The information is provided in compliance with art. 13 of Legislative Decree no. 196/2003 – “Code for the protection of personal data” – to all users who interact with the website of the Museum Complex.
The information is valid only for this website and not for other websites that the user may consult via links indicated in it.
Owner of the process
The Owner of the personal data process is the Museum Complex.
Data processing methods and purposes
Browsing data
The IT systems and software procedures used by this website acquire certain data items during their normal operation, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified parties, but it may enable the identification of the users of processed in association with data held by third parties. This category of data comprises IP addresses or dominions of the computers used by users of the website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to subject the request to the server, the size of the file sent by way of reply, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. This data is used only to obtain anonymous statistics on the use of the website and to check its correct operation. The data could be used to ascertain responsibility in the case of hypothetical IT crimes that damage the website.
Data supplied voluntarily by the user
The optional, explicit and voluntary provision of emails to the addresses indicated on this website implicates the subsequent acquisition of the sender’s address, necessary to reply to the questions, as well as any other personal data included in the message. The processing of sensitive or legal data is not included, and if this is supplied by the user, it will be cancelled.
Optional provision of data
With the exception of that specified for browser data, the user is free to supply the personal data indicated on the forms used for registration for the services of the official website of the Directorate-General of Museums, requests for information and sending suggestions and reports to the editors of the website or to the contacts indicated for the Directorate-General. Failure to provide such data may make it impossible to obtain that which you have requested.
Data processing location
The processes connected to the web services of this website are carried out at the offices of the Museum Complex, in premises indicated by MiBACT, and are curated only by the technical staff of the office appointed to carry out the process, or by managers appointed by the owner.
Processing method
Personal data is processed using automated instruments, for the time strictly necessary to pursue the aims for which it has been collected.
Specific security measures are observed to prevent leakage of data, unlawful and incorrect use, and unauthorised access.
Browser data is not subject to dissemination.
The managers of the website reserve the right, as envisaged by the legislation in force, to use the data collected (in aggregate and anonymous form) for statistical purposes, study and research.
Rights of the data subject
The subjects to which the personal data refers are entitled, at any time, to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verifying that it is exact or ask for its completion, update or rectification (art. 7 of Legislative Decree no. 196/2003).
In compliance with the same article, the data subject is entitled to request the cancellation, transformation into anonymous form or blockage of data processed in breach of the law, also objecting to its processing for legitimate reasons.
The above rights may be exercised by contacting the Director for the processing of the data indicated.