The monumental complex of Santa Maria del Fiore is above all a place of worship. Visitors are asked to respect some simple rules.
Compliance with the obligations foreseen by laws, regulations, national or European regulations, or provisions issued by Authorities and by Supervisory and Control Bodies.
The data processing carried out for these purposes are necessary for the fulfilment of legal obligations and to make it possible for the data subject to use the online sales service and does not require specific consent.
Perform the activity of providing electronic and IT ticket sales services.
The provision of data is necessary to allow users to use the online sales services provided by OSMF and do not require the specific consent from the data subject.
Categories of recipients of the personal data
Your personal data shall be processed by OSMF systems and personnel, that has been specifically authorized pursuant to Art. 4, paragraph 10 of the EU Regulation, which processes data upon precise indications provided by the Data Controller.
Your personal data will also be transmitted to the aforementioned company Weekend a Firenze S.r.L., appointed External Data Processor pursuant to Art. 28 of the Regulations and which is required to carry out the activity assigned to it in accordance with the specific instructions given by OSMF.
Your personal data will also be processed by company Connectis S.r.l., appointed External Data Processor pursuant to Art. 28 of the Regulations and which is required to carry out the activity assigned to it in accordance with the specific instructions given by OSMF.
Finally, your data may be transmitted to the police forces and to the judicial and administrative authorities, in accordance with the law, for the investigation and prosecution of crimes, the prevention and protection from threats to public security, as well as to allow OSMF to exercise or protect its own or third party right before the competent authorities, as well as for other reasons related to the protection of the rights and freedoms of others, in accordance with the provisions of Art. 2-sexies of Legislative Decree 101/2018.
Retention period of the personal data (Data Retention)
We inform you that your data will be kept for a limited period of time, aimed solely for the purpose of fulfilling those obligations imposed by the ticket sales contract, and that, in any case, this period will not exceed 395 days.
At the end of this period, your data will be permanently erased by OSMF and WAF (at the address: [email protected])
We inform you that you have the right to exercise the following rights in relation to the personal data subject of this information, as provided for and guaranteed by the Regulation:
Right of access and rectification (Articles 15 and 16 of the Regulation) you have the right of access to your personal data and ask that the same are correct, be modified or completed. If you so desire, we will provide you a copy of your data in our possession.
Right of the erasure of the data (Art. 17 of the Regulation): in the cases provided for by the current legislation you may request the erasure of your personal data. Having received and analysed your request, we shall cease the processing and erase your personal data, if the request is found to be legitimate.
Right to the restriction of processing (Art. 18 of the Regulation): you have the right to request the restriction of processing of your personal data in the case of unlawful processing or if the accuracy of the personal data is contested by the data subject.
Right to data processing (Art. 20 of the Regulation): you have the right to ask for and obtain your personal data by the Data Controller in order to transmit them to another Data Controller, in those cases foreseen in the referred to Article.
Right to object (Art. 21 of the Regulation): you have the right to object at any moment to the processing of your personal data carried out on the basis or our legitimate interest, explaining the reasons for your request to us; before acceding to your requests, OSMF will have to evaluate the reasons of your request.
Right to lodge a complaint with a supervisory authority (Art. 77 of the Regulation and Art. 141 of the Legislative Decree 101/2018): you have the right to lodge a complaint with the competent Supervisory for the protection of the Personal Data whenever you feel that there is an infringement of your rights as regards the processing of your personal data.
Right to withdraw the consent given (Article 13 of the Regulation): to the processing of personal data that find their legal basis exclusively on your consent, you have the right to withdraw the consent you have given at any time, by contacting the Data Controller.
You may exercise your rights at any time with reference to the
specific processing of your personal data by OSMF.
Further information about the rights of the data subject may be obtained by asking the Data Controller for a complete extract of the aforementioned articles.
Without prejudice to that which has been expressed so far, we remind you that the above rights may also be exercised by anyone who has a personal interest in, or acts to protect you, as your agent, or for family reasons worthy of protection, pursuant to Art. 2- (1) of the Legislative Decree 101/2018.
OSMF has adopted adequate security measures to safeguard the confidentiality, integrity, completeness and availability of the personal data of the data subject. Technical, logistical and organizational measures have been developed to prevent damage, even accidental losses, alterations, improper and unauthorized use of the processed data.
We proceed to test, verify and regularly assess the effectiveness of the safety measures, in order to ensure the continuous improvement in the security of the processing.
Modifications to Current Legislation
The constant evolution of our services might involve changes in the characteristics of the processing of your personal data described up to now. This privacy statement may be subject to changes and additions over time, as necessary owing to new regulatory measures regarding the protection of personal data, or the evolution/modification of our services.
We therefore invite you to periodically check the contents of our information: whenever possible, we will try to promptly inform you about the modification carried out and their consequences.