Privacy Policy - Museo Bodoniano

Fondazione Museo Bodoniano take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the Italian and European Union statutory data protection regulations and the most recognized international standards. This privacy policy complies with Italian D.Lgs. 196/2003 and EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

1. PREMISES
The Information provided below, as required by artt. 13 e 14 of the EU Regulation 2016/679, describes the processing operations performed on the personal data of the users visiting our website www.museobodoniano.it, our social media pages/profiles and access to our informative services and contents (newsletter).
The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above websites but relate to resources outside the Fondazione Museo Bodoniano domain.

2. DATA CONTROLLER
The data controller is Fondazione Museo Bodoniano, located in Strada alla Pilotta 3, 43100 Parma – ITALIA, – C.F. 80008530349 (tel.+39 0521 220454 – Email: info@museobodoniano.it).

3. CATEGORIES OF PERSONAL DATA AND LEGAL BASIS FOR THE PROCESSING
Data controller services are not addressed to people under 18 and the Data Controller does not intentionally collect data about children or other sensitive data. In the eventuality such data would be unintentionally recorded, the DC will immediately remove them upon user request.

3.1. Data actively provided by the user
Newsletter subscription, sending messages to Fondazione Museo Bodoniano’s contact addresses and social media pages/profiles and filling in and sending the forms made available on the websites entail the acquisition of the sender’s contact information as necessary to provide a reply as well as of any and all the personal data communicated in that manner.
Such data are actively, voluntarily and freely communicated by the user so their processing is based on data subject’s consent as defined in art. 6, par. 1, lett. A GDPR.

3.2. Browsing data
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.

This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/ Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are necessary to use web-based services and are also processed in order to
• extract statistical information on service usage (most visited pages, visitors by time/ date, geographical areas of origin, etc.);
• check functioning of the services.
Browsing data are kept for no longer than seven days and are erased immediately after being aggregated (except where judicial authorities need such data for establishing the commission of criminal offences).
The basis for data processing is Art. 6, par. 1, lett. B GDPR.

3.3. Cookies and other tracking devices
No cookies are used to profile users nor are other user tracking systems implemented.
So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing. Storage of session cookies in terminal equipment or browsers is under the user’s control, whilst cookie-related information is stored server-side after HTTP sessions in the service logs for no longer than seven days like all other browsing data.
The basis for data processing is Art. 6, par. 1, lett. F GDPR.

4. PURPOSES OF THE PROCESSING
We process your personal data for the purpose of providing Fondazione Museo Bodoniano online services informative contents and functions and to allow and administer your use of that services and contents.

5. PROCEDURES FOR DATA PROCESSING
You data could be processed by paper-based, computer-based or electronic archives (including handheld devices) with rules and procedures strictly necessary to the indicated purpose. Fondazione Museo Bodoniano take care the processing by electronic means minimizes the use of personal and identifying data, restricting the procedures to that strictly necessary to the purpose for which they have been collected.
Specific security measures are adopted to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access in accordance of art. 5 par. 1 lett. F GDPR.

6. DATA DISCLOSURE
Your data could be communicated by transmission to processors, external collaborators and, in general, to whom the communication of data are necessary for the correct fulfilment of purpose as described in point 4.
We do not disseminate your data nor such data are involved in automatic processing, including profiling.

7. DATA TRANSFER
Your data may be transferred to subjects located in or outside UE in connection with your use of our services and only for the purpose of such services (such as IT service or mailing providers).

8. DATA RETENCTION
We retain your personal data for the time necessary for the purpose for which they were collected or otherwise processed.

In every moment you can request the data you communicated to receive our newsletter or other informative content to be erased, using the “unsubscription” command in the footer of the communication.

9. DATA SUBJECTS’ RIGHTS
Under applicable data protection law you may have the right to:
• obtain from Fondazione Museo Bodoniano the access, rectification, erasure, restriction and objection to your personal data processing;
• obtain from Fondazione Museo Bodoniano the data portability concerning personal data, which you actively provided by electronic means in order to transfer them to another data controller;
• withdraw your consent without affecting the lawfulness of processing based on the consent before its withdrawal;
• to lodge a complaint with the Italian data protection authority pursuant to Article 77 of the Regulation.
You can exercise any of your above mentioned data privacy related rights sending a registered letter to the data controller pec address … or to Fondazione Museo Bodoniano – in Strada alla Pilotta 3, 43100 Parma – ITALIA.