Privacy & cookie policy
THE REASONS FOR THIS INFORMATION
On this page you will find a description of how the site is managed with regard to processing of the personal data of the users consulting it.
This information is provided in accordance with Regulation (EU) 2016/679 for those interacting with the web services of Fondazione Musei Civici di Venezia (hereafter FMCV), accessible via computer at the address https://www.visitmuve.it /.com / .eu / .tv /.org, corresponding to the first page of the Foundation’s official site and the addresses of its museums palazzoducale.visitmuve.it, correr.visitmuve.it, torreorologio.visitmuve.it, carezzonico.visitmuve.it, capesaro.visitmuve.it, mocenigo.visitmuve.it, carlogoldoni.visitmuve.it, fortuny.visitmuve.it, storianaturale.visitmuve.it, museovetro.visitmuve.it, museomerletto.visitmuve.it, nonché di shop.visitmuve.it
This information can be found on the Foundation’s website and not on any other websites the user might be consulting via links, and also concerns data collected via forms present in invitations to take part in/subscribe to FMCV events.
DATA CONTROLLER
The Data Controller is Fondazione Musei Civici di Venezia, with head office in Venice – San Marco No. 52. Email privacy@fmcvenezia.it.
Data may be processed by third parties identified by the Foundation as Data Processors, including:
1) professionals and companies appointed to carry out services and activities functional to the provision of institutional / museum activities;
2) professionals and companies appointed to carry out administrative, accounting and legal services related to museum activities;
3) professionals and companies appointed to carry out cultural heritage safety and security services.
PLACE OF DATA PROCESSING
Processing related to the web services of this site takes place in the Foundation’s aforementioned offices and in the offices of Palazzo Ducale in Piazza San Marco 1 – 30124 Venice; it is performed by both the technicians of the Service entrusted with the task of processing, and by companies responsible for processing as part of the services provided by them.
As for processing of personal data related to the use of third-party cookies that the user has authorized through the initial banner, the place of processing is also that of the company that owns the cookies.
Should processing also concern personal data falling within the category of “sensitive” data (particular data pursuant to Article 9 of the GDPR, i.e. data that reveals racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data revealing the state of health, life and sexual orientation) processing will be carried out on the basis of the interested party’s consent when necessary and within the limits indicated by current, applicable legal provisions, according to the methods provided by the GDPR and only if strictly essential for the regular performance of operations relating to the supply of products / services requested by the user and fulfillment of the related contractual and / or legal and regulatory obligations.
Users are invited to avoid entering superfluous or otherwise unsolicited sensitive data as this could lead to the destruction of the message and failure to execute what is reported therein.
PURPOSE AND LEGAL BASIS OF PROCESSING
Data processing will be carried out in compliance with the regulations in force and the principles of correctness, lawfulness, transparency; relevance, completeness and non-excess of information; moreover, the aforementioned data will be collected and recorded only for the purposes indicated below.
Processing may consist in the collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, blocking, communication, dissemination, cancellation and destruction of data and will be carried out with the aid of electronic tools suitable to guarantee the security, integrity and confidentiality of the data.
Unless otherwise exercised through other pages of the site and for which specific information is valid, data collected through the website and through the forms contained in FMCV event invitations are processed for the following purposes:
Purpose: Provision of services requested by users such as user information requests, online purchases, event reservations.
Legal basis: Fulfillment of contractual and / or pre-contractual obligations.
Compliance with legal obligations.
Retention period: Until the purpose is achieved, without prejudice to the retention period of documents required by law (e.g. invoices) or by order of a judicial authority.
Purpose: Subscription to the Foundation newsletter.
Legal basis: Consent of the interested party.
Retention period: For the entire duration of the service or until consent is withdrawn.
Purpose: Carry out statistical analyses (on an anonymous basis), in order to improve the supply of services.
Legal basis: Data Controller’s legitimate interest.
Retention period: Same duration of retention of data processed for the aforementioned purposes.
Purpose: Registration and management of access to the site.
Legal basis: Fulfillment of contractual and / or pre-contractual obligations.
Data Controller’s legitimate interest.
Retention period: Until the purpose is achieved, without prejudice to a longer retention period by order of a Judicial Authority or for the protection of the Data Controller’s rights.
Purpose: Mailing of flyers, brochures, catalogues, invitations or other documentation relating to the services provided and promotional initiatives for the Foundation’s products and / or services.
Legal basis: Consent of the interested party.
Retention period: For the entire duration of the service or until consent is withdrawn.
Purpose: Creation and management of mailing lists with the identification and contact data of journalists and / or press officers for the purpose of subsequent invitations.
Legal basis: Consent of the interested party. Data Controller’s legitimate interest.
Retention period: Until opposition to processing or withdrawal of consent.
Purpose: Compliance with transparency obligations pursuant to Law 190/2012 and Legislative Decree 33/2013, relating to the data of the suppliers of goods and services or identification data of FMCV personnel.
Legal basis: Legal obligation.
Retention period: Three or five years depending on the type of document.
Purpose: Recording user satisfaction index in anonymous form.
Legal basis: Legitimate interest.
Retention period: Until the purpose is achieved.
Purpose: Compliance with the legal obligations resulting from the aforementioned purposes.
