Cookies & Privacy Policy

The personal data collected will be processed by Associazione Rifugio Digitale E.T.S., with registered office at Via della Fornace 41 – Florence, acting as Data Controller for the purpose of responding to information requests (e.g. information on exhibitions, artists and artworks) and subscribing to the Rifugio Digitale newsletter.

If you have any questions regarding this privacy policy, including any requests to exercise your legal rights, please contact us by email at: info@rifugiodigitale.it

1. Data Controller

The Data Controller is Associazione Culturale Rifugio Digitale E.T.S.

2. Purpose of the processing

The personal data provided by users will be used to enable browsing and access to the services offered on the website. Registration is permitted to those who explicitly request it by completing the forms available on the website pages dedicated to this service, after reading the relevant privacy notice and authorizing the Association to process their personal data. Refusal to provide data will make it impossible to access the services offered by the website.

3. Processing methods and security measures

Personal Data are processed using automated and non-automated tools only for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are implemented to prevent data loss, unlawful or improper use, and unauthorized access.

The transmission of data voluntarily provided by users through the completion of forms is managed using encryption technology with SSL certification, which encodes the information before it is transmitted over the Internet between the user’s device and the Data Controller’s systems, making it unintelligible to unauthorized parties and thus ensuring confidentiality.

Within Associazione Rifugio Digitale E.T.S., employees or external collaborators assigned to services, as well as internal and external structures providing consulting and support activities, may become aware of your personal data.

Data processing is carried out by personnel under the direct authority of the Data Controller and/or by natural or legal persons specifically appointed as data processors or authorized persons.

4. Data communication

The data provided will not be disclosed or communicated to third parties, except for communication:

– to subjects entitled to access the data by law or by order of authorities;
– to subjects, including external and/or foreign ones, used by the Data Controller to carry out instrumental and/or ancillary activities related to data management and service provision, including providers of software solutions, web applications, and similar services.

These subjects will use the data as independent “data controllers”, unless they have been appointed by Forma Edizioni as processors for specific processing activities.

The newsletter is sent by email to those who explicitly request it by completing the relevant form on the website and authorizing the Data Controller to process their personal data.

Data related to registration, which allow the Data Controller to provide services to the user, may also be communicated to the Association.

This Association:

  • may be based outside the European Union;
  • will never directly use personal data communicated to it by the President;
  • will not sell personal data communicated to it by the President to third parties.

Data communication will take place in strict compliance with the applicable laws in force at the time.

By subscribing to the website services, the user acknowledges that they allow the President, through analysis carried out by the service provider, to access the following information:

  • number of times the newsletter email is opened;
  • number of clicks on links contained in the newsletter;
  • failure to open the newsletter email;
  • email bounce;
  • unsubscribe actions;
  • complaints;
  • possible use of newsletter content.

5. Place of data processing

Processing related to the web services of this site takes place at the headquarters of Rifugio Digitale and at the premises of subjects used by the President for instrumental and/or ancillary activities related to data management, or by third parties acting as data processors for Associazione Rifugio Digitale E.T.S.

No personal data derived from the web service is disclosed.

6. Types of data processed

Browsing data
The IT systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified individuals, but by its nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes IP addresses or domain names of users’ computers, URI addresses of requested resources, time of requests, method used to submit requests to the server, size of files obtained in response, numerical codes indicating the status of server responses, and other parameters related to the user’s operating system and IT environment.

Data voluntarily provided by the user
The optional, explicit, and voluntary sending of emails to the addresses indicated on this website involves the subsequent acquisition of certain personal data, including special categories of personal data, entered in the forms necessary to respond to requests.

7. Nature of data provision

If the user wishes to interact with the Association through the website, providing data is optional but necessary to obtain the requested information. Failure to provide such data will make it impossible for the President to respond.

8. Data subjects’ rights

Under the Regulation, the data subject has the right to access their data, to obtain confirmation at any time of whether such data exist, and to know their content, origin, and location, as well as to request a copy.

The data subject also has the right to verify accuracy or request integration, updating, rectification, restriction of processing, erasure, anonymization, or blocking of data processed in violation of the law, as well as to object to processing. Furthermore, the data subject has the right to data portability and to lodge a complaint with the supervisory authority.

9. Data retention period

Associazione Rifugio Digitale E.T.S. will process data for as long as the data subject who has subscribed to the services has not requested deletion.

10. How to exercise rights

To exercise the rights referred to in point 8, the data subject may contact the President by sending an email to info@rifugiodigitale.it.

The response time is thirty days, extendable up to three months in particularly complex cases. In such cases, the President will provide at least an interim response within thirty days.

The exercise of rights is generally free of charge; however, the President reserves the right to request a contribution in the case of manifestly unfounded or excessive requests (including repetitive ones), also in light of guidance provided by the Data Protection Authority.

11. Complaint to the Data Protection Authority

The data subject has the right to lodge a complaint with the Data Protection Authority, which can be contacted at http://www.garanteprivacy.it

Cookies & Privacy Policy