PRIVACY POLICY

Information on the processing of personal data, made in accordance to art. 13 of Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods of processing of personal data of users consulting the institutional website of Musei Civici Monterotondo (hereinafter “MUCIM”).
This information does not concern other sites, pages or online services that can be reached through hypertext links that may be published on the site but refer to resources outside the domain www.mucim.it.

DATA CONTROLLER

Following consultation of the website, data relating to identified or identifiable individuals may be processed.
The data controller is the Municipality of Monterotondo with headquarters in Piazza Angelo Frammartino, 4 – Monterotondo (RM), who can be contacted by consulting the appropriate contact page

DATA PROTECTION OFFICER

In accordance to Article 37 of the Regulation, the Data Protection Officer (DPO) is the lawyer Danilo Quaglini, who can be reached at the following e-mail address: dpo@comune.monterotondo.rm.it

PURPOSE AND LEGAL BASIS OF THE PROCESSING

The personal data indicated on this page are processed by the MUCIM in the performance of its tasks of public interest or otherwise related to the exercise of its public powers, including the management and protection of cultural heritage and related communication activities.
The personal data you provide are processed only for purposes strictly related and necessary to the use of the site and the services requested, or for purposes functional to the conduct of research, analysis and statistics, sending information material and updates on initiatives and programs of the MUCIM.
In accordance to Art. 13 par. 3 Regulation, if the Data Controller intends to further process personal data for a purpose different from the one for which they were collected, it shall provide the data subject with information regarding this different purpose and any further relevant information prior to such further processing.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Browsing data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Data provided by the user
The following data are provided voluntarily and are necessary and indispensable for completion of the booking of guided tours of the Civic Museums of Monterotondo: First Name, Last Name, Company Name, Country/Region, Street and Number, Apartment, Suite, Unit, etc., Zip Code, City, Province, Telephone, Email Address, Order Notes.
The optional, explicit and voluntary sending of messages to MUCIM’s contact addresses, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the completion and submission of forms on MUCIM’s websites, imply the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.
Specific disclosures will be published on the pages of the MUCIM sites prepared for the provision of certain services.

Cookies
No personal data of users is acquired by the site in this regard. No use is made of cookies for the transmission of information of a personal nature, nor are so-called persistent cookies of any kind, i.e. systems for tracking users, used. The use of c.d. session cookies (which are not stored persistently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site. The so-called session cookies used in this site avoid the use of other computer techniques potentially prejudicial to the privacy of users’ browsing and do not allow the acquisition of personal identification data of the user. The use of permanent cookies is strictly limited to the acquisition of statistical data relating to access to the site. The portal uses a market product for tracking access to its site. It resorts to the use of permanent cookies in order to collect statistical information about “unique visitors” (different people) to the site. These cookies, referred to as “Unique Visitor Cookies,” contain an alphanumeric code that identifies browsing computers, but without any collection of personal data. There is also a portion of code on each page of the site, aimed at collecting statistical data on site usage, again without any collection of personal data. Disabling cookies on your location will not affect your interaction with the site in any way.

OPTIONALITY OF PROVIDING DATA

Apart from what has been specified for browsing data, the user is free to provide the personal data indicated in the registration forms for site services, information requests and sending suggestions and reports to the site’s editorial staff or otherwise indicated in telephone contacts with the Central or Peripheral structures of MUCIM.
Failure to provide them may result in the impossibility of obtaining what has been requested.
For services provided by third parties, for which the site represents only an exhibition space, MUCIM is not the owner or responsible for the data collected.

PLACE, METHODS AND RECIPIENTS OF PROCESSING

Personal data are processed at the headquarters of the Data Controller or Managers with automated tools for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the rules of confidentiality and security required by current regulations.
Specific technical and organizational security measures are taken to protect the information from alteration, destruction, loss, theft or improper or illegitimate use.
Treatments related to the web services of this site are handled only by technical personnel authorized and instructed to the treatment, or by the Managers designated by the Owner In accordance to art. 28 of the Regulations. No data from the web service is disseminated. The personal data provided by users who submit requests for information and suggestions are used only for the purpose of performing the service or performance requested and are possibly communicated to other personnel authorized to the processing within the MUCIM or to other public or private entities in the only case in which this is imposed by legal obligations or strictly necessary to provide the information you requested.

TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Where the transfer of data outside the EU or to International Organizations is envisaged, the Data Controller undertakes to clarify to the data subject:
– whether or not there is an adequacy decision by the EU Commission or whether or not the Commission has decided that the third country, a territory or specific sector(s) within the third country, or the International Organization in question ensures an adequate level of protection. In that case, the transfer does not require specific authorization;
– in the absence of the above, it must refer to appropriate or adequate safeguards and an indication of the means of obtaining a copy of such data or the place where they have been made available.

DATA RETENTION PERIOD

In order to ensure fair and transparent processing, data shall be kept for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed in In accordance with legal obligations.

RIGHTS OF DATA SUBJECTS

Data subjects have the right to obtain from MUCIM, in the cases provided for, access to their personal data and the rectification, erasure or portability thereof or the restriction of the processing concerning them or to object to the processing (Articles 15 et seq. of the Regulations). Appropriate application to MUCIM is made by contacting the Data Protection Officer (attorney Danilo Quaglini – Data Protection Officer, who can be reached at the following e-mail address: dpo@comune.monterotondo.rm.it).

RIGHT TO COMPLAIN

Data subjects who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation). Further information regarding your data protection rights can be found on the Guarantor’s website at www.garanteprivacy.it