{"id":3046,"date":"2024-10-07T11:16:26","date_gmt":"2024-10-07T09:16:26","guid":{"rendered":"https:\/\/www.museodelcavallogiocattolo.it\/?page_id=3046"},"modified":"2024-12-16T11:35:10","modified_gmt":"2024-12-16T10:35:10","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.museodelcavallogiocattolo.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><strong>PRIVACY NOTICE ON THE PROCESSING ACTIVITY OF PERSONAL DATA<\/strong><br \/>\nArt. 13 Regulation (EU) 2016\/679 of the European Parliament and of the European Council<\/p>\n<p>Artsana S.p.A., with legal head office in Grandate (CO) \u2013 Italy, via Saldarini Catelli 1, VAT no. 00227010139 (hereinafter the &#8220;Company&#8221; or the &#8220;Data Controller&#8221;), Data Controller of the processing activity of personal data, provides below the privacy policy pursuant to art. 13 of Regulation (EU) 2016\/679 (hereafter &#8220;GDPR&#8221;), to the data subjects (hereinafter \u201cData Subjects\u201d).<br \/>\nThe Company, as the Data Controller, undertakes to protect the confidentiality and the rights of the Data Subject and, according to the principles established by the aforementioned regulations, the processing activity of the data provided will be based on principles of correctness, lawfulness and transparency.<\/p>\n<p><strong>1. PURPOSES OF THE PROCESSING ACTIVITY<\/strong><br \/>\nThe privacy notice is provided only for the Company&#8217;s website and not for other websites that may be consulted by the Data Subject through links. The Data Subject may voluntarily provide his personal data that will be processed and used by the Company for the purposes related to the requested service indicated by specific privacy notice reported or displayed on the pages of the website for particular services or requests.<br \/>\nThe personal data of the Data Subjects will be processed by the Company for the purposes relating and\/or connected to the provision by the Company of services for the navigation of the website, and specifically to provide the services requested by the Data Subjects when navigating the website, including the collection, storage and elaboration of data for the purposes of delivering the services and their subsequent operational and technical management.<br \/>\nThis data \u2013 which is required to deliver the service \u2013 will also be processed electronically, stored in specific databases, and used strictly and exclusively in relation to navigating the website.<br \/>\nGiven that providing the personal data for these purposes is necessary to maintain and deliver all the services connected to navigating the website, failure to provide such data will make it impossible to provide the specific services in question.<br \/>\nThe Data Controller may also process the personal data without the consent of the Data Subjects in the following circumstances:<br \/>\na) for the aggregate and anonymous analysis of the use of the services accessed, to identify user habits and propensities, to improve the services provided and to meet specific Data Subjects requirements, or to prepare initiatives for improving the services provided.<br \/>\nb) comply with the provisions of laws and regulations, national and foreign, or execute an order of the judicial authority or other authorities to whom the Data Controller is subject;<br \/>\nc) exercise the rights of the Data Controller with particular reference to the right to defense in court.<br \/>\nThe processing activity is lawful as it is carried out for the compliance with the provisions of laws and regulations and the exercise of the rights of the Data Controller.<\/p>\n<p><strong>2. METHODOLOGY OF THE PROCESSING ACTIVITY<\/strong><br \/>\nData processing is carried out electronically and \/ or on paper, by recording, processing, archiving and transmission of data, even with the support of IT tools.<br \/>\nTools and media used in carrying out the processing activities are appropriate to ensure the security and confidentiality of data.<br \/>\nIn carrying out the processing activities, the Company undertakes to:<br \/>\n\uf09f ensure the accuracy and updating of the data processed, and promptly acknowledge any adjustments and \/ or additions requested by the Data Subject;<br \/>\n\uf09f adopt security measures to ensure adequate data protection, because of the potential impact that the processing involves the rights and freedoms of the data subject;<br \/>\n\uf09f notify the data subject, in the times and in the cases provided for by the binding legislation, of any violation of personal data;<br \/>\n\uf09f guarantee the compliance of processing operations with the applicable provisions of the law.<\/p>\n<p><strong>3. COMMUNICATION AND DISCLOSURE OF INFORMATION<\/strong><br \/>\nWithout prejudice to the communications made in fulfillment of legal obligations, the personal data of the data subject may be known, in addition to the Data Controller, by:<br \/>\n\uf09f Employees and collaborators of the Data Controller as authorized data processing personnel;<br \/>\n\uf09f national and foreign companies belonging to the same group to which the Data Controller belongs;<br \/>\n\uf09f authorities in general, administrations, public bodies and organizations, both national and foreign;<br \/>\n\uf09f service providers<br \/>\nexclusively for the purposes listed above according to any consent provided by the data subject. Personal data are not subject to disclosure.