The present document describes the management policies of the web-site http://museolamborghini.com/ (the “Site”) with reference to the processing of site users’ personal data.
By accessing and visiting this Site, the Users give authorize the data practices described in this document.
The data practices are based on principles of legality and fairness in compliance with all applicable regulations (and thus also in accordance with the principles of necessity, fairness, legality, transparency and protection of privacy) and are strictly related to the purposes herein described.
The data controller is:
Associazione di Promozione Sociale “Sotto il Segno del Toro”
Strada Provinciale Galliera, 319 – 40050 Argelato (BO) – Italy
tel. + 39 051 0340433 – +39 051 0362682
TYPE OF DATA
IT systems and software procedures at the head of the functioning of this Site acquire (in the framework of their regular operation) some personal data whose transfer is implicit in the use of the Internet communication protocols.
These data are not collected with a view to linking them to their holders. However these data, by their very nature, may identify Users with processing and cross-reference of data in disposal of third parties.
This data category includes IP addresses or domain names of computers used by Users visiting the Site, URI (Uniform Resource Identifier) addresses of required resources, the timeframe of the request, the method used to send the request to the server, the size of the file obtained in response, the numeric code on the reply status of the server (successful, error, etc.) and any other requirement of the operative system and the IT environment of User.
These data are used by APS with the exclusive aim of collecting anonymous statistical information on the Site use and to supervise its smooth operation. These data may be used to determine any liability in the event of IT crimes against the website or, in general, against the Company. Data may be processed on paper, manually, with IT and electronic means.
Definition of cookies
Cookies are small text files that are sent to the terminal or other device used by Users when they visit certain pages of the Site.
Cookies are processed by APS on electronic means.
Types of cookies
This Site uses “session cookies”, “persistent cookies” and the service of Google Analytics.
• Session cookies
The time that elapses between the moment when the Users open the Internet browser and the time when they close it is called surfing session.
So-called session cookies (i.e. temporary cookies that are erased when the browser is closed at the end of a surfing session) are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.
Session cookies are used in this Site precisely to ensure maximum user privacy during surfing as they do not permit acquisition of Users’ personal details that would otherwise permit Users identification and recognition.
• Persistent cookies
So-called persistent cookies (i.e. cookies stored on the terminal or other device used by Users during a browsing session and remain even after the end of the session) are solely used to allow the recognition of the terminal or other Users’ device when they are used to access the Site once again after the end of a browsing session and the beginning of a new browsing session mainly to help Users to quickly reconnect to the Site.
• Google Analytics
How to disable cookies
Most browsers accept cookies automatically, however, if Users do not wish to receive cookies, security settings of the browser (Internet Explorer, Google Chrome, Safari, etc.) may be changed in order to disable the reception of the cookies. However, by setting the browser in such a way, some features of this Site may not be usable.
In the event that the reception of the cookies is disabled APS can not ensure proper running of the Site. To learn more about cookies and how to manage or disable the reception we suggest to visit the site http://www.youronlinechoices.com/.
To disable analytical cookies and to prevent Google Analytics to collect browsing data, we recommend downloading the browser add-on for Google Analytics: https://tools.google.com/dlpage/gaoptout.
DATA THAT USERS PROVIDE ON A VOLUNTARY BASIS
The optional, explicit and voluntary sending of e-mails to the addresses listed on the Site (if an e-mail address is reported instead of a form that must be filled out, including references to the relevant privacy policies) requires APS to acquire