Privacy policy

Holder of the treatment

Teknoart srl based in Florence, Via Cavour 21 is the Data Controller of the personal data collected on this site pursuant to and for the purposes of EU Regulation 679/2016 (GDPR).
In accordance with the commitment and care that the Data Controller dedicates to the protection of personal data, we inform you about the methods, purposes and scope of communication and dissemination of your personal data and your rights, in accordance with art. 13 of the GDPR.
For any question or request related to the processing of your personal data, you can contact the Data Controller at any time by sending a request to the following references:
Teknoart srl
Via Cavour 21, Firenze
Tel. 055295264

museodavincifirenze@libero.it
P.IVA 05305870486

1) Categories of personal data processed by the data controller

To offer you the services provided by its websites, Dantocchio srl, as Data Controller, must process some personal data necessary for the provision of the services. This data can be implicitly provided by the tools you use to access and use the services or can be explicitly provided by you.

The owner may process the following categories of users' personal data:
• Technical navigation data relating to the IP address, the identification codes of the devices used by the user for the use of the site or services, the characteristics of the browser and access times;
• Navigation data aimed at profiling provided indirectly through the use of the service itself and obtained and analyzed with the user's consent;
• Common identification data provided by the user (eg name, surname, email, telephone number, etc.) for the use of the products and services;

2) Purpose and legal basis of the treatment

The data and cookies received by you will be processed by the Data Controller exclusively with the methods and procedures necessary to provide you with the requested services and for the additional purposes for which you have given your consent.

Only with your express consent can the data be used to carry out statistical analyzes, market surveys, promotional activities via social media and sending commercial information on the owner's products and promotional initiatives. (Direct marketing purposes).

Always with your consent, the data may be used for profiling purposes automatically conducted by collecting information on the navigation you do while accessing and using the services of the service and, through statistical correlation algorithms, bind them to the same information from other users. to identify common traits and group similar traits within classes of interest. By assigning your browser to an interest class, our systems will subsequently be able to offer you content that is closer to your tastes and will present advertising contributions that best meet your needs and best target the interests of advertisers by reducing the level of disturbance to fruition.

Communications for market surveys or commercial information on products and promotional initiatives may be made by postal mailing, e-mail, telemarketing, sms, mms.

We inform you that some activities could be carried out through suppliers, specifically appointed Data Processors, also residing outside the European Union.

The legal bases of the purposes described above are the execution of your request as an interested party and the consents expressed by you.

3) Dissemination, communication and subjects who access the data

Your personal data will not be disclosed, but may be communicated where necessary for the provision of the service to third parties (such as third party technical service providers, couriers, hosting providers, IT companies) appointed, if necessary, Data Processors by of the owner for technical or organizational tasks instrumental to the provision of services.
Access to data is also allowed to categories of persons in charge by the owner involved in the organization for data processing (administrative, commercial, marketing, customer service, system administrators).
The updated list of Managers can always be requested from the Data Controller.
The right of communication to third parties remains reserved if you have given specific and optional consent.

4) Transfer of data abroad

Your personal data will be processed by the Data Controller within the territory of the European Union.
If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, or it is necessary to transfer some of the data collected to technical systems and services managed in the cloud and located outside the area of the European Union, the treatment will be regulated in accordance with the provisions of Chapter V of the Regulation and authorized on the basis of specific decisions of the European Union.

Therefore, all necessary precautions will be taken in order to guarantee the most complete protection of personal data by basing this transfer:
- On adequacy decisions of the recipient third countries expressed by the European Commission;
- On adequate guarantees expressed by the third party recipient pursuant to art. 46 of the Regulation;
- On the adoption of binding corporate rules, the so-called Corporate binding rules.

5) Duration of processing and storage of personal data

The Owner in accordance with the Art. 5.1 e) of the GDPR will process the data you provide for the entire duration of execution of the requested services and will keep them for the next 12 months for the purpose of completing the administrative activities., As well as for the time necessary to fulfill legal obligations.
If you have authorized the profiling treatment, the anonymous data observed from time to time will be deleted after 12 months from the start of the treatment.

6) Rights of the interested party

The Owner guarantees you that you can exercise the rights provided for in art. at any time 12 of the GDPR. In particular, you have the right: to know if the Data Controller holds and / or processes personal data relating to your person and to access it in full even by obtaining a copy (art. 15 Right to access);
- The correction of inaccurate personal data or the integration of incomplete personal data (Art. 16 Right of rectification);
- The cancellation of personal data held by the Data Controller if one of the reasons provided for by the GDPR (Right to Cancellation, 17) exists;
- To ask the Data Controller to limit the processing to only some personal data, if one of the reasons provided for by the Regulation exists (Art. 18 Right to limit the processing);
- To request and receive all your personal data processed by the owner, in a structured format, commonly used and readable by an automatic device or request transmission to another owner without impediments (Art. 20, Right to Portability);
- To object in whole or in part to the processing of data for the purpose of sending advertising materials and market research (so-called Consent) (art.21 Right to object);
- To object in whole or in part to the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent);
The exercise of these rights can be exercised by communicating to the Data Controller whose contact details are indicated in the appropriate section of this information. Furthermore, you always have the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data, which can be contacted at the address garante@gpdp.it or through the website http://www.gpdp.it.