Contact form policy

Article 13 Reg. UE 679/2016

Dear website Visitor,

We wish to inform you that Reg. EU 679/2016 (and Legislative Decree 196/2003 and subsequent amendments, only for what complies with EU Reg. 679/2016) provides for the protection of individuals with regard to the processing of personal data. According to this legislation, the processing of your data will be based on principles of correctness, lawfulness and transparency, protecting the confidentiality and security of data and guaranteeing the exercise of your rights.

Pursuant to the aforementioned article 13 of Reg. UE 679/2016, we therefore provide you with the following information:

The identity and contact details of the data controller and, where applicable, of his representative;
The data controller is:

Leonardo Da Vinci Experience – Arte Italiana APS

Via della Conciliazione, 19
00193 Roma RM
Phone +39 06 683 3316
info@leonardodavincimuseo.com

The data controller is established in the European Union and, therefore, is not required to designate a representative.

The contact details of the data protection officer, where applicable;
The Data Protection Officer (DPO) can be reached at the following addresses:
Phone +39 06 683 3316
info@leonardodavincimuseo.com

The purposes of the processing for which the personal data are intended as well as the legal basis of the processing;
The purpose of the treatment is the following:

Process your request for contact with our company, made through our website https://www.leonardodavincimuseo.com
We inform you that for the aforementioned purpose, your personal data will be processed (personal data, contact data such as, for example, email addresses, telephone numbers/etc…).

It should be noted that, in no section of the site, nor for access to any function of the site, is the provision of “particular categories of personal data” and/or “personal data relating to criminal convictions and crimes”, as defined from the articles 9 and 10 of Reg. EU 679/2016: if the User spontaneously sends information of the aforementioned type to the data controller, the data controller will delete them as they are not strictly necessary for the aforementioned purpose.

The legal basis of the processing is related to the provisions of art. 6 paragraph 1 letter a) of Reg. EU 679/2016, as the interested party has given his consent to the processing of his personal data for one or more specific purposes.

If the treatment is based on article 6, paragraph 1, letter f), the legitimate interests pursued by the data controller or by third parties;
We inform you that the data processing is not based on article 6, paragraph 1, letter f), as the processing is not necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests do not prevail o the fundamental rights and freedoms of the data subject which require the protection of personal data, in particular if the data subject is a minor.

Any recipients or any categories of recipients of the personal data;
Your personal data will be processed by subjects specifically appointed by the data controller as data processors (if appointed) and/or by anyone acting under their authority and/or under that of the data controller and who has access to personal data (Administrators/partners/workers of the data controller); these subjects will process your data only when necessary in relation to the purposes of the provision and only in the context of carrying out the tasks assigned to them by the data controller, undertaking to process only the data necessary for the performance of these tasks and to carry out only the operations necessary for carrying them out.

Your personal data will not be communicated to third parties and/or disseminated.

454 / 5.000 Risultati della traduzione Risultato di traduzione Where applicable, the controller’s intention to transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in Article 46 or 47, or in article 49, second paragraph, the reference to the appropriate or opportune guarantees and the means to obtain a copy of such data or the place where they have been made available.
133 / 5.000 Risultati della traduzione Risultato di traduzione The data controller does not intend to transfer personal data to a third country or an international organization.

It should be noted that the personal data relating to the aforementioned processing are hosted on a server located in Italy.

In addition to the information previously provided, the data controller provides you with the following additional information necessary to ensure correct and transparent processing:

The retention period of personal data or, if this is not possible, the criteria used to determine this period;
Your data will be kept for the time necessary to achieve the purposes indicated above. The data will be kept for the time strictly necessary to respond to requests coming through the contact forms on the company website and, at the most, for a period of 5 years from the time of collection.

The existence of the right of the interested party to ask the data controller for access to personal data and the rectification or cancellation of the same or the limitation of the treatment that concerns him or to oppose their treatment, in addition to the right to data portability;
You may, at any time, exercise towards the data controller the following rights provided for by Reg. EU 679/2016, by contacting the data controller at the addresses indicated in point a) of this information:

Right of access of the interested party (Article 15 of EU Reg. 679/2016).
56 / 5.000 Risultati della traduzione Risultato di traduzione Right of rectification (Article 16 of EU Reg. 679/2016).
Right to cancellation – «right to be forgotten» (Article 17 of EU Reg. 679/2016).
Right to limit treatment (Article 18 of EU Reg. 679/2016).
Right to object (Article 21 of EU Reg. 679/2016).
Right to data portability (Article 20 of EU Reg. 679/2016).
If the treatment is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
You may exercise the right to revoke the consent at any time towards the data controller without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

The right to lodge a complaint with a supervisory authority;
If you believe that the processing that concerns you violates this regulation, you have the right to lodge a complaint with a supervisory authority (Article 77 of EU Reg. 679/2016).

If the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the interested party is obliged to provide personal data as well as the possible consequences of not communicating such data;
The data communications described above are necessary to process your contact request and are strictly connected to normal company operations; therefore, failure to communicate could make it impossible to process your contact request (in particular, as regards the “mandatory fields”, present within the information collection form).

The existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such treatment for the ‘interested.
The data controller informs you that your data will not be subject to an automated decision-making process, including the profiling referred to in article 22, paragraphs 1 and 4 of the Reg. UE 679/2016.

The full text of the articles of the REG. EU 679/2016 relating to your rights (articles from 15 to 22 inclusive) can be consulted at the following link on the website of the Guarantor Authority for the Protection of Personal Data:

https://www.garanteprivacy.it/regolamentoue
or, alternatively, they will be provided to you by the Owner at your simple request.

Finally, the data controller informs you that, if the data controller intends to further process personal data for a purpose other than that for which they were collected, before such further processing he undertakes to provide you with all the relevant information. for this different purpose and any further pertinent information referred to in Article 13 of Reg. EU 679/2016, paragraph 2.