from which access was made, information about the pages visited by users, access time, time spent on each page.
– Data voluntarily provided by the user: personal and contact information (name, surname, email, phone), content of any messages.
– Cookies: technical, analytical (with anonymized IP), profiling cookies (where applicable).

3) Purpose and Legal Basis for Processing

a) Website navigation:
– Purpose: ensure the proper functioning of the site, system security, anonymous usage statistics, identification of responsibilities in case of cybercrimes.
– Legal basis: legitimate interest of the data controller – Art. 6, par. 1, letter f) GDPR
– Retention: 30 days from access logs.

b) Management of requests submitted via contact form or email:
– Purpose: respond to requests voluntarily submitted by users.
– Legal basis: performance of pre-contractual measures – Art. 6, par. 1, letter b) GDPR
– Retention: for the time necessary to respond to the request.

c) Facebook page management (and other social media):
– Purpose: interaction with users and collection of aggregate statistics through the Insights tools provided by Meta Platforms Ireland Ltd.
– Legal basis: legitimate interest – Art. 6, par. 1, letter f) GDPR
– Joint control: Woody Film Srl and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR for data collected through Insights.
– Additional information: www.facebook.com/privacy/explanation

d) IT infrastructure management:
– Purpose: security, backup, maintenance, and operational continuity of IT systems
– Legal basis: legitimate interest – Art. 6, par. 1, letter f) GDPR
– Retention: for the entire duration of the relationship and as required by law.

4) Nature of Data Provision

– The provision of data for technical or contractual purposes is mandatory; failure to provide such data will prevent proper use of the site.
– The provision of data for contact purposes is optional, but failure to provide it will result in the inability to receive a response.

5) Processing Methods

Processing will be carried out using electronic and manual tools, strictly related to the purposes stated, adopting adequate measures to ensure data security.

6) Data Communication and Recipients

Data may be communicated to:
– Authorized internal personnel;
– External parties appointed as Data Processors pursuant to Art. 28 GDPR (e.g., hosting providers, IT agencies, companies managing web services);
– Public authorities or legitimate recipients, as required by law.

Personal data may be processed by parties designated as Data Processors, pursuant to Art. 28 GDPR, including but not limited to: IT service providers, hosting services, external consultants, and companies responsible for website maintenance.

7) Transfer Outside the EU

Data will not be transferred outside the European Economic Area (EEA). If necessary, the transfer will take place in accordance with the guarantees provided by the GDPR (e.g., standard contractual clauses).

8) Cookies

The use of cookies by the site is governed by the Cookie Policy, which is an integral part of this privacy notice. Cookies may be:
– Technical (essential for operation);
– Analytical with anonymized IP (e.g., Google Analytics);
– Third-party cookies, configurable through the cookie banner.

9) Data Subject Rights

Pursuant to Articles 15 and following of the GDPR, the data subject has the right to:
– Access their personal data;
– Obtain rectification or deletion;
– Obtain restriction of processing;
– Object to processing;
– Receive data in a structured format (portability);
– Withdraw consent at any time (where applicable);
– File a complaint with the Data Protection Authority: www.garanteprivacy.it.

To exercise these rights, you can write to: info@woody.film

10) Updates

This privacy notice may be subject to changes. Updates will be published on this page.