Privacy Policy - WOMA Forum

PRIVACY POLICY

PURSUANT TO ART. 13 et seq. EU Regulation 679/16 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”)

This Privacy Policy is intended for visitors to the website https://womaforum.com/ (hereinafter “Site”) owned by WOMA Srl who consult or interact with the Site and to users of the products and services offered by WOMA Srl (hereinafter “Users”).

This Privacy Policy indicates which Personal Data is collected, for what purposes and how it is processed.

Personal Data means any information or piece of information that could be directly (e.g., a name) or indirectly (e.g., a unique identification number) linked to the User.

This document can be printed using the print command in the settings of any browser.

This Privacy Policy explains:

who is the Data Controller;
what Personal Data is collected;
the methods of collecting personal data;
the purposes and on what legal basis the Personal Data are used;
how long the Personal Data is retained;
with whom the Personal Data is shared;
the countries to which Personal Data may be transferred;
rights in relation to personal data.

1. Data Controller

WOMA Srl (VAT number: 14051850965), with registered office at Via Felice Casati, 32, 20124, Milan (MI), is the Data Controller and can be contacted at the email address info@womaforum.com.

2. Types of Data Collected

The Data collected through the Site and the ways in which they are processed depend on the products the User purchases or the services requested or how he or she interacts with the Site.

The Personal Data that is collected and processed may include:

basic information: name, surname, age or date of birth;
Contact information: information that allows us to contact you, such as your personal or business email address, telephone number, postal address, physical address, company name, VAT number, tax code, country, postal code;
Technical and network activity information: information about your device used to browse the web and use the Site, applications, and systems, including your IP address, device number, hardware model and version, mobile network information, operating system, and other online identifiers, browser type, browsing history, search history, access times, pages viewed, URLs visited, forms submitted, and physical location;
use of the product: Data relating to the purchase of the products offered, purchase history, interactions with the Site, preferences regarding the methods of communication with the Owner and the services used;
payment data: financial information on the credit or prepaid cards used by the User, on the PayPal or Apple Pay account if the User chooses these payment methods for the products or services offered by the Site, or financial information relating to additional payment methods used by the User;
Cookies and browsing data: We place technical cookies on your device to enable navigation on the Site and, with your consent, profiling cookies to learn how you use our websites so we can personalize what you see and tailor the content to your interests. For more information on how cookies work and how to enable and disable them, please see our Cookie Policy, which forms an integral part of this Policy.
Information regarding the processing of personal data through the social media platforms used by the Data Controller: The Site contains links to WOMA Srl’s profiles on Instagram and LinkedIn. By clicking on these links, the User will be redirected to a third-party platform (Instagram or LinkedIn), which may process the personal data as an independent data controller.

This policy does not apply to data processing carried out by or through third-party websites linked to the Site, as the Data Controller has no influence or control over their configuration and content. For more information on the processing of personal data by Instagram and LinkedIn, please consult their respective privacy policies, available at the following links: https://privacycenter.instagram.com/policy and https://www.linkedin.com/legal/privacy-policy .

The Data Controller processes the Personal Data provided by users through the pages of WOMA Srl’s Social Media platforms exclusively to manage interactions with Users (comments, public posts, etc.) and in compliance with current legislation.

The User may choose not to provide their Personal Data when requested. Failure to provide Personal Data may limit the User’s experience on the Site. For example, the Data Controller may not be able to provide the services offered by the Site.

The User’s Personal Data may be processed using manual or electronic means, suitable for guaranteeing security, confidentiality, and preventing unauthorized access.

The User assumes responsibility for the Personal Data of third parties published or shared through the Site.

3. Methods of collecting personal data

The Data Controller obtains the User’s Personal Data when the latter:

browse the Site;
registers to purchase products and/or use services;
use your company signature or other third-party authentication service (e.g., Microsoft, Google sign-in page) to gain access to the Site;
communicate and send your email to receive promotional material;
Contact support or leave a review.

4. Purpose and legal basis of the processing

The User’s Personal Data is processed by the Data Controller for the following purposes:

Manage and finalize the purchase requested by the User and the related services requested in connection with the purchase (e.g. transmission of purchased products, sending payment receipts, management of purchases).

The legal basis for the processing is the implementation of pre-contractual and contractual measures at the request of the data subject pursuant to Art. 6, paragraph 1, letter b, EU Regulation. Providing the Data is necessary; therefore, failure to provide the requested Personal Data will make it impossible to perform the contract.

Provide the User with the Products and Services offered by the Site.

Manage User registration on the Site.

Identify the User and authenticate his/her access rights to the Site, including through services managed by third parties, where applicable, in order to allow access to restricted features of the Site.

Carry out compliance with legal and accounting obligations.

The legal basis for processing is the need to fulfill a legal obligation to which the Data Controller is subject pursuant to Art. 6, paragraph 1, letter c, EU Regulation.

Send the User commercial communications about goods or services similar to those already purchased (so-called soft spam) or invite him or her to leave a review, participate in research or surveys, as well as perform market analysis and research and segmentation.

The legal basis is the legitimate interest of the Data Controller pursuant to art. 6, paragraph 1, letter f, of the EU Regulation, in order to improve the services offered and the quality of the products.

Carry out commercial and promotional activities such as sending newsletters, information and promotional materials on products, special initiatives and/or promotions, or invitations to participate in events via traditional mail and/or email, including with the aid of external platforms and integrated third-party services.

