Menu
Privacy Policy
This Privacy Policy is intended to describe how the website www.palazzomagnani.it is managed, with regard to the processing of personal data of users/visitors who access and browse it.
This Privacy Policy applies to the above-mentioned website and also to any other websites directly or indirectly owned by the organisation issuing this notice, which users may access via specific links.
The website www.palazzomagnani.it is owned and operated by FONDAZIONE PALAZZO MAGNANI (hereinafter referred to as the “Foundation”), which guarantees compliance with legislation on the protection of personal data. Users/visitors are required to read this Privacy Policy carefully before submitting any personal information and/or completing any electronic form available on the website.
If users/visitors, when accessing this website, voluntarily provide their personal data in order to access certain services or to submit requests by email, this entails the Foundation acquiring the sender’s email address and/or any other personal data provided. Such data will be processed exclusively for the purpose of responding to the request or providing the requested service, including through third-party companies with which the Foundation has entered into an agreement.
The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data which is implicitly transmitted through the use of Internet communication protocols. This includes information which, by its nature, could, through association and processing with data held by third parties, make it possible to identify users/visitors (e.g. IP address, etc.).
This data is used solely for statistical purposes (and is therefore completely anonymous) and to monitor the proper functioning of the website. It is retained for a period not exceeding three months. No data derived from the web service will be disclosed or disseminated.
With regard to cookies, please refer to the specific Cookie Policy.
The processing of personal data is carried out using automated means (e.g. electronic procedures and systems) and/or manually (e.g. paper-based records) for the time strictly necessary to achieve the purposes for which the data was collected and, in any event, in compliance with the applicable legislation.
Processing is carried out through operations or sets of operations including:
The above-mentioned information is processed automatically and collected exclusively in aggregate form in order to verify the proper functioning of the website and for security purposes.
Pursuant to Article 9(2) of EU Regulation 679/2016, the processing of such data may be considered lawful without the need to obtain the data subject’s consent, on the basis of the Data Controller’s legitimate interest in managing the website in question.
For security purposes (including anti-spam filters, firewalls and virus detection), automatically recorded data may be used, in accordance with applicable legislation, to block attempts to damage the website, cause harm to other users, or otherwise carry out harmful or criminal activities.
Such data is never used to identify or profile users, but solely for the purpose of protecting the website and its users.
Pursuant to Article 15 of EU Regulation 679/2016, data subjects have the right to access the personal data processed concerning them and, in particular, to obtain the rectification (Article 16), erasure (Article 17) or restriction of processing (Article 18) of such data, as well as the right to object to its processing and the right to data portability.
Pursuant to Article 15(3), the Data Controller shall provide a copy of the personal data undergoing processing. Where the data subject requests further copies, the Data Controller may charge a reasonable fee based on the administrative costs involved.
Pursuant to Article 19, the Data Controller shall communicate any rectification, erasure or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject of such recipients if the data subject so requests.
Where the website allows users to submit comments, messages, etc., it automatically detects and records certain identifying information concerning the user, including their email address.
Such data is deemed to have been voluntarily provided by the user when requesting the relevant service.
By submitting a comment or other information, the user expressly accepts this Privacy Policy and, in particular, consents to the dissemination of the submitted content to third parties.
Except as specified above in relation to browsing data, users/visitors are free to provide their personal data.
Failure to provide such data may result solely in the inability to obtain the information and/or advice requested.
The data referred to in Section 2 will be accessible to authorised persons responsible for processing and may be disclosed to external collaborators and, in general, to all parties whom the Foundation deems necessary for the proper fulfilment of the purposes set out herein.
The data provided by users on the website will not be disseminated directly by the Foundation unless expressly requested by the user.
Any information that users of the website choose to make publicly available through the services and tools provided to them is submitted knowingly and voluntarily by the user, who releases the website from any liability in relation to any breach of applicable laws.
Users are responsible for ensuring that they have the necessary permissions to submit personal data relating to third parties or content protected by national and international laws.
Any improper or fraudulent use of data provided to the Foundation by unauthorised third parties shall not be deemed to be the direct responsibility of the Foundation (see also the provisions concerning copyright and the use of website content).
Personal data may be stored in countries within the European Union, as guaranteed by the website management provider and other cloud service providers acting as data processors.
The processed data will be retained in IT systems and paper archives for a period of 10 years.
