INFORMATION ON THE PROCESSING OF PERSONAL DATA/OPERATORS

INFORMATION PROCESSING PERSONAL DATA OPERATORS

Article 13 of Regulation EU 2016/679
“General Data Protection Regulation”

Opera della Primaziale Pisana as Data Controller, hereby informs you of how your personal data are processed.

CONTACT DETAILS OF DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)

Data Controller is
Opera della Primaziale Pisana
with legal office in – Piazza del Duomo n. 17, Pisa
e-mail: info@opapisa.it

We have a Data Protection Officer (or DPO). If you wish to make any enquiries regarding the protection of your personal data and the exercise of your rights you can contact her/him by e-mail privacy@opapisa.it

 

TYPE OF PERSONAL DATA PROCESSED AND PURPOSE OF THE PROCESSING

Data may be subject to processing, by way of example: company name, tax information and invoicing data, contact details (e.g. e-mail address, address, phone number, PEC), web site (optional), nationality. Should your registration be accepted, the following personal data may also be processed if you proceed with the booking and/or purchase of tickets: payment method data as well as information related to the booking and the purchase being made (day of visit, chosen monument, type of ticket etc).

The personal data and contact data of employees, collaborators, contact persons, partners whose services you use for the execution of the contractual relationship may also be processed. You have the duty to inform your employees, collaborators, contact persons about the aforementioned processing, also by providing them with this privacy policy.

The data will be processed for the following purposes: i) allowing the registration to our web site/portal and the activation of the affiliation; ii) allowing advance booking and purchase of tickets, printing, possible modification and/or cancellation of tickets; iii) sending, in exceptional cases, communications when there are unforeseen closing and/or schedule changes; iv) for accounting and/or administrative management; v) for the protection of the Data Controller’s rights and interests.

 

LEGAL BASIS OF PROCESSING AND PROVISION

The legal basis of the processing consists in the compliance to contractual obligations and/or the implementation of pre-contractual measures taken at your request, in the need to fulfill the obligations established by current regulations (e.g.: obligations related to invoicing and accounting management), in the legitimate interest of the Data Controller to protect its own rights and interests.

The provision of the requested information is necessary to enable the activation of the agreement as well as the purchase and booking of tickets and to fulfill legal and contractual obligations, therefore, any refusal to provide it will make it impossible for Opera della Primaziale Pisana to comply with your request and/or to carry out correctly all the obligations foreseen by the above.

 

DATA RETENTION PERIOD

The data will be stored for the period necessary for the completion of the aforementioned objectives as well as in accordance with the Institution’s Policies and the specific nature of the Institution, legal obligations and historical archiving.

 

RECIPIENTS OF PERSONAL DATA

Designated personnel, duly trained and operating under the authority and responsibility of the Data Controller, will process the data. Some information can be communicated to the recipients indicated below:

  1. a) Public bodies (tax offices and other entities);
  2. b) Banks and credit institutions;
  3. c) IT systems assistance and maintenance companies or IT storage provider;
  4. d) Other recipients or companies that carry out activities related to the purposes listed above.

L’elenco dettagliato di tutti i destinatari è disponibile presso la sede del Titolare del trattamento e verrà fornito su Sua richiesta scrivendo al seguente indirizzo e-mail: privacy@opapisa.it

 

RIGHTS OF THE DATA SUBJECT

We also inform you that, as a Data Subject, you can exercise the rights provided for in CHAPTER III, Regulation EU 2016/679 at any time. In particular, you have the right to ask the Data Controller for access, correction, deletion, or integration of your data, the limitation of processing, to receive the data in a structured, commonly used and machine- readable format, to object in whole or in part the use of data, to withdraw any consent given, as well as to exercise the other rights recognised by the applicable regulation.

These rights can be exercised by writing to the addresses indicated or by e-mail to the following e-mail address: privacy@opapisa.it

According to art. 77 Regulation EU 2016/679, you have the right to lodge a complaint with the Supervisory Authority if you consider the processing infringes the Regulation.

 

Please save or print this document, it may be useful later