NOTICE REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 | |
DATA CONTROLLER | Fondazione Palazzo Te +more information |
PURPOSES | a. Pre-contractual and service provision purposes; b. Marketing purposes; c. Commercial purposes related to online purchases. + more information |
LEGAL BASIS | a. Performance of a contract; b. Consent. +more information |
RECIPIENTS OR CATEGORIES OF RECIPIENTS | a. Hosting service providers; b. Marketing and advertising service providers. +more information |
CATEGORIES OF PERSONAL DATA PROCESSED | Email address, first name, last name, location, age, language, email provider, web browser type, IP address, images, photos. |
TRANSFER OF DATA TO THIRD COUNTRIES | United States. |
DATA RETENTION CRITERIA | Criteria used to determine the retention period of the data. +more information |
DATA SUBJECT’S RIGHTS | Access, rectification, deletion of data, and other rights detailed in the extended notice and provided by EU Regulation 2016/679. +more information |
EXTENDED NOTICE | You can consult the extended notice with detailed information at the following link: https://www.centropalazzote.it/privacy-cookies-policy/ |
COOKIES POLICY | Consult the extended notice +more information |
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER:
- Identity: FONDAZIONE PALAZZO TE
- Address: Viale Te, 19 – 46100 Mantova
- Email Address: segreteria@fondazionepalazzote.it
PURPOSES OF DATA PROCESSING
- A. Pre-contractual purposes
We will process your personal data for pre-contractual purposes. The data processing will be necessary to provide you with responses regarding our services and the related contracts. Personal data will be collected through the contact and registration forms available on the website. Specifically, personal data will be processed to:
o Allow you to use the website and its functionalities;
o Enable your registration on the platform, community, and interaction with content provided by the Data Controller;
o Allow you to contact us through the website to request information about the Foundation’s activities. - B. Marketing purposes
With your consent, we will process your personal data for direct marketing purposes by sending commercial communications. This processing will be carried out in accordance with EU Regulation 2016/679 and Directive 2002/58/EC. You can withdraw your consent to receive such communications at any time by opting out via the link provided in each email or by contacting us at the following email address: segreteria@fondazionepalazzote.it. - C. Commercial purposes related to online purchases
LEGAL BASIS FOR PROCESSING
- A and C. Processing data for the performance of pre-contractual measures or contractual obligations
Pursuant to EU Regulation 2016/679, any processing we carry out must have a legal basis. The processing of your data is necessary for the performance of pre-contractual measures or contractual obligations. Your personal data will therefore be retained for the time strictly necessary to achieve the purpose and then deleted, as further explained in the “Data Retention Criteria” chapter. Failure to provide data will make it impossible for us to provide the requested services. - B. Consent
We will ask for your consent to process your personal data for direct marketing purposes, sending you commercial communications via email. You will always have the opportunity to object to this processing by withdrawing your consent either by sending us a communication at segreteria@fondazionepalazzote.it, by accessing the control panels provided by the automated marketing service providers listed in the relevant “RECIPIENTS OR CATEGORIES OF RECIPIENTS” section, or by not receiving further commercial emails by directly clicking the unsubscribe link (“unsubscribe”) found at the bottom of each received email. In case of withdrawal of consent, data processing for this purpose will cease immediately.
RECIPIENTS OR CATEGORIES OF RECIPIENTS
To provide services, allow you to use the website, and for our marketing purposes, we may share your data with the following recipients:
- Hosting service providers
The website hosting service is managed by Hetzner Online GmbH Industriestr. 25 91710, Gunzenhausen, Germany (“Data Processor”). Pursuant to EU Regulation 2016/679 General Data Protection Regulation (“the GDPR”) (Article 28, paragraph 3), the Data Controller is required to enter into a written agreement between the Data Controller and any organization processing personal data on its behalf. We have electronically signed a Data Processing Agreement (DPA) to ensure compliance with the obligations set forth by the regulation. For more information on the data processing methods performed by the data processor, please visit the privacy policy available at the following link: https://www.hetzner.com/rechtliches/datenschutz
- Automated marketing system providers
The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA (“Mailchimp“). The Rocket Science Group owns an automated marketing platform known as “MAILCHIMP.” Newsletters and communications will be sent using the Mailchimp platform. Mailchimp’s service provision involves processing personal data on behalf of the Data Controller. Pursuant to EU Regulation 2016/679 General Data Protection Regulation (“the GDPR”) (Article 28, paragraph 3), the Data Controller is required to enter into a written agreement between the Data Controller and any organization processing personal data on its behalf. Therefore, the Data Controller has entered into a data processing agreement with MailChimp (“Data Processor”) to ensure compliance with the aforementioned GDPR provisions concerning all personal data processing activities carried out by the Data Processor. You can find more information on how Mailchimp processes personal data at the following link: https://mailchimp.com/legal/privacy/
CATEGORIES OF PERSONAL DATA PROCESSED
Depending on your use of the website, we may collect some of the following personal and non-personal data: email address, first name, last name, location, language, email provider, web browser type, IP address, login data, browser details, duration of visits to website pages, page views and navigation paths, details on the number of times the website is used, time zone settings, and devices used to access the website. We will process the above data to manage the website and ensure that you are provided with relevant content, to ensure the security of our website using security plugins, including maintaining backups.
Community: Among the personal data collected by the Data Controller through the Website, either independently or through third parties, are: First Name, Last Name, Email, Password, Image, Location, Age. By registering or authenticating through Social Login, the Data Controller may access certain data stored by the third-party service used for registration or identification. The level of data sharing depends on the privacy and sharing settings you have selected on the social network.
TRANSFER OF DATA TO THIRD COUNTRIES
The personal data of data subjects may be transferred to the following country: United States of America.
All data recipients located in the United States who will receive the data guarantee adequate security measures and protection of the same.
DATA RETENTION CRITERIA
Account information will be retained until the Visitor decides to delete their account or until the expiration of the contract or the end of the service. Personal data will only be retained for the time strictly necessary to provide the service and then deleted. Information and data used for marketing purposes will be deleted as soon as the Visitor asks us to do so by revoking consent, either via the opt-out links in commercial communications or control panels, or by sending us a communication.
DATA SUBJECT’S RIGHTS
As a data subject, you have the right to:
- Be informed about the existence or otherwise of personal data concerning you;
- Access the personal data that is being processed;
- Request correction if the data we have collected is inaccurate, or request data completion if the same is incomplete;
- Request the deletion of data in cases provided for by Article 17 of Regulation 2016/679, including in cases of consent withdrawal or if the personal data processed is no longer necessary for the purposes for which it was collected or otherwise processed;
- Obtain the restriction of processing under Article 18 of Regulation 2016/679;
- Request the portability of your personal data from the Data Controller and receive it in a structured, commonly used, and machine-readable format, or request the direct transmission of your personal data to another controller;
- Object to the processing of your data at any time;
- Not be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way;
- Lodge a complaint with the Data Protection Authority.
HOW TO EXERCISE YOUR RIGHTS?
You can exercise your rights at any time by sending us an email at the following address: segreteria@fondazionepalazzote.it
We are obliged to respond to your requests within one month of receipt. This period may be extended by two months, if necessary, taking into account the complexity and number of requests received. In case of extension, you will be informed of the delay and the reasons.
Should we consider that we cannot comply with your requests, we will communicate the reasons for the refusal. In such a case, you will still have the opportunity to lodge a complaint with the Data Protection Authority.
LEGAL NOTES
- Copyright
All texts, graphics, and images on this site are protected under copyright laws, patents, and intellectual property regulations. This material may not be copied, modified, or resold for profit or any other purpose. Any violation of these laws will entitle the site owner to take legal action to protect their rights.
- Site Usage
In no event shall Palazzo Te be held liable for any damages of any kind, whether directly or indirectly caused by accessing the site or using the information contained therein. Palazzo Te reserves the right to modify the site content and legal notes at any time without prior notice.
- Access to Linked External Sites
Palazzo Te is not responsible for the content of any sites accessed via links found on this site. The accuracy and completeness of information obtained through access to linked sites are the responsibility of the owners of those sites.