Privacy Settings
This website uses cookies to improve your experience while you navigate through the website.
Legal document · Updated October 5, 2026
This policy explains what personal data is collected through the site www.marcobrustia.com
(including the section Wood You, i custom configurators and the English version /en/), why they are processed and what rights you can exercise. It is drafted pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 (Personal Data Protection Code), as amended by Legislative Decree 101/2018.
Index: 1 Owner · 2 Collected data · 3 Purpose and legal basis · 4 Provision · 5 Recipients and third-party services · 6 Transfers outside the EU · 7 Storage · 8 Rights · 9 Minors · 10 Security · 11 Changes
The data controller is Marco Brustia, sole proprietorship, which also operates under the brand Wood You, with headquarters in Via Arturo Benedetti Michelangeli 5, 25020 Gambara (BS), Italy — VAT number 04398910986 — REA BS-611658.
For any request regarding your personal data, write to marco.brustia.amazon@gmail.com · PEC: marco.brustia.amazon@pec.it.
A Data Protection Officer (DPO) has not been appointed, as the legal requirements for this are not met (Article 37 GDPR).
The site does not have contact forms, newsletters, comments, or areas for visitor registration. The only form is the Wood You configurator order form, described below. The following data is processed:
Browsing data. For technical and security purposes, the server hosting the site records your IP address, date and time of the request, page requested, browser, and operating system. These are technical logs and are not used to identify you.
Data you send us. If you write to us via email, WhatsApp, or Telegram using the contact information published on the Contact page or in the footer, we process your name, the contact information you use, and what you choose to write or attach.
Orders from Wood You configurators (/woodyou/custom-made/). To order, fill out your name, email address, phone number, delivery address, and any notes, and check the box indicating that you have read this policy. When you click "Order on WhatsApp" or "Order on Telegram," the configurator sends this data, the chosen configuration with the quote, and the production files generated by the configurator (cutting files, PDF quote and instructions, images of the 3D model) to our server. The IP address from which the order originates is not saved with the order. The server uses this data to create your order page, emails you the quote, instructions, and a personal link to the page, and notifies the workshop. Immediately afterward, a chat (WhatsApp or Telegram, your choice) opens with a summary.
Photo to be engraved. If you choose the "Engraved Image" option, the original photo remains in your browser. When you order, the cutting file that comes with the order contains the version prepared for engraving (black and white, halftone, or grayscale), which can also appear in 3D model images. If you need a full-quality photo, you can send it in the chat. If other people appear in the photo, make sure you have their consent.
Estimate for pastry boards (/3d-configurator/). The technical PDF is generated in your browser; the logo you upload remains in your browser's memory. Pressing "Request a quote" opens Telegram with a pre-populated message (name, measurements, options): you decide whether to send it. If you open the page within Telegram, the configurator reads your name from Telegram to compile the message.
Payments. Wood You custom orders and services purchased through this site are paid after confirmation in chat, with bank transfer to an account at Banca Monte dei Paschi di Siena: to process this, we process the data appearing on the transfer (name of the payer, amount, reason for payment). The site does not receive or store payment card data. Purchases in apps, websites, and PWAs are made on sevensounz.com and are governed by that site's privacy policy.
Shipping. To ship custom orders we use We shipPro, who entrusts the package to the courier chosen for shipping: they receive the recipient's name, delivery address, telephone number and email address, which are necessary for delivery.
Visit statistics. Only if you accept them from the banner, a Metricool script collects data on visits (page viewed, origin, device, country derived from the IP address), which we consult in aggregate form.
Embedded content. The podcast player (Spotify) on the Podcasts page only loads if you request it with the appropriate button or if you accept it from the banner, because Spotify installs its own cookies.
Local technical preferences. The site saves your accessibility preferences, page width, and background music settings in your browser (localStorage), as well as your banner ad choices in a technical cookie. These are not tracking tools: details are in the Cookie Policy.
Site Assistant. The "chat" box at the bottom responds with pre-written texts, searching for keywords in your question directly in the browser: what you write is not sent to anyone and is not saved.
Purchases on Amazon. Wood You products in the catalog can be purchased on the Amazon store: there, Amazon processes your data as an independent controller, according to its privacy policy.
The site does not use your data for profiling or automated decision-making (Article 22 GDPR).
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Provide the site and keep it secure and functional | Legitimate interest — art. 6.1.f |
| Respond to requests received via email, WhatsApp, or Telegram | Pre-contractual measures at your request — art. 6.1.b |
| Prepare the quote, receive and manage the order from the configurator, produce and ship | Performance of the contract or pre-contractual measures — art. 6.1.b |
| Email you a quote, instructions, and link to the order page | Performance of the contract — art. 6.1.b |
| Collect payments and fulfill tax and accounting obligations | Contract Performance and Legal Obligation — Art. 6.1.b and 6.1.c |
| Visit statistics with Metricool | Consent — art. 6.1.a (revocable at any time) |
| Play the podcast with the Spotify player | Consent — art. 6.1.a |
| Defending a right in the event of a dispute | Legitimate interest — art. 6.1.f |
Providing your data is voluntary. We cannot respond to your contact information without your contact information. For orders, your name, email address, phone number, and address are required; without them, we cannot prepare, confirm, and ship the product. Opting out of statistics or the Spotify player does not limit your use of the site: podcast episodes can also be listened to via the site's player.
We do not sell, rent, or distribute personal data. Only service providers necessary for the service may access it, as data processors (Article 28 GDPR) or as independent controllers:
Some providers (Google, Cloudflare, jsDelivr, Spotify, Meta, Telegram) may also process data outside the EEA. The transfer is based on an adequacy decision by the European Commission—for the United States, the EU-US Data Privacy Framework, for certified providers—or on the Standard Contractual Clauses approved by the Commission (Article 46 GDPR). For Telegram, which is based outside the EU, the transfer of order data is necessary for the performance of the contract (Article 49.1.b GDPR).
After these terms, the data is deleted or made irreversibly anonymous.
You can exercise the rights provided for in Articles 15-22 of the GDPR at any time:
To exercise them, write to marco.brustia.amazon@gmail.com or to the PEC marco.brustia.amazon@pec.itWe respond within 30 days. If you believe the processing violates the law, you can lodge a complaint with the Guarantor for the protection of personal data, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it — or to the authority of the EU country where you live or work.
The site is not intended for children under 14, and we do not knowingly collect data about them. Orders from configurators are reserved for adults.
The site uses an encrypted HTTPS connection. The folder where the server stores orders is not accessible from the web. The page for each order is not indexed by search engines: the address alone displays the order number, product, initials, and total; the quote, configuration, shipping address, and files can only be accessed with the personal code contained in the link you receive by email. Access to the site administration is protected by credentials.
We may update this policy to reflect new site features or regulatory changes. The version published on this page, with the update date indicated at the top, always applies.
See also the Cookie Policy.
Privacy Settings
This website uses cookies to improve your experience while you navigate through the website.