Privacy policy
Last updated: July 2026
At Woobik Studio we take your privacy seriously. This policy explains clearly what personal data we process, for what purpose, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian personal data protection code (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).
1.Data controller
- Controller: Pedro Henrique Silva Cordeiro (Woobik Studio)
- Registered address: Via Barberini, 54 – 61040 Monte Porzio (PU), Italy
- VAT number (Partita IVA): IT 02692610419
- Contact email: admin@woobik.com
No Data Protection Officer (DPO) has been appointed, as the circumstances requiring one under Article 37 of the GDPR do not apply. For any matter relating to data protection, you may contact the controller directly at the address indicated.
2.Personal data we process
Depending on your interaction with the Site, we may process the following categories of data:
- Identification and contact data: name, email address and any information you choose to include in the message of the contact form.
- Browsing data: IP address (anonymised), browser and device type, operating system, pages visited and interaction data, collected through analytics cookies subject to prior consent.
- Technical security data: server logs generated automatically for security and proper operation purposes.
We do not process special categories of data (Article 9 GDPR) nor data relating to criminal convictions or offences.
3.Purposes and legal basis of the processing
| Purpose | Data | Legal basis (Article 6 GDPR) | Retention |
|---|---|---|---|
| Handling and managing enquiries sent through the contact form | Name, email, content of the message | Consent of the data subject (Art. 6(1)(a)) | Up to 12 months after the enquiry is resolved, unless a longer legal retention obligation applies |
| Ensuring the security, integrity and proper operation of the Site | Anonymised IP, server logs | Legitimate interest of the controller (Art. 6(1)(f)) | Maximum 12 months |
| Analysing use of the Site in aggregate form to improve content and experience | Browsing data via analytics cookies with anonymised IP | Consent of the data subject (Art. 6(1)(a)), given via the cookie banner | As detailed in the Cookie Policy |
4.How do we obtain your data?
Data is obtained directly from the data subject when they use the contact form or give their consent to analytics cookies. We do not obtain data from external sources nor acquire third-party databases. Providing the form data is voluntary; however, refusal to provide the data marked as mandatory will make it impossible to handle the enquiry.
5.Retention periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to determine any liabilities arising from those purposes. Once the indicated periods have elapsed, the data will be securely erased or anonymised, unless its retention is required by law.
6.Recipients and processors
Your personal data is not disclosed to third parties, except where required by law. In order to provide certain services, the controller relies on suppliers acting as data processors, with limited access to the data and bound by contract in accordance with Article 28 of the GDPR:
- Hetzner Online GmbH — hosting and server infrastructure services. Location: European Union (Germany). GDPR-compliant.
- Google Ireland Ltd — web analytics service (Google Analytics), only if you give your consent. Data processed with anonymised IP and without advertising remarketing purposes.
7.International data transfers
As a general rule, data is processed on servers located within the European Economic Area (EEA). Should any supplier (for example, Google) carry out processing outside the EEA, such transfers will be covered by the safeguards provided for by the GDPR, such as adequacy decisions of the European Commission or Standard Contractual Clauses (SCC).
8.Automated decision-making and profiling
No automated decisions producing legal effects on the data subject are taken, nor is profiling carried out for marketing purposes.
9.Security measures
The controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR: encryption of communications via TLS/HTTPS, data minimisation, access control, regular backups and hosting in certified European data centres.
10.Your rights
As a data subject, the legislation grants you the following rights, which you may exercise free of charge:
- Access: to know whether we process your data and to access it.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request the deletion of your data («right to be forgotten»).
- Restriction: to request the restriction of processing in certain circumstances.
- Objection: to object to processing based on legitimate interest.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent: to withdraw your consent at any time, without affecting the lawfulness of the previous processing.
To exercise these rights, send a request to admin@woobik.com, indicating the right you wish to exercise. We will respond within a maximum period of one month.
11.Complaints to the supervisory authority
If you believe that the processing of your data does not comply with the legislation, you have the right to lodge a complaint with the competent supervisory authority. In Italy, that authority is the Garante per la Protezione dei Dati Personali (garanteprivacy.it). You may also contact the data protection authority of your country of residence within the EU.
12.Data of minors
The Site and its services are intended for persons over 14 years of age, the minimum age established by Italian legislation for giving consent in the information society. If we detect that we have collected data from a minor without the consent of their parents or guardians, we will proceed to delete it immediately.
13.Cookies
The Site uses first-party and third-party cookies. For detailed information on their type, purpose and management, please consult our Cookie Policy.
14.Changes to this policy
The controller may update this privacy policy to adapt it to legislative or functional developments. Any changes will be published on this page with an indication of the date of last update. We recommend that you review it periodically.