The monumental complex of Santa Maria del Fiore is above all a place of worship. Visitors are asked to respect some simple rules.
|
Purpose |
Juridical Basis |
A. |
Compliance with the obligations foreseen by laws, regulations, national or European regulations, or provisions issued by Authorities and by Supervisory and Control Bodies. |
The data processing carried out for these purposes are necessary for the fulfilment of legal obligations and to make it possible for the data subject to use the online sales service and does not require specific consent. |
B. |
Perform the activity of providing electronic and IT ticket sales services. |
The provision of data is necessary to allow users to use the online sales services provided by OSMF and do not require the specific consent from the data subject. |
Categories of recipients of the personal data
Your
personal data shall be processed by OSMF systems and
personnel, that has been specifically authorized pursuant to Art. 4,
paragraph 10 of the EU Regulation, which processes data upon precise
indications provided by the Data Controller.
Your personal data
will also be transmitted to the aforementioned company Weekend a
Firenze S.r.L., appointed External Data Processor pursuant to
Art. 28 of the Regulations and which is required to carry out the
activity assigned to it in accordance with the specific instructions
given by OSMF.
Finally, your data may be transmitted to the
police forces and to the judicial and administrative authorities, in
accordance with the law, for the investigation and prosecution of
crimes, the prevention and protection from threats to public
security, as well as to allow OSMF to exercise or protect its
own or third party right before the competent authorities, as well as
for other reasons related to the protection of the rights and
freedoms of others, in accordance with the provisions of Art.
2-sexies of Legislative Decree 101/2018.
Retention
period of the personal data (Data Retention)
We inform
you that your data will be kept for a limited period of time, aimed
solely for the purpose of fulfilling those obligations imposed by the
ticket sales contract, and that, in any case, this period will not
exceed 180 days.
At the end of this period, your data will be
permanently erased by OSMF and WAF (at the address:
[email protected])
Your rights
We inform you
that you have the right to exercise the following rights in relation
to the personal data subject of this information, as provided for and
guaranteed by the Regulation:
Right of access and rectification (Articles 15 and 16 of the Regulation) you have the right of access to your personal data and ask that the same are correct, be modified or completed. If you so desire, we will provide you a copy of your data in our possession.
Right of the erasure of the data (Art. 17 of the Regulation): in the cases provided for by the current legislation you may request the erasure of your personal data. Having received and analysed your request, we shall cease the processing and erase your personal data, if the request is found to be legitimate.
Right to the restriction of processing (Art. 18 of the Regulation): you have the right to request the restriction of processing of your personal data in the case of unlawful processing or if the accuracy of the personal data is contested by the data subject.
Right to data processing (Art. 20 of the Regulation): you have the right to ask for and obtain your personal data by the Data Controller in order to transmit them to another Data Controller, in those cases foreseen in the referred to Article.
Right to object (Art. 21 of the Regulation): you have the right to object at any moment to the processing of your personal data carried out on the basis or our legitimate interest, explaining the reasons for your request to us; before acceding to your requests, OSMF will have to evaluate the reasons of your request.
Right to lodge a complaint with a supervisory authority (Art. 77 of the Regulation and Art. 141 of the Legislative Decree 101/2018): you have the right to lodge a complaint with the competent Supervisory for the protection of the Personal Data whenever you feel that there is an infringement of your rights as regards the processing of your personal data.
Right to withdraw the consent given (Article 13 of the Regulation): to the processing of personal data that find their legal basis exclusively on your consent, you have the right to withdraw the consent you have given at any time, by contacting the Data Controller.
You may exercise your rights at any time with reference to the
specific processing of your personal data by OSMF.
Further
information about the rights of the data subject may be obtained by
asking the Data Controller for a complete extract of the
aforementioned articles.
Without prejudice to that which has been
expressed so far, we remind you that the above rights may also be
exercised by anyone who has a personal interest in, or acts to
protect you, as your agent, or for family reasons worthy of
protection, pursuant to Art. 2- (1) of the Legislative Decree
101/2018.
Security Measures
OSMF
has adopted adequate security measures to safeguard the
confidentiality, integrity, completeness and availability of the
personal data of the data subject. Technical, logistical and
organizational measures have been developed to prevent damage, even
accidental losses, alterations, improper and unauthorized use of the
processed data.
We proceed to test, verify and regularly assess
the effectiveness of the safety measures, in order to ensure the
continuous improvement in the security of the
processing.
Modifications to Current Legislation
The
constant evolution of our services might involve changes in the
characteristics of the processing of your personal data described up
to now. This privacy statement may be subject to changes and
additions over time, as necessary owing to new regulatory measures
regarding the protection of personal data, or the
evolution/modification of our services.
We therefore invite you
to periodically check the contents of our information: whenever
possible, we will try to promptly inform you about the modification
carried out and their consequences.