POLICY ON THE PROCESSING OF PERSONAL DATA
of users consulting the Eataly Art House website pursuant to Article 13 of Regulation (EU) 2016/679.Pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation”), this page describes the methods for processing the personal data of users consulting the Eataly Art House websites (hereinafter “E.ART.H”) accessible electronically at www.earthfoundation.it.
DATA CONTROLLER
The data controller is Eataly Art House Foundation, with registered office in Verona, 37135, via Santa Teresa 12, tax code 93299600234. info@earthfoundation.it
LEGAL BASIS FOR PROCESSING
Personal data will be processed on the basis of the following conditions: For browsing data, since this is anonymized data, i.e. data from which it is not possible to identify even indirectly a natural person, no particular legal basis for its processing is necessary.
For the data communicated by the user, the legal basis turns out to be the need to execute the express requests of the data subject; therefore, it is the provision of data necessary for a pre-contractual phase or functional to respond to a specific request.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING NAVIGATION DATA
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes, for example, the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
These data, which are necessary for the use of web services, are also processed for the purpose of obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.); and to check the proper functioning of the services offered.
Browsing data are kept for a period not exceeding thirty days (except in the event of the need to ascertain crimes by the judicial authorities).
DATA COMMUNICATED BY THE USER
The optional, explicit, and voluntary sending of messages to the contact addresses of E.ART.H, the private messages sent by the users to the institutional profiles/pages on the social media (where this possibility is foreseen), as well as the filling in and the forwarding of the forms on the E.ART.H websites, imply the acquisition of the sender’s contact data, necessary to answer, as well as of all the personal data included in the communications.
Specific information will be published on the pages of the E.ART.H websites predisposed to the supply of certain services.
COOKIES AND OTHER TRACKING SYSTEMS
Cookies are not used for user profiling, nor are other tracking methods used for such purposes.
Instead, session (non-persistent) cookies are used strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the user’s control, whereas on the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the logs of the services, with a storage period of no more than thirty days in any case, in the same way as other browsing data.
SOCIAL MEDIA PLATFORMS USED BY E.ART.H
With regard to the personal data processing carried out by the managers of the Social Media platforms used by E.ART.H, please refer to the information provided by them through their respective privacy policies. E.ART.H processes the personal data given by the users through the pages of the Social Media platforms dedicated to the Foundation, within its institutional aims, exclusively to manage the interactions with the users (comments, public posts, etc.) and in compliance with the regulations in force.
RECIPIENTS OF DATA
The personal data collected are processed by the E.ART.H staff, who act on the basis of specific instructions given about the purposes and modalities of the processing itself.
DATA TRANSFER
For all the purposes indicated in the information notice, the data may also be communicated abroad, within or outside the European Union, in compliance with the rights and guarantees provided for by the regulations in force and subject to verification of the adequacy of the level of protection guaranteed by the third country.
RIGHTS OF THE DATA SUBJECTS
The persons concerned have the right to obtain from E.ART.H, in the cases foreseen, the access to their personal data and their rectification or cancellation or the limitation of their personal data processing or to oppose to their processing (art. 15 and following of the Regulation). The appropriate request to E.ART.H is made by contacting the Data Controller Eataly Art House, with head office in Verona, 37135, via Santa Teresa 12 (Email: info@earthfoundation.it).
RIGHT TO COMPLAIN
The persons concerned who believe that the personal data processing carried out through this website violates the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as foreseen by art. 77 of the Regulation, or to take legal action (art. 79 of the Regulation).
