Privacy policy [Art. 13 European Union Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data and the free circulation of such data (hereinafter, Eu Regulation)]
Why this notice
This page describes the privacy policy of the website www.puccinimuseum.org with reference to the processing of personal data relating to those who give them to the Giacomo Puccini Foundation. This is an information that is provided pursuant to art. 13 of the European Union Regulation 2016/679 to those who also interact with the Foundation’s Web services. The information is provided only for the www.puccinimuseum.org site and not for other websites that may be consulted by the user via links.
Processing methods
1. We inform you that the personal data (hereinafter, data) provided, even prior to the establishment of contractual relationships, will be processed exclusively for the conclusion and management of the relationships established with this Foundation as part of the pursuit of institutional purposes. In particular, the data processing is aimed at the execution of obligations: a) statutory, institutional, contractual (supply of services or goods, etc.); b) administrative (collection of pre-contractual information, exchange of communications, etc.), accounting and tax (correct bookkeeping, invoicing, filing of mandatory tax returns, etc.), organizational (convening of meetings and meetings, effective relationship management, etc.).
2. The provision of the aforementioned data represents a mandatory legal or contractual obligation and is essential for the pursuit of the aforementioned purposes. Therefore, any refusal to provide data or subsequent processing will make it impossible to continue our relationships.
3. Data processing may be carried out using any suitable manual method or with the use of electronic, telematic or otherwise automated tools, in compliance with the technical and organizational security measures referred to in art. 32 of the EU Regulation, by persons authorized to process, in compliance with the provisions of art. 29 of the aforementioned Regulation. Technical and organizational security measures are used to ensure the confidentiality of the data subject and to avoid undue access to third parties or unauthorized personnel.
4. The data are not transferred to third countries; the Foundation uses ‘cloud’ services provided by companies operating exclusively in Italy selected from those who provide adequate guarantees, as required by art. 46 of the Eu Regulation. The Foundation does not have offices outside the national territory, does not have relations with European or non-European companies with which the exchange of data is envisaged, does not carry out portability, transfer or sharing of data in its possession with any subject operating within or outside the territory of the European Union.
5. The data may be disclosed to: Controlled, investee or associated entities; External professionals; etc.; subjects to whom the communication is necessary for the correct fulfillment of the aforementioned purposes and for the fulfillment of obligations imposed by law (credit companies in charge of making payments or receiving transfers, etc.). Furthermore, the members of the Foundation bodies (Board of Directors, Auditing and Control Body, etc.), employees and / or collaborators of the Foundation may become aware of your data. Specific information may be disclosed on the Foundation’s website or otherwise disseminated (in the press, with multimedia tools such as CD-ROMs, DVDs, etc.) in relation to institutional activities (presentation of the Foundation’s activities, financial statements, etc.) .).
6. The data being processed will be: a) collected for specific, explicit and legitimate purposes; b) adequate, relevant and limited to the purposes for which they are processed; c) accurate and, if necessary, updated; d) processed lawfully and fairly – in compliance with the security obligations prescribed in the EU Data Protection Regulation – by personnel or collaborators who carry out operations or activities connected, instrumental, functional to that of the Foundation or who provide itself specific administrative, evaluation, communication and / or support services.
Retention period
7. The retention period of the data provided is established for a period of time not exceeding the achievement of the purposes for which they were collected and, in any case, according to the limitation period of the rights arising by law or by the contractual relationship.
Rights of the interested party
8. At any time, as an interested party, you can exercise your rights towards the Foundation as Data Controller: the right of access (Article 15), of rectification (Article 16), of cancellation (Article . 17), limitation of processing (Article 18), portability of your data (Article 20), as well as to lodge a complaint with the Guarantor for the protection of your data, if it considers that the same are treated in violation of the provisions of the Regulation.
9. In particular, you have the right to oppose (Article 21) at any time, for reasons connected with your particular situation, to the processing.
10. Further information regarding the aforementioned processing may be requested from the Foundation’s Secretariat Office (Mail: info@fondazionegiacomopuccini.it).
Holder of the treatment
11. The owner of the data processing is the Giacomo Puccini Foundation with registered office in Lucca, Casermetta San Colombano, Baluardo San Colombano n.1, Urban walls; Mail: info@fondazionegiacomopuccini.it; PEC: segreteria@pec.fondazionegiacomopuccini.it
Types of data processed
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
Cookies
No personal user data is acquired by the site in this regard. No use is made of cookies (i.e. small text files that websites use to store some information on the user’s computer) for the transmission of personal information, nor are so-called c.d. persistent cookies of any kind, or systems for tracking users. The use of so-called session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe browsing and efficient site. The so-called Session cookies used on this site avoid the use of other IT techniques that are potentially detrimental to the confidentiality of users’ browsing and do not allow the acquisition of the user’s personal identification data.
Collections of personal data carried out offline
In the event that the Foundation collects personal data offline (eg: paper forms), information on the processing is provided at the same time and any consent from the interested party is obtained (where necessary); this also applies if the collection takes place on forms downloaded from the website www.puccinimuseum.org (the information on the specific treatment is shown on the forms).
Collections of personal data carried out online
In relation to the data collections carried out directly on the website www.puccinimuseum.org (eg: registration form for services, etc.), the essential information on the processing is provided in the context of the collection on each individual website (eg .: at the end of each registration form), while it is always possible to access this page to examine the more widely understood privacy policy. The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Browsing without registration
The navigation on the site www.puccinimuseum.org is free, free and does not require registration. The navigation of those who do not register is not monitored either with reference to the sites of origin or with reference to the pages visited.
Newsletter
By registering for the newsletter, the User’s data are automatically added to a list of contacts to which email messages containing information relating to the institutional activity of the Foundation may be sent.
Personal Data collected: name, surname, email.
We remind you that the registered User always has the right to object to the receipt of any subsequent information communication from the Foundation by following the simple procedure indicated at the bottom of each of our messages.
Interaction with social networks and external platforms:
This type of service allows interaction with social networks or other external platforms directly from the pages of this site. The interactions and information acquired are in any case subject to the User’s privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
Privacy Shield
The European Commission adopted on 12 July 2016 a decision on the so-called Privacy Shield, the agreement that regulates the transfer of data between the European Union and the US. The agreement protects the fundamental rights of individuals in the EU whose personal data is transferred to the United States, and sets firm rules for companies that transfer data across the Atlantic.
The new discipline provides:
• stringent protection obligations for companies that transfer data;
• security measures regarding access to data by the United States Government;
• specific tools for the protection of people;
• the joint annual review of the agreement to monitor its implementation. The social networks indicated below have joined the Privacy Shield.
Facebook button (Facebook Inc.)
The Facebook button is an interaction service with the Facebook social network provided by Facebook Inc. which allows you to view the news disseminated by the Foundation through this web platform
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Flickr button (Fantastic Fox Inc.)
The Flickr button is an interaction service with the Flickr social network provided by Fantastic Fox Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Instagram button (Facebook Inc.)
The Instagram button is an interaction service with the Instagram social network provided by Facebook Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Linkedin button (LinkedIn Corporation)
The Linkedin button is an interaction service with the Linkedin social network managed by LinkedIn Corporation.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
YouTube button (Google Inc.)
The YouTube button is a video content viewing service managed by Google Inc. that allows you to view the news disseminated by the Foundation through this web platform
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Twitter button (Twitter Inc.)
The Twitter button is an interaction service with the Twitter social network provided by Twitter Inc. which allows you to view the news disseminated by the Foundation through this web platform
Personal Data collected: Cookies and Usage Data.
Place of processing: USA –Privacy Policy