Privacy policy

The following policy describes the methods of processing personal information of the users that visit the web site at https://www.museoselvadicadore.it.
The policy is provided in aggrement with articles 13 and 14 of EU regulation 2016/679 (GDPR).

1. Data controller

The Data controller is Tramedistoria Impresa Sociale.
P.IVA 01182030252 – CF 93053470253
Via IV Novembre, 49 – Selva di Cadore – Belluno
Email: tramedistoria@gmail.com

2. Types of data processed

The website can process browsing data, such as IP addresses, technical information about the device, data about the browser, the operating system, the time of the request and other data automatically transferred during the use of internet protocols.
Moreover, the website processes data provided voluntarily by the user via the contact form, such as name and surname, email address, subject of the message e content of the communication.
Data connected to the use of third-party services integrated into the website (e.g. Google Maps and YouTube) can also be processed.

3. Purposes of the processing

Personal data is processed to enable navigation of the website and to ensure its correct function.
The data sent via contact form or via email is processed in order to reply to the users requests.
Data can also be processed for the purposes of website security, to prevent misuse,unauthorised use, access or malicious activities, and to comply with legal obbligations.

4. Legal basis for processing

The processing of browsing data and of technical information necessary for the website to function is based on the legitimate interest of the data controller in ensuring safety, stability and correct use of the website.
The processing of the data sent voluntarily via the contact form or email is based on the implementation of pre-contractual measures taken at the request of the data subject or based on the legitimate interest of the data controller in acknowledging the received messages.
The processing executed to comply with legal obligation is based on the relevant legal obligation.

5. Nature of the provision of data

The provision of data via contact form is optional, but necessary in order to send the request and receive an answer.
Any failure to provide the necessary data can lead to the inability to send the message or to correctly manage the request.

6. Methods of processing

Data processing is carried out using IT and telecommunication tools and, when necessary, on paper as well, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and confidentiality as set out in the GDPR.
Appropriate technical and organisational measures are adopted in order to protect personal data from unathorised accesses, loss, publication, alteration or unlawful use.

7. Contact form

When the user fills in the contact form available on the website, the data controller processes the entered data just to receive and manage the request.
The data which are requested can include name and surname, email address, subject and message text.
The data are not utilised for marketing or for promotional communications, unless specific and separate consent is given at a later date.
It is recommended not to include any specific details or unnecessary information in the message.

8. Spam protection and security

The contact form can be protected by technical measures design to prevent spam, automated messages or misuse.
Such measures can entail the processing of technical data the is strictly necessary to ensure the security of the website and the service.

9. Third-party services

Google Maps

IlThe website can use maps from Google in order to show the position of the museum or other sites conncted to the museum activities.
The interaction with such contents can entail the processing of personal data by Google, according to the conditions and privacy policy made available by the relevant supplier.

YouTube

The website can use videos published on YouTube.
The display of such contents can entail the processing of personal data by Google and YouTube, according to the conditions and privacy policy made available by the relevant supplier.

10. Website platform

The website was created with WordPress.
The platform and any technical components installed can process technical data necessary for the pages to function, for the management of forms and for the security of the website.

11. Lack of statistics

The website, according to the information available at the moment, doesn’t use tools for stastical analysis or user profiling.
Any rules relating to cookies and other technical tracking tools are set out in the website’s dedicated “Cookie Policy”.

12. Data recipients

Personal data can be processed by staff authorised by the data controller and by providers of technical servises closely linked to the management of the website.
Among these, by way of example, there are hosting providers, technical maintenance, email services, contact form managing and antispam protection.
The providers of the third-parties services, such as Google and YouTuber, can process data as self-employed service providers in relation to the services falling within their respective areas of responsibility.

13. Data transfer to countries outside the EU

The use of third-party services, such as Google Maps or YouTube, can entail the transfer of personal data towards countries outside the European Economic Area.
Such transfers happen in accordance with the guarantees provided for by the applicable legislation, as stated by the respective suppliers.

14. Retention period

The data collected via the contact form is retained for as long as necessary to process the user’s enquiry and, subsequently, for the period strictly necessary to comply with legal obligations or to protect the data controller’s rights.
Techincal browsing data is retained for periods consistent with the purposes of security, maintenance and the proper functioning of the website, unless further retention is necessary in the event of an investigation into unlawful acts.

15. Data subjects rights

The data subject can exercise the rights provided for by the articles 15-22 of the GDPR, within the applicable limits.
Particularly, they can ask access to personal data, rectification, erasure, restriction of processing, object to processing and, where applicable, data portability.
The data subject has also the right to file a complaint with the Data Protection Authority.
To exercise your rights, you may contact the data controller at the following email address: tramedistoria@gmail.com

16. Updates

This privacy policy can be upgraded over time, also taking into account any regulatory, technical or organisational changes to the website.
Users are encouraged to check periodically this page.