The legal basis for processing is the User’s explicit consent pursuant to Art. 6, paragraph 1, letter a, of the EU Regulation, granted by checking the appropriate box after carefully reading this Privacy Policy. The User’s consent may be revoked at any time.

Personalize the User’s experience when interacting with the Site through commercial profiling, performed both with human intervention and in automated mode based on the User’s needs and habits.

We will also use your Personal Data to:

To respond to requests from competent public authorities.

The legal basis for processing is the need to fulfill a legal obligation to which the Data Controller is subject pursuant to Art. 6, paragraph 1, letter c, EU Regulation.

To inform you about changes to our terms and conditions.

The legal basis for the processing is the implementation of pre-contractual and contractual measures at the request of the data subject pursuant to Art. 6, paragraph 1, letter b, EU Regulation and/or the need to fulfill a legal obligation to which the Data Controller is subject pursuant to Art. 6, paragraph 1, letter c, EU Regulation.

To investigate and take action against illegal or harmful behavior by users or to defend a right of the Owner before a judicial authority or elsewhere.

The legal basis for the processing is the legitimate interest of the Data Controller pursuant to Art. 6, paragraph 1, letter f, of the EU Regulation, aimed at protecting its own interests or those of third parties (such as other users).

5. Period of retention of personal data

The personal data of Users undergoing processing is retained only for the time strictly necessary to complete the activities and purposes described above and, in any case, in accordance with applicable legislation. Personal data will be retained only for the time necessary to ensure the proper provision of the services offered through the Site. At the end of the retention period, the personal data will be deleted.

For marketing and profiling purposes, we will retain User Data until consent is revoked. Any personal data provided by the User for the following purposes:

– marketing will be kept for a maximum of 24 months,

– profiling will be kept for 12 months

starting from the date of the User’s last recorded interaction with the email sent for marketing or profiling purposes (e.g., clicking and opening), unless consent is previously revoked.

We will retain Personal Data for 10 (ten) years following the purchase requested by the User and related services, if this is necessary to comply with a legal obligation or to defend the Data Controller’s rights before a judicial authority. To comply with further legal obligations or orders from public authorities, we may be required to retain User Data for the entire period required by the applicable legislation.

As required by Article 2220 of the Civil Code, invoices, as well as all accounting records in general and payment data, are kept for a minimum period of ten years from the date of registration, so that they can be presented in the event of an audit.

To comply with further legal obligations, orders from public authorities, or to defend a right of the Data Controller before a judicial authority, we may be required to retain User Data for the entire period required by the applicable legislation.

6. Communication and dissemination of personal data

Users’ personal data is accessible to the relevant personnel assigned to the Service requested by the User and to external data processors (e.g., IT consultants). The data may also be disclosed to the following categories of parties:

Public and private entities for the fulfillment of legal obligations.
Providers of tax and legal assistance and consultancy services.
IT service providers including software or storage support.
Third-party companies providing the online payment system.

Specifically, the Data Controller uses third-party payment systems to assist the User in the secure processing of personal payment information. The use of Personal Data by these third-party processors is governed by their respective privacy policies, which may or may not contain privacy protections such as this Privacy Policy. Payments are currently processed and handled using the third-party provider selected at checkout. Please refer to the privacy policy of the selected payment processor for further information.

Third-party companies hired to provide support for specific features such as managing registration forms, sending newsletters, registration/authentication, and viewing external content. This includes, but is not limited to:
The Rocket Science Group LLC (provider of Mailchimp and Mailchimp OAuth services);
Google Ireland Limited (provider of the Google Fonts service);
Fonticons, Inc. (provider of the Font Awesome service). [CB1]

In any case, the Personal Data will not be disclosed, except as required by law or with the express consent of the interested party.

We inform you that we may share your data with third-party companies in the event of mergers, acquisitions, transfers of businesses or business units, or other extraordinary transactions; professionals, independent contractors, including associates, and business partners (i.e., third parties who provide commercial, professional, and technical services for the management of the Site and the pursuit of the purposes specified above).

7. Transfer of Personal Data

To achieve the purposes of the processing, or to provide the User with the Services offered by the Site, Personal Data may be transferred to countries outside the European Economic Area.

We inform you that this transfer of personal data may be risky as the Court of Justice of the European Union has held that US domestic law does not meet requirements substantially equivalent to those required by European Union law, especially due to certain programs that allow US public authorities to access personal data transferred from the European Union to the United States for national security purposes.

By accepting this Privacy Policy, you express your specific and informed consent to the transfer of your data to the United States and declare that you are aware of the risk of such transfer.

8. Rights of interested parties

You are entitled to exercise the rights set forth in Articles 12 et seq. of the GDPR, in particular:

– the right to access Personal Data contained in the Data Controller’s paper and/or electronic archives;

– the right to request rectification, updating, and deletion of your data if it is incomplete or incorrect, as well as to object to its processing for legitimate and specific reasons;

– the right to obtain the rectification of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement;

– the right to obtain the erasure of personal data concerning him or her without undue delay if one of the grounds set forth in Article 17, paragraph 1 of the GDPR applies;

– the right to obtain restriction of processing when one of the conditions set out in Article 18, paragraph 1 of the GDPR applies;

– the right to data portability within the limits and in the manner established by Article 20 of the GDPR and the Guidelines on Data Portability;

– the right to lodge complaints with the competent Authority.

The relevant requests must be brought to the attention of the Data Controller, via an email to: info@womaforum.com .

Upon the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details.

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application. Therefore, please check this page frequently, referring to the last modification date indicated at the bottom.

Last modified: September 3, 2025