<\/p>\n<p><strong>4. TRANSFERS ABROAD<\/strong><br \/>\nPersonal data will be stored and processed within the European Union.<br \/>\nIn the event of any processing of personal data outside the European Union, the same will only occur after the adoption of adequate guarantees, as required by the binding legislation.<\/p>\n<p><strong>5. DATA RETENTION POLICY<\/strong><br \/>\nThe Company keeps personal data in its systems in a form that allows identification of data subjects according to the following criteria:<br \/>\n\uf09f for a period of time not exceeding the achievement of the purposes for which they are processed, unless otherwise required by regulatory or contractual obligations;<br \/>\n\uf09f to comply with specific regulatory or contractual obligations;<br \/>\n\uf09f if applicable and legitimate, up to any request for cancellation by the data subject.<\/p>\n<p><strong>6. RIGHTS OF THE DATA SUBJECT<\/strong><br \/>\nThe data subject can assert his rights, recognized by the binding legislation and in particular by the articles from 15 to 22 of the GDPR, such as:<br \/>\n\u2022 Right of access: the right to obtain from the Data Controller confirmation that personal data is being processed and, in this case, to obtain access to personal data and to further information on the origin, purpose, categories of data processed, recipients of communication and \/ or data transfer, etc.<br \/>\n\u2022 Right of rectification: right to obtain from the Data Controller the correction of incorrect personal data without undue delay, as well as the integration of incomplete personal data, also by providing an additional declaration.<br \/>\n\u2022 Right to erasure: right to obtain from the Data Controller the cancellation of personal data without unjustified delay in the event that:<br \/>\n\uf09f\u00a0 personal data are no longer necessary with respect to the purposes of the processing;<br \/>\n\uf09f the consent on which the processing activity is based has been revoked and there is no other legal basis for the processing activity;<br \/>\n\uf09f personal data have been processed unlawfully;<br \/>\n\uf09f personal data must be deleted to fulfill a legal obligation.<br \/>\n\u2022 Right to oppose the processing activity: the right to object at any time to the processing of personal data that have as their legal basis a legitimate interest of the Data Controller.<br \/>\n\u2022 Right to restriction of processing: the right to obtain from the Controller the limitation of processing, in cases where the accuracy of personal data is contested (for the period necessary for the Data Controller to verify the accuracy of such personal data), if the processing is unlawful and the data subject has objected to the processing, if the personal data are necessary to the data subject for the assessment, exercise or defense of a right in court, if as a result of opposition to the processing activity the data subject is awaiting verification of the prevalence or otherwise of the legitimate interest of the Data Controller.<br \/>\n\u2022 Data portability right: the right to receive personal data in a structured, commonly and automatically readable format, and to transmit such data to another data controller, only for cases where the processing is based on consent or on a contract and only for data processed by electronic means.<br \/>\n\u2022 Right not to be subject to a decision based on automated processing: the right to obtain from the Data Processor not to be subjected to decisions based solely on automated processing, including profiling, which produce legal effects that affect the data subject or that significantly affect his person, except that such decisions are necessary for the conclusion or execution of a contract or are based on the consent given by the data subject.<br \/>\n\uf09f Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial appeal, the data subject who considers that the processing activity concerning him \/ her is in violation of the GDPR has the right to lodge a complaint with a supervisory authority.<\/p>\n<p>In order to exercise the rights provided by the GDPR, the data subject may:<br \/>\n(i) forward your requests to the Data Controller, at the website www.chicco.it\/contacts<br \/>\n(ii) or as an alternative you should contact the Data Controller at the following address:<br \/>\nArtsana S.p.A.<br \/>\nVia Saldarini Catelli n. 1<br \/>\n22070 Grandate (CO)<br \/>\nItaly<br \/>\nindicating in the subject &#8220;Privacy&#8221;.<\/p>\n<p>The Data Controller appointed the \u201cdata protection officer\u201d as required by the GDPR (\u201c<strong>Data Protection Officer\u201d or \u201cDPO<\/strong>\u201d). The Data Subjects can contact the DPO at the following e-mail address: privacy@artsana.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PRIVACY NOTICE ON THE PROCESSING ACTIVITY OF PERSONAL DATA Art.  [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3046","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/pages\/3046","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/comments?post=3046"}],"version-history":[{"count":1,"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/pages\/3046\/revisions"}],"predecessor-version":[{"id":3048,"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/pages\/3046\/revisions\/3048"}],"wp:attachment":[{"href":"https:\/\/www.museodelcavallogiocattolo.it\/en\/wp-json\/wp\/v2\/media?parent=3046"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}