The Data Controller reserves the right to retain the data for a further period of 10 years for reasons connected with any legal disputes.
The right to erasure or to the anonymisation of data shall not apply where this would conflict with applicable legislation concerning corporate and administrative law.
The organisation does not use profiling systems aimed at managing or evaluating individuals.
IT systems are used for data management and may be regarded as automated processing systems. In particular, such data may be processed anonymously (e.g. through cookies), for which specific information is provided in the relevant Cookie Policy.
The Data Controller is Fondazione Palazzo Magnani, with registered office at Corso Garibaldi, 31 – 42121 Reggio Emilia, Italy.
Within the Foundation, personal data may be processed by employees acting as authorised persons under the direct authority of the Data Controller.
Pursuant to Article 15 of EU Regulation 679/2016, data subjects have the right to access the personal data processed concerning them and, in particular, to obtain the rectification (Article 16), erasure (Article 17) or restriction of processing (Article 18) of such data, as well as the right to object to its processing and the right to data portability.
Pursuant to Article 15(3), the Data Controller shall provide a copy of the personal data undergoing processing. Where the data subject requests further copies, the Data Controller may charge a reasonable fee based on the administrative costs involved.
Pursuant to Article 19, the Data Controller shall communicate any rectification, erasure or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject of such recipients if the data subject so requests.
Data subjects may exercise the above-mentioned rights by submitting a request to the Data Controller by email at info@palazzomagnani.it.
In accordance with EU Regulation 679/2016, the Data Controller shall respond to the request within 30 days.
Any data subject who believes that the processing of their personal data infringes EU Regulation 679/2016 has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place where the alleged infringement occurred.
Italian Data Protection Authority (Garante per la protezione dei dati personali): urp@gpdp.it Tel. URP: +39 06 69677 291
This Privacy Policy applies to the above-mentioned website and also to any other websites directly or indirectly owned by the organisation issuing this notice, which users may access via specific links.
The website www.palazzomagnani.it is owned and operated by FONDAZIONE PALAZZO MAGNANI (hereinafter referred to as the “Foundation”), which guarantees compliance with legislation on the protection of personal data. Users/visitors are required to read this Privacy Policy carefully before submitting any personal information and/or completing any electronic form available on the website.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Data voluntarily provided by users/visitors
If users/visitors, when accessing this website, voluntarily provide their personal data in order to access certain services or to submit requests by email, this entails the Foundation acquiring the sender’s email address and/or any other personal data provided. Such data will be processed exclusively for the purpose of responding to the request or providing the requested service, including through third-party companies with which the Foundation has entered into an agreement.
Browsing data
The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data which is implicitly transmitted through the use of Internet communication protocols. This includes information which, by its nature, could, through association and processing with data held by third parties, make it possible to identify users/visitors (e.g. IP address, etc.).
This data is used solely for statistical purposes (and is therefore completely anonymous) and to monitor the proper functioning of the website. It is retained for a period not exceeding three months. No data derived from the web service will be disclosed or disseminated.
With regard to cookies, please refer to the specific Cookie Policy.
METHODS OF PROCESSING
The processing of personal data is carried out using automated means (e.g. electronic procedures and systems) and/or manually (e.g. paper-based records) for the time strictly necessary to achieve the purposes for which the data was collected and, in any event, in compliance with the applicable legislation.
Processing is carried out through operations or sets of operations including:
- collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, disclosure and deletion of data;
- such operations may be carried out with or without the use of electronic or otherwise automated tools;
- processing is carried out by the Data Controller and/or by persons authorised to process personal data (including external parties).
PURPOSES OF PROCESSING OF BROWSING DATA
The above-mentioned information is processed automatically and collected exclusively in aggregate form in order to verify the proper functioning of the website and for security purposes.
Pursuant to Article 9(2) of EU Regulation 679/2016, the processing of such data may be considered lawful without the need to obtain the data subject’s consent, on the basis of the Data Controller’s legitimate interest in managing the website in question.
For security purposes (including anti-spam filters, firewalls and virus detection), automatically recorded data may be used, in accordance with applicable legislation, to block attempts to damage the website, cause harm to other users, or otherwise carry out harmful or criminal activities.
Such data is never used to identify or profile users, but solely for the purpose of protecting the website and its users.