Legal basis: Legal obligation.
Retention period: Duration provided by law applicable to the single processing.
Purpose: Management of incoming communications for reports, suggestions, complaints and verification of the level of service quality.
Legal basis: Fulfillment of contractual and / or pre-contractual obligations for management of communications received. Consent of the interested party to processing of particular data (state of health / disability condition) indicated in the communications by the interested party.
Legitimate interest in verifying the quality level of the service.
Retention period: The data of the reporting persons will be retained for up to a maximum of one year.
Purpose: Management of requests (data, support, collaboration) for the development of degree theses, doctoral theses, university research.
Legal basis: Fulfillment of contractual and / or pre-contractual obligations.
Legitimate interest of the Data Controller for statistical purposes (on an anonymous basis) on the use of museum services.
Retention period: 2 years.
The Data Controller may retain personal data for a longer period in order to exercise, protect or assert its own rights.
TELEPHONE BOOKINGS
Purpose: To proceed with telephone bookings made by users.
Legal basis: Fulfillment of contractual and / or pre-contractual obligations.
Compliance with legal obligations.
Retention period: Until the purpose is achieved, without prejudice to the retention period of documents required by law (e.g. invoices or payment receipts, tickets) or by order of a judicial authority.
MANAGEMENT OF REPORTS, SUGGESTIONS AND COMPLAINTS
In the appropriate section of the site, users who so wish can fill out the dedicated form and send their suggestions or complaints to FMCV and give feedback regarding the Foundation’s service or services. The required data include identification data of the reporting party (name, surname, email address) which will be processed and retained until the individual communication is archived for a maximum duration of one year. The data will be known by the internal resources involved in management and by external suppliers who participate in the organization and provision of various museum services as data processors.
CATEGORIES OF RECIPIENTS
Recipients or categories of recipients which, for achievement of the purposes described, might be informed of the data or receive communication thereof are as follows:
a) Internal delegates: Internal offices and areas as in Organizational Structure.
b) External delegates: Consultants, Free-lance Professionals, Collaborators and External Technicians.
c) External Managers: Companies that provide FMCV with instrumental services for the provision of the services requested by the interested party, Professional Firms and Associations, Law Firms, Auditing Firms, Technical Assistance Companies.
The data may also be disclosed to public bodies, police forces or other administrative authorities exclusively for the purpose of fulfilling legal obligations, regulations or EU legislation.
RIGHTS OF THE INTERESTED PARTIES
The interested parties (the natural persons to whom the personal data refers) have the right to exercise their rights pursuant to art. 15 et sq. of the Regulation, in particular to obtain confirmation from the Data Controller of the existence or otherwise of processing of data concerning them, request access to data, updating, rectification, erasure or to request limitation of processing of personal data or to express opposition to processing, to request its portability. These articles also provide for the right of the interested party to lodge a complaint with a European supervisory authority or to bring a judicial appeal pursuant to art. 77 GDPR. The consent and preferences expressed can be withdrawn or modified later by writing to privacy@fmcvenezia.it
At the end of the retention period, personal data will be destroyed or deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Users are advised not to enter unnecessary special data (e.g. health status) in communications.
TYPES OF DATA PROCESSED
Information collected automatically
During the normal course of events, the computer systems and software procedures used for this website acquire some personal data, the transmission of which is implicit in the use of internet communication protocols.
This is data that is not collected so it can be associated with identified interested parties, but that, by its very nature, with processing and association with data held by third parties, makes it possible to identify the users, the computers used by the users logged on to the site, the URI addresses (Uniform Resource Identifier) of the resources requested, the time of request, the method used to send the server the request, the size of the file received in reply, the numeric code indicating the state of the server’s reply (successful, error, etc.) and other parameters regarding the user’s operative system and computer surroundings.
The following information is automatically collected when visiting the website:
- User’s hostname The hostname or address of the Internet Protocol of the user asking to access the Fondazione Musei Civici di Venezia website.
- HTTP registration and the ‘user agent’ that includes: the type and version of browser used and the operative system with which the browser is working.
- System date. The date and time of the user’s visit.
- Complete request. The user’s exact request.
- Method. The kind of request used.
- Universal Resource Identifier (URI). Collocation of the resources in the server.
- Type of device used to consult the site
- Protocol. Transmission protocol and version used
PROVISION OF DATA
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
With the exception of automatically collected information, the user is free to provide personal data in request forms to the Foundation or indicated in contacts with the Foundation requesting informative material or other communication to be sent. Failure to supply this information may make it impossible to fulfil a request.
For the direct collection of such data it will be the visitor who gives his/her own personal data and the relative consent to processing for the individual services/products requested from the Foundation such as registering on the web site or reserved areas, purchases on line, requesting information, subscribing to events, booking visits, courses, newsletters or mailing lists. The consent given may be withdrawn at any moment.
MANAGEMENT OF COOKIES IN THE CONFIGURATION OF THE MAJOR BROWSERS USED
Manage cookies in Google Chrome >>>
Manage cookies in Internet Explorer >>>
Manage cookies in Mozilla Firefox >>>
The following site is indicated again to analyze, more generally, and manage your preferences in terms of online behavioural advertising http://www.youronlinechoices.com.
Latest update: 27 September 2022