Privacy Policy

 
Privacy Policy

Associazione La Raccolta della Barca Lariana and management of personal data

Associazione La Raccolta della Barca Lariana (hereafter “Associazione”) undertakes to protect the privacy of its users (hereafter “Data subject”) and to protect personal data collected on the website www.museobarcalariana.it for the sake of brevity the “Website”) in compliance with Regulation (EU) 2016 / 679 of 27.04.2016 (for the sake of brevity the  “Regulation”) and current legislation.

The privacy policy is made available as per art. 13 and et seq. of the Regulation for the Data subject who consults and interacts exclusively with the Website and avails of the services provided by the association and not also for other Websites which it may be possible to access by means of links.

Definitions

“Personal data” pursuant to art. 4 (1) of the Regulation means: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly; in particular, the natural person may be identified  by direct or indirect reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (for the sake of brevity “Data”);

“Processing” pursuant to art. 4 (1) of the Regulation means: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; (“Processing”);

“Data Subject” pursuant to art. 4, (1) of the Regulation means a natural person identified or indentifiable directly or indirectly, with particular reference to Personal Data (for the sake of brevity “Data Subject/s”)

“Data Protection Authority” means the competent authority for the protection of Personal Data (for the sake of brevity l “Supervisory authority”)

‘Persons authorised to process data’ means a natural person, who pursuant to current regulations is qualified as a person authorised to process data and, in the light of the provisions in the Regulation “persons authorised to process personal data”  meaning persons who “operate on behalf of the controller or processor, following instructions given to them(for the sake of brevity “Persons authorised to Process”).

Data Controller

L’Associazione La Raccolta della Barca Lariana with head offices in Pianello del Lario, in Via Regina 1268 (22010) contact email info@museobarcalariana.it telephone +39 0344 87235 e +39 3357681511 is the Data Controller (for the sake of brevity “Controller”) pursuant to the terms of art. 4, 7 and 24 of the Regulation.

Data Processors

Personal data may be processed either manually or by electronic or telematic means also by third parties who process data on behalf of Associazione having been designated by the latter as Data controller. The full and up to date list of Processors of the data of Data Subjects may be requested by writing to  info@museobarcalariana.it

Processing location

Processing connected to the web services of the Website takes place at the main offices of the Associazione and are dealt with by Staff Authorised to Process Data. Data are treated in compliance with the provisions of the Regulation and current legislation.

Privacy Policy and purposes of Data Processing

Associazione acquires the Data provided by the Data Subjects, both in their presence and via postal and telematic services, IT and telephone services, in compliance with confidentiality and security rules provided for in the Regulation and under law. Data Processing takes place using paper, electronic and telematic instruments. Associazione processes the Data collected for the sole purpose of carrying out its normal activities, i.e. spreading knowledge and making Data Subjects aware of the specific aims of the organisation. Data are processed in order to manage operations relating to and arising from donation/s as well as to provide information about initiatives, activities and projects of Associazione, to send newsletters and information material reserved for supporters and donors also potentially in paper or digital format, as well as to request participation in fundraising campaigns and surveys, petitions and acquire the curriculum vitaes of those who intend to offer their services as collaborators.

The form to be filled out – on-line or else as a download – entails an obligatory consent to Data Processing in cases where it is strictly necessary in order to follow up on a request from the Data Subject or is optional in every other case.

With your express optional consent, Data may also be processed for profiling in pursuant to art. 4 (1), no. (4) of the EU Regulation,  for the purposes of personalising communication and fundraising, based on the support preferences displayed over time in relation to donations made and data recorded. The Data involved in the above-mentioned processing shall not be disseminated to anyone other than the Data Controller and any Data Processors appointed by same. Data may be processed for the above-mentioned purposes by third party companies and/or professionals and/or suppliers who require the Data for the purposes connected, inherent to and/or instrumental to the Processing.

Data storage period

Your Data will be stored with due regard for the principle of proportionality and unless you ask to be removed or failing specific necessity to comply with legal requirements, until the objectives of the data processing have been achieved. The Data will therefore be stored for purposes relating to donations, over the course of the period during which you support Associazione and up to ten years after the last donation made, also in compliance with the legal obligations concerning storage of documents. As far as information, fundraising and profiling activities are concerned, your Data will be kept as long as you support Associazione and for a further 10 years afterwards anticipating the interests of Associazione to receive financial support and have its initiatives shared by all those willing to support the activities of our corporate purpose.

Provision of Data and Consensus of the Data Subject

Without prejudice to what is required in terms of online browsing data, the provision of Data is optional and any refusal to do so will have no consequences where browsing the Website is concerned.

An exception to this general rule is access to certain functions on the Website which can be blocked, in accordance with the law, where Associazione needs to obtain explicit consent.

For example, in order to make an online donation, visitors to the Website are asked for the necessary consent for processing their data.

Rights of the Data Subject

Pursuant to art. 13, para. 2 (b) and (d), 15, 18, 19, 20 and 21 of the Regulation, we hereby inform you that:

  • The Data Subject has a right to ask the controller for access to and rectification of personal data or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;
  • The Data Subject has a right to lodge a complaint with a supervisory authority, specifically with the Italian Data Protection Authority, following the procedures and indications posted on the official website of the Authority it

The Data Subject has a right to obtain confirmation from the data controller as to whether or not their data is being processed and to obtain acess to this data and the following information:

  1. a) The purposes of the processing;
  2. b) the categories of personal data in question;
  3. c) the recipients or categories of recipients to whom the data are or will be disclosed, in particular if intended for third countries or international organisations;
  4. d) where possible, the envisaged period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period; ;
  5. e) the existence of the right to request from the Data Controller rectification or erasure of personal data or restriction of processing concerning the data subject and to object to processing;
  6. f) the right to lodge a complaint with a supervisory authority;
  7. g) where the data were not collected from the data subject, from which source they originate;
  8. h) The Data Controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the Data Subject about those recipients if the Data Subject requests it.

In accordance with art. 20 of the Regulation, the Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a Data Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another Data Controller without hindrance from the Data Controller to which the personal data have been provided.

  • The Data Subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The Data Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims.
  • Where personal data are processed for direct marketing purposes, the Data Subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the Data Subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the Data Subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

The exercise of these rights is not subject to any constraints and is free of charge.

Security measures

Associazione adopts appropriate security measures in order to safeguard confidentiality, integrity, completeness and availability of the personal data.

Information of a financial nature

Associazione guarantees the utmost confidentiality and security of information of a financial nature collected for the purposes of making donations by credit card or bank transfer or other systems of payment. Associazione only keepts information which is strictly necessary to follow up on the service requested.

Modification to the current policy

The policy could undergo changes over time also in view of any legislative amendments or modifications on the subject. The Data Subject is invited to periodically consult the page on the website www.museodellabarcalariana.it/privacy

 

CONTRIBUTE TO MAKING THIS DREAM UNIQUE