ACCESS TO PERSONAL DATA
Pursuant to Article 15 of EU Regulation 679/2016, data subjects have the right to access the personal data processed concerning them and, in particular, to obtain the rectification (Article 16), erasure (Article 17) or restriction of processing (Article 18) of such data, as well as the right to object to its processing and the right to data portability.
Pursuant to Article 15(3), the Data Controller shall provide a copy of the personal data undergoing processing. Where the data subject requests further copies, the Data Controller may charge a reasonable fee based on the administrative costs involved.
Pursuant to Article 19, the Data Controller shall communicate any rectification, erasure or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject of such recipients if the data subject so requests.
PURPOSES OF PROCESSING OF DATA VOLUNTARILY PROVIDED BY USERS/VISITORS
Where the website allows users to submit comments, messages, etc., it automatically detects and records certain identifying information concerning the user, including their email address.
Such data is deemed to have been voluntarily provided by the user when requesting the relevant service.
By submitting a comment or other information, the user expressly accepts this Privacy Policy and, in particular, consents to the dissemination of the submitted content to third parties.
VOLUNTARY NATURE OF DATA PROVISION
Except as specified above in relation to browsing data, users/visitors are free to provide their personal data.
Failure to provide such data may result solely in the inability to obtain the information and/or advice requested.
DISCLOSURE OF DATA
The data referred to in Section 2 will be accessible to authorised persons responsible for processing and may be disclosed to external collaborators and, in general, to all parties whom the Foundation deems necessary for the proper fulfilment of the purposes set out herein.
DISSEMINATION OF DATA
The data provided by users on the website will not be disseminated directly by the Foundation unless expressly requested by the user.
Any information that users of the website choose to make publicly available through the services and tools provided to them is submitted knowingly and voluntarily by the user, who releases the website from any liability in relation to any breach of applicable laws.
Users are responsible for ensuring that they have the necessary permissions to submit personal data relating to third parties or content protected by national and international laws.
Any improper or fraudulent use of data provided to the Foundation by unauthorised third parties shall not be deemed to be the direct responsibility of the Foundation (see also the provisions concerning copyright and the use of website content).
TRANSFER OF DATA ABROAD
Personal data may be stored in countries within the European Union, as guaranteed by the website management provider and other cloud service providers acting as data processors.
RETENTION PERIOD FOR PERSONAL DATA
The processed data will be retained in IT systems and paper archives for a period of 10 years.
The Data Controller reserves the right to retain the data for a further period of 10 years for reasons connected with any legal disputes.
The right to erasure or to the anonymisation of data shall not apply where this would conflict with applicable legislation concerning corporate and administrative law.
EXISTENCE OF AUTOMATED DECISION-MAKING
The organisation does not use profiling systems aimed at managing or evaluating individuals.
IT systems are used for data management and may be regarded as automated processing systems. In particular, such data may be processed anonymously (e.g. through cookies), for which specific information is provided in the relevant Cookie Policy.
DATA CONTROLLER AND DATA PROCESSORS
The Data Controller is Fondazione Palazzo Magnani, with registered office at Corso Garibaldi, 31 – 42121 Reggio Emilia, Italy.
Within the Foundation, personal data may be processed by employees acting as authorised persons under the direct authority of the Data Controller.
RIGHTS OF DATA SUBJECTS
ACCESS TO PERSONAL DATA
Pursuant to Article 15 of EU Regulation 679/2016, data subjects have the right to access the personal data processed concerning them and, in particular, to obtain the rectification (Article 16), erasure (Article 17) or restriction of processing (Article 18) of such data, as well as the right to object to its processing and the right to data portability.
Pursuant to Article 15(3), the Data Controller shall provide a copy of the personal data undergoing processing. Where the data subject requests further copies, the Data Controller may charge a reasonable fee based on the administrative costs involved.
Pursuant to Article 19, the Data Controller shall communicate any rectification, erasure or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject of such recipients if the data subject so requests.
HOW TO EXERCISE YOUR RIGHTS
Data subjects may exercise the above-mentioned rights by submitting a request to the Data Controller by email at info@palazzomagnani.it.
In accordance with EU Regulation 679/2016, the Data Controller shall respond to the request within 30 days.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Any data subject who believes that the processing of their personal data infringes EU Regulation 679/2016 has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place where the alleged infringement occurred.
Italian Data Protection Authority (Garante per la protezione dei dati personali): urp@gpdp.it Tel. URP: +39 06 69677 291
