Privacy Policy - My WordPress

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), Il Miracolo di Carlo III hereby provides its customers, including potential customers, as well as third parties in general (e.g., delegates, legal representatives, etc.) who come into contact with it on behalf of or on the instructions of customers, including potential customers (the “Data Subjects”), with the information required by law regarding the processing of their personal data (“Personal Data”).

1.- Data Controller and Data Protection Officer

Il Miracolo di Carlo III (tax code and VAT number 95316620632), in the person of its pro tempore legal representative, is the entity that processes the data of the Data Subjects and, for the purposes of the Law, is considered the Data Controller. In this capacity, it is responsible for ensuring the application of appropriate organizational and technical measures for data protection in compliance with the provisions of current legislation.

Il Miracolo di Carlo III has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with privacy regulations. The DPO can be contacted for matters relating to the processing of personal data at the following address: info@lapismuseum.com.

2.- Methods of collecting Personal Data

Personal Data subject to processing by the Data Controller may be acquired from the Data Subject, including through remote communication techniques used by the Data Controller (e.g., websites, smartphone and tablet apps, call centers, etc.);

3.- Categories of Personal Data processed

The Personal Data processed by the Data Controller includes, by way of example:

i. navigation data (e.g., IP addresses or domain names of computers used by users connecting to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server, and other parameters relating to the operating system and browser used by the user, log);

ii. personal details (e.g., first name, last name, tax ID number, address, date and place of birth, nationality);

iii. contact details (e.g., landline and/or mobile phone numbers, info@lapismuseum.com address);

iv. profiling and marketing data (e.g., interests and passions);

v. other data attributable to the categories indicated above.

4.- Purpose and legal basis of the processing

Personal Data, under the specified conditions, will be processed for the purposes indicated below:

registration on the website and management of contact requests and/or requests for informational material

The processing of the personal data of the data subject is carried out in order to carry out the preliminary activities and those following the request for registration on the website, if applicable, as well as for the management of requests for information and contact and/or the sending of informative material, as well as for the fulfillment of any other obligation arising therefrom.

The legal basis for this processing is the fulfillment of services related to registration requests, information and contact requests, and/or the sending of informational material, as well as compliance with legal obligations.

The provision of data is optional; however, any refusal by the Data Subject to provide data will make it impossible for the Data Controller to fulfill the requested service.

performance of the contract

Personal Data will be processed for the management of the contractual relationship (for example, for invoicing fees, managing payments or complaints that you may submit to us) and for the provision of the services requested through the website.

The legal basis for this processing is the fulfillment of obligations inherent in the contractual relationship and compliance with legal obligations.

The provision of data is optional; however, any refusal by the Data Subject to provide data will make it impossible for the Data Controller to fulfill the requested service.

compliance with legal obligations, defending a right in court or out of court, and fraud prevention

Personal Data will be processed for the fulfillment of legal obligations, as well as to ascertain, exercise, or defend a right of the Data Controller and/or defend against claims by others, in court or out of court. In particular, the Data Controller may process Personal Data for the fulfillment of accounting and tax obligations and for the fulfillment of measures by the judicial authorities aimed at the prevention and repression of crimes.

The legal basis for this processing is the pursuit of the legitimate interest of the Data Controller, taking into account the balance between the rights of the latter and those of the Data Subject.

promotional activities on services/products similar to those purchased

The processing of the Data Subject’s personal data is carried out for the purpose of sending communications relating to promotions and offers of Services/Products of the Data Controller that are identical and/or similar to those covered by the contract in force with the Data Subject, unless the Data Subject has objected to such processing initially or in subsequent communications.

The legal basis for this processing is the legitimate interest of the Data Controller in promoting products or services that may reasonably be of interest to the customer, taking into account the balance between the rights of the latter and those of the Data Controller.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her for the purposes in question.

Promotional activities on services/products offered by Il Miracolo di Carlo III

The processing of the Data Subject’s personal data is carried out for the purpose of sending, subject to specific consent, communications regarding promotions and offers of Services/Products of the Data Controller through traditional methods (e.g., regular mail, telephone calls with an operator) and/or automated methods (e.g., e-mail, SMS, MMS, fax, pre-recorded telephone calls).

The legal basis for this processing is the consent given by the data subject prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing carried out previously.

