Privacy Policy

Information on the processing of personal data
pursuant to Article 13 – of Legislative Decree June 30, 2003, no. 196.

The Obsidian Museum, in compliance with the principles enshrined in D. Lgs.30 June 2003, n. 196 “Code regarding the protection of personal data”, offers users the opportunity to interact with its portal to consult or use the related services, accessible through the address https://www.museossidiana.it corresponding to the home page of the site Obsidian Museum. This page, in addition to describing the methods of management of the site, pursuant to Article 13 of the aforementioned “Code” is intended to inform users who connect to the portal, including with regard to the processing of personal data and the related guarantees recognized by law.
This information is provided solely for the Obsidian Museum website and not for any other websites that may be accessed by the user through links.

Purposes of the processing
Personal data will be processed in relation to the services offered by the Obsidian Museum through its portal, exclusively for the purposes that fall within the tasks required by law or regulation. Within the scope of these purposes, the processing also concerns data related to registrations/registrations to the portal necessary for the management of relations with the Entity, as well as to enable effective institutional communication and to fulfill any legal, regulatory or contractual obligations.

Place and methods of processing
Processing related to the web services of the site takes place at the headquarters of the Obsidian Museum and takes place, for the time strictly necessary to achieve the purposes, including through the use of automated tools observing the security measures aimed at preventing data loss, illicit or incorrect use and unauthorized access. The data are processed exclusively by staff, mainly technical, in charge of the processing or by any persons in charge of occasional maintenance operations, according to the principles of correctness, lawfulness, transparency, relevance and not exceeding the purposes of collection and subsequent processing.
Personal data provided by users who register and provide references such as first name, last name, residence, telephone references, e-mail address, may be used for other processing operations in terms compatible with the purposes of collection such as sending, by e-mail, institutional and public utility communications.
The personal data of users who request documents or informational materials (newsletters, answers to questions, acts and measures, etc.) are used only to perform the requested service or performance and are disclosed to third parties only if it is necessary for this purpose (shipping services and the like).
Data related to the online service are not subject to communication or dissemination, unless provisions of the law or regulations provide otherwise.

Type and nature of data processed
Browsing data
Access to the site involves the recording of data used for the sole purpose of obtaining statistical information or to ensure proper functioning. The data collected include the IP addresses and/or domain names of the computers used by the users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are not collected for the purpose of associating them with identified subjects, however, due to their nature they could allow users to be identified through processing and associations with data held by third parties especially when it is necessary to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site. The data used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its proper functioning, are kept for the time necessary to carry out the activities of analysis and comparative statistical processing and in any case for a period of time not exceeding 12 months

Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated in the different channels of access to the site and the completion of the formats (masks) entail the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. In this case, the acquired data will be processed exclusively to respond to users’ requests, for example, on the use of a service, on problems in connecting to the site, on problems in navigating the site, on problems in accessing the site’s services or on problems in accessing their account. In order to better contextualize the question, users may be contacted via email, telephone, or other communication systems by an Administration operator. Specific summary disclosures will be made or displayed on pages of the site set up for particular on-demand services.

Cookies
No personal user data is purposely acquired by the site.
The use of so-called session cookies (which are not stored persistently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site.
The so-called session cookies used in this site avoid the use of other computer techniques potentially prejudicial to the privacy of users’ browsing and do not allow the acquisition of personal data identifying the user.
The use of permanent cookies is strictly limited to the acquisition of statistical data useful for understanding the level of use of its site.

The Site uses analytics cookies used to collect information, in aggregate form, about the number of Users and how Users visit the Site; analytics cookies allow, among other things, the collection and processing of the User’s browsing data, including IP addresses or domain names of the computers used by Users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, and other parameters relating to the User’s operating system and computer environment; the data are collected for the sole purpose of processing anonymous statistical information on the use of the Site and to verify the proper functioning of the same; navigation data could be used with a view to identifying the User only if this is necessary for the detection of computer crimes.

Obligation or faculty to provide data
Apart from that specified for navigation data, the user is free to provide personal data contained in the request forms or otherwise indicated in contacts with the Obsidian Museum to solicit the sending of communications or any documentation.
Failure to provide the data (e.g., personal data, e-mail address, telephone number) necessary to render the service may make it impossible to obtain what has been requested.

Data Controller and Data Processor
The Data Controller of the processing of personal data carried out through the website is the Obsidian Museum, located at Via San Giorgio, 8 – 09090 Pau(OR) Italy

Rights of the data subject
Users in their capacity as data subjects (subjects to whom the data refer), may exercise at any time, by contacting the Data Controller, the rights listed in Article 7 of Legislative Decree 196/2003 below in full:

Art. 7 Legislative Decree June 30, 2003, no. 196

The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in an intelligible form.
The data subject has the right to obtain the indication:
Of the origin of personal data;
Of the purposes and methods of processing;
Of the logic applied in the case of processing carried out with the aid of electronic instruments;
of the identification details of the owner, managers and designated representative in accordance with Article 5, paragraph 2;
of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, as managers or appointees.The interested party has the right to obtain indication:
The data subject has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
certification that the operations referred to in letters a and b have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right.
The data subject has the right to object, in whole or in part:
for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.