English version coming soon…

Information on the processing of personal data in accordance with Art.13 EU Reg. 2016/679

EU Regulation 2016/679 – “General Data Protection Regulation” (GDPR) enshrines the right to protection of natural persons with regard to the processing of personal data.

Personal data is any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Pursuant to these regulations, the processing of your personal data will be based on compliance with the principles set forth in Article 5 of the GDPR and, in particular, those of lawfulness, fairness, and transparency.

Personal data processed will be:

  • collected for specified, explicit and legitimate purposes (see point 2);
  • adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed;
  • kept in a form which permits identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed;
  • processed in a manner that ensures adequate security of personal data, including protection, by appropriate technical and organizational measures, from unauthorized or unlawful processing and accidental loss, destruction or damage.

In addition, all reasonable steps will be taken to delete or rectify in a timely manner data that are inaccurate in relation to the purposes for which they are processed.

Below we provide you, as a Data Subject, with specific information regarding the processing of your personal data.

1.DATA CONTROLLER
The Data Controllers are:

Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo based in Turin, Via Montebello 22, IT-10124; email: privacy@museocinema.it.

The Data Controller has appointed Data Processor pursuant to Article 28 RGPD for personal data collected through the Portal “cinema.museitorino.it”, REAR SOC. COOP. based in Via Pietrino Belli 55, 10145, Turin; E-mail: privacy@rearonline.it, Tel. 011.5360400.

2.PURPOSES OF PERSONAL DATA PROCESSING
Your personal data will be processed for the following purposes:

1.execution of the contract and management of the order, in particular to:
– to execute the contract for the provision of the service and to enable the organizers of individual events to manage the issuance of admission tickets;

-manage the reservations of goods and services made by the user and allow the delivery of goods purchased by users;
-to properly fulfill all obligations arising from the respective contractual relationship with you, as well as obligations arising from the law or regulations in force, in particular, in the field of taxation, and public safety;

2.for administrative and accounting purposes, including the possible transmission by electronic mail of commercial invoices;

3.for marketing or promotional activities (e.g. newsletters) limited to the use of Your e-mail and/or postal mail coordinates provided at the time of purchasing a service through the Sales Portal “cinema.museitorino.it”, in order to allow the organizers of individual events to directly offer products or services, provided that You do not object to the processing.

3.LEGAL BASIS OF THE PROCESSING

The processing of your personal data is carried out by the Holders:

  • with reference to the purposes referred to in point 2 letters a) and b), in the context of the performance of the contract to which you are a party or pre-contractual measures taken at your request (Art. 6, par. 1, lett. b), GDPR);
  • with reference to the purposes referred to in point 2 letter c), subject to your express consent (Art. 6(1)(a), GDPR).

 

4.CATEGORIES OF PERSONAL DATA PROCESSED

The realization of the above-mentioned purposes implies the processing of the following personal data:

  • personal data (first name, last name, date of birth, nationality, gender, tax code, VAT number);
  • contact information (e-mail, telephone number, address);
  • payment information (credit card data).

5.METHODS OF PROCESSING

Your data will be processed using paper and/or electronic means.

Your personal data will be processed exclusively by the Data Controllers and/or persons authorized by them.

6.DATA RETENTION PERIOD

Your personal data will be kept only for the time necessary to ensure the proper provision of the services offered and, if necessary, until the complete fulfillment of the obligations required by law and those arising from the contractual relationship established between you and the Company.

7.NATURE OF THE CONFERMENT OF DATA

The provision of your data for the purposes referred to in point 2 letter a) and b) is optional and does not derive from a regulatory obligation. It is understood that failure to provide it will prejudice the provision of the service or the fulfillment of the contractual obligations undertaken.

The provision of your relative data for the purposes referred to in point 2 letter c) is optional and any refusal to provide them will not affect the establishment or continuation of contractual relations.

8.CATEGORIES OF RECIPIENTS

Your personal data may be communicated to:

  • third party companies whose services are offered or sold through the Portal “cinema.museitorino.it” (and, in particular, to companies or entities organizing exhibitions, shows, concerts or other whose tickets are sold through the Portal);
  • professionals and personnel who for organizational and functional requirements need to process such data such as, by way of example, companies that perform educational, ticketing, call center, reception or guard services on behalf of the organizers, accounting and management service providers, event organizers and those who are called upon to provide the good and/or service requested and/or booked by the user
  • all those parties (including Public Authorities) who have access to personal data by virtue of regulatory or administrative measures.

The processing of personal data will be limited to the sole purposes related to the provision in your favor of the services offered by the organizers and subjects involved in the organization of individual events.

The collected data will not be disseminated under any circumstances.

9.RIGHTS OF THE INTERESTED PARTY

As a Data Subject, he/she has the right to request at any time from the Data Controller the exercise of rights under Articles 15 et seq. of the GDPR and, in particular to:

  • request confirmation of the existence or otherwise of ongoing processing of personal data concerning him/her and in that case to obtain access to the personal data;
  • to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the storage period
  • obtain rectification or erasure of data;
  • obtain the restriction of processing;
  • object to the processing at any time;
  • obtain the right to data portability.

With reference to the processing carried out for the purpose referred to in point 2(c), the Data Subject has the right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation.

To exercise the aforementioned rights, the Data Subject may contact the Data Controllers referred to in point1 by sending an e-mail to the addresses indicated.

This is without prejudice to the right to lodge a complaint with the Data Protection Authority.

00:00 0€