Any refusal by the Data Subject to give consent will make it impossible to use the related services, without this having any negative consequences for the contractual relationship with the data controller.

marketing purposes relating to products or services of partners of Il Miracolo di Carlo III

The personal data of the Data Subject is processed for the purpose of sending, subject to specific consent, communications regarding promotions and offers of Services/Products from commercial partners of Il Miracolo di Carlo III through traditional methods (e.g., regular mail, telephone calls with an operator) and/or automated methods (e.g., email, SMS, MMS, pre-recorded telephone calls).

profiling

The processing of Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the Data Subject takes place, subject to specific consent, for profiling purposes such as analysis of the data transmitted and the Services/Products purchased in order to offer advertising messages and/or commercial proposals in line with the choices expressed by the users themselves. This activity will be carried out in aggregate and anonymized form through the implementation of models for the analysis of customer data using statistical algorithms, predictive models, and aggregations only for the time strictly necessary for the purposes pursued, the type of goods marketed, or the services rendered.

In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect the data subject.

5.- Recipients of personal data

The personal data collected may be disclosed to parties who will act, depending on the case, as independent Data Controllers or Data Processors, for the purposes indicated above, in compliance with legal and regulatory obligations and/or obligations arising from EU legislation, or because they have a legitimate interest.

In particular, Personal Data may be made available to:

– parties responsible for performing activities related to and instrumental to processing (archiving service companies, IT service companies, social media management service companies, marketing companies, insurance companies, banking institutions);

– business partners of Il Miracolo di Carlo III (The Miracle of Charles III);

– Public administrations, authorities, and other entities in fulfillment of legal obligations;

Personal Data will not be disclosed (made available to unspecified parties).

6.- Transfer of data to third countries

The Personal Data of the Data Subject is stored in archives located in countries within the European Union. Where necessary for the pursuit of the stated purposes, the Data Subject’s Data may be transferred abroad, to countries/organizations outside the European Union that guarantee a level of personal data protection deemed adequate by the European Commission in its own decision, or in any case on the basis of other appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or the consent of the Data Subject. The Data Subject has the right to obtain a copy of any Data transferred abroad, as well as a list of the countries/organizations to which the data has been transferred, by writing to info@lapismuseum.com.

7.- Period of retention of personal data

The Data will be stored in a form that allows the identification of the Data Subject for a period of time not exceeding that necessary to achieve the purposes for which it was collected, taking into account the laws applicable to the activities and sectors in which the Data Controller operates. Once the terms thus established have expired, the Data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfill obligations (e.g., tax and accounting) that remain even after the termination of the contract (Article 2220 of the Italian Civil Code) or to comply with orders issued by Public Authorities and/or Supervisory Bodies.

The duration of the cookies used on the website can be found in the specific Cookie Policy

In the event of a dispute, the above retention period may be extended to 10 years from the date of settlement.

8.- Processing methods

The processing will be carried out by authorized personnel who need to be aware of it in order to perform their duties, with the aid of electronic tools, in accordance with principles of lawfulness and fairness, so as to protect the confidentiality and rights of the data subject at all times, in compliance with the provisions of current legislation.

Marketing-related profiling (analysis of consumption habits and choices) is carried out through an automated process aimed at studying and analyzing behavioral profiles and characteristics of the customer base in order to optimize promotional activities for products and services.

9.- Rights of the data subject

L’Interessato ha il diritto di chiedere al Titolare del trattamento:

i. confirmation as to whether or not your Personal Data is being processed and, if so, to obtain access to it (right of access);

ii. the correction of inaccurate Personal Data or the integration of incomplete personal data (right of correction);

iii. the deletion of Personal Data if one of the reasons provided for in the Privacy Regulation applies (right to be forgotten);

iv. the restriction of the processing of Personal Data when one of the cases provided for in the Privacy Regulation applies (right to restriction);

v. to receive the Personal Data provided to the Data Controller in a structured, commonly used, and machine-readable format and to transmit those data to another Data Controller (right to portability);

vi. to object at any time, in whole or in part, to the processing carried out for the pursuit of a legitimate interest of the Data Controller and for marketing and profiling purposes (right to object);

vii. to withdraw any consent to the processing of Personal Data at any time, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal.

Consent given for marketing activities using automated contact methods (such as text messages, multimedia messages, faxes, phone calls, emails, and web applications) also extends to traditional contact methods (paper mail or phone calls with an operator). Similarly, opposition to marketing activities using automated contact methods also extends to traditional contact methods. You retain the right to give your consent or exercise your right to object in relation to only one of the two methods of carrying out marketing activities.

To exercise their rights, the Data Subject may send an email to info@lapismuseum.com or a written communication to the Data Controller at the registered office of Il Miracolo di Carlo III.

The data subject also has the right to lodge a complaint with the competent supervisory authority in Italy (the Italian Data Protection Authority) or with the authority that performs its duties and exercises its powers in the Member State where the violation occurred, as provided for in Article 77 of the Regulation, as well as to take appropriate legal action pursuant to Articles 78 and 79 of the Regulation.

10.- Cookie

For information regarding the use of cookies, please refer to the specific Cookie Policy.