I Musei Civici
a Palazzo Ciacchi

Privacy Policy

Privacy Policy

Privacy Policy on the Protection of Personal Data pursuant to Articles 13-14 of the EU Regulation 2016/679

Confindustria Pesaro Urbino, headquartered in Pesaro, Via Cattaneo, 34, in its capacity as data controller, informs you, pursuant to Article 13 EU Regulation no. 2016/679, that your personal data will be processed in the following ways and for the following purposes.

Object and purpose of processing

The Data Controller processes your personal data (e.g. name, surname, address, telephone number, e-mail address) provided by you for the purpose of booking visits to the Palazzo Ciacchi Museum, for participation in initiatives at the museum and for other services offered by the Data Controller.

Legal basis for processing

The legal basis for the processing is the performance of a contract to which you are party or the execution of pre-contractual measures taken at your request. The provision of personal data is necessary to obtain the information and/or to use the services requested. Failure to provide them will make it impossible to execute your request.

Methods of treatment

The processing of your personal data is carried out in compliance with the principles and measures provided for in EU Regulation 2016/679 in paper or electronic form by specially authorised Confindustria Pesaro Urbino personnel. Your personal data may be disclosed to third parties for the possible dispatch of communications relating to cultural initiatives.
Your data will not be transferred to third countries.

Conservation period

The Data Controller shall process and store personal data for the time necessary to provide the requested services and thereafter for a period not exceeding the statutory limitation period.

Browsing data

Log files: during normal operation, the computer systems and applications dedicated to the functioning of the museopalazzociacchi.it website collect certain data (the transmission of which is implicit in the use of Internet communication protocols) not associated with directly identifiable users. The data collected include IP addresses and the domain names of the computers used by the users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the IT environment used by the User. This data is processed, for the time strictly necessary, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its regular operation.

Google services

For the museopalazzociacchi.it website the reCAPTCHA service is used, which allows the user to avoid malicious attempts and fraud when filling out the Purchase/Order Forms and contacting the Sistema Museo organisation.
The MAPS service is also used for the geolocation of services and facilities on the museopalazzociacchi.it site.
The reCAPTCHA and MAPS services are provided by Google HQ.
Please note that Google’s Privacy Policy is visible and available at the following address:
Privacy policies – Privacy and terms– Google

Cookies

On the museopalazzociacchi.it site, no computer techniques are used in any way for the direct acquisition of personal data identifying the user or systems for user profiling. The so-called session technical cookies, once the connection to the site is terminated, are not stored. Our computer systems use: cookies for the transmission of information of a personal nature, and no persistent cookies.

Rights of the data subject

In your capacity as data subject, you have the rights set forth in Art. 7 Privacy Code and Art. 15 GDPR and specifically the rights to:
  1. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and its communication in intelligible form;
  2. obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and the representative designated pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing
  3. obtain: a) the updating, rectification or, where interested therein, the integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including those the conservation of which is not necessary in relation to the purposes for which the data were collected or subsequently processed c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
  4. to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys, by automated calling systems without the intervention of an operator, by e-mail and/or by traditional marketing methods by telephone and/or by post. It should be noted that the data subject’s right to object, as set out in point b) above, for direct marketing purposes by automated means extends to traditional marketing methods and that, in any case, the data subject’s right to object may also be exercised in part only. Therefore, the data subject may decide to receive only communications by traditional means or only automated communications or neither type of communication. Where applicable, he/she also has the rights set out in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.

Methods of exercising rights

You may exercise your rights at any time by sending:

Contact details of the Data Protection Officer (DPO)

The designated Data Protection Officer (DPO) can be contacted at the following addresses: Tel. 0541 1795431 – dpo@studiopaciecsrl.it.