Privacy Notice

This Privacy Notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“GDPR” or the “Regulation”) and applicable data protection and privacy legislation, in accordance with the principles of fairness, lawfulness and transparency.

This Privacy Notice explains how Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo processes the personal data of individuals (“Data Subjects”) who:

a) access the website www.museocinema.it;

b) use the services provided by Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo;

c) collaborate, whether on a voluntary or paid basis, in activities carried out by Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo.

Data Controller

The Data Controller is Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo (hereinafter also referred to as the “Museum” or the “Data Controller”), which is committed to ensuring compliance with applicable data protection legislation.

Data Subjects may contact the Data Controller at any time by email at privacy@museocinema.it or by sending a registered letter with acknowledgement of receipt to Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo – Via Montebello 22 – 10124 Turin, Italy.

Categories of Personal Data Processed

The personal data collected and processed may include, by way of example and without limitation, the following:

first name and surname;
email address;
residential and/or domicile address;
bank details for invoicing and payment purposes;
browsing and technical data relating to users’ access to and use of the website;
any other personal data contained in correspondence or communications addressed to the Data Controller.

Purposes of Processing

Personal data are processed for the following purposes:

Performing contractual and pre-contractual obligations: to fulfil obligations arising from specific requests made by the Data Subject. The provision of personal data is mandatory where such data are necessary for the proper performance of contractual and/or pre-contractual obligations. Failure to provide the required data will make it impossible for the Data Controller to properly perform its contractual obligations;
Compliance with legal obligations: to comply with tax, accounting and administrative obligations imposed by applicable law. The provision of personal data is mandatory where necessary for the fulfilment of such legal obligations. Failure to provide the required data will prevent the Data Controller from complying with those obligations;
Newsletter: to send the Museum’s Newsletter. The provision of personal data for this purpose is voluntary. Refusal to provide the data will mean that the Data Subject cannot receive the Newsletter.

Legal Bases for Processing

The Data Controller processes personal data where one or more of the following legal bases applies:

Performance of a contract or pre-contractual measures: where processing is necessary for the performance of a contract or for taking steps at the request of the Data Subject prior to entering into a contract (e.g. booking a guided tour);
Compliance with a legal obligation: where processing is necessary for compliance with a legal obligation to which the Data Controller is subject (e.g. invoicing);
Legitimate interests: where processing is necessary for the purposes of the legitimate interests pursued by the Data Controller, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the Data Subject (e.g. video surveillance);
Consent: where the Data Subject has given consent to the processing of his or her personal data for one or more specific purposes (e.g. subscribing to the Newsletter).

Data Subjects may at any time contact the Data Controller to obtain clarification regarding the specific legal basis applicable to any particular processing activity.

Methods and Retention Period

Personal data are processed using electronic, IT and/or telematic systems, in accordance with organisational procedures and processing methods appropriate to the purposes described above.

The Data Controller implements appropriate security measures designed to prevent the loss, unlawful or improper use of, and unauthorised access to personal data.

Personal data are retained only for as long as is strictly necessary to fulfil the specific purpose for which they were collected and, in any event, for no longer than five years from the date of the last processing activity.

Cookies

The Data Controller’s website uses both session cookies and persistent cookies.

Users may disable cookies at any time by changing their browser settings. The session cookies used by the website avoid the need to employ other potentially privacy-intrusive technical solutions and do not enable the identification of the personal data of individual users.

For further information, please refer to the dedicated document available in the “Cookie Policy” section of the website.

Third-Party Websites and Services

The Museum’s website may contain hyperlinks to third-party websites, including websites relating to specific events or to sponsors of Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo.

The Data Controller has no control over such third-party websites and accepts no responsibility for their content or for their processing of personal data. Users who access such websites through links on the Museum’s website do so at their own risk and are advised to review the relevant privacy notices.

Place of Processing and International Transfers

Personal data are primarily processed at the Data Controller’s operational premises.

Personal data collected through the website may, in certain circumstances, be processed in a country other than the country from which the user accesses the website. The Data Controller does not transfer personal data to countries outside the European Union.

Should personal data be transferred to a country outside the European Union, the Data Controller will ensure, prior to such transfer, that the processing is carried out under conditions offering a level of protection at least equivalent to that guaranteed by the GDPR and, in any event, after obtaining the Data Subject’s consent.

Rights of Data Subjects

Under applicable data protection legislation, Data Subjects may exercise certain rights in relation to their personal data processed by the Data Controller, including the right to:

withdraw consent at any time, where processing is based on consent;
object to the processing of their personal data, where the applicable legal requirements are met;
access their personal data and obtain information about the processing thereof;
request the rectification of inaccurate or incomplete personal data;
request restriction of processing, where the conditions provided for by applicable law are met;
request the erasure of their personal data, subject to any applicable legal exceptions and without prejudice to processing that is otherwise lawful;
receive their personal data and have them transmitted to another Data Controller, where the applicable conditions for data portability are met;
lodge a complaint with the competent data protection supervisory authority and exercise their rights before the competent courts.

To exercise any of these rights, Data Subjects may contact the Data Controller by email at privacy@museocinema.it or by sending a registered letter to: Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo

Via Montebello 22 – 10124 Turin, Italy.

Requests are handled free of charge and as promptly as possible and, in any event, within 30 days of receipt.

Changes to this Privacy Notice

The Data Controller reserves the right to amend or update this Privacy Notice at any time.

Any changes will be promptly published on this page of the Museo Nazionale del Cinema – Fondazione Maria Adriana Prolo website. Where technically and legally possible, the Data Controller may also notify Data Subjects of any changes using one of the contact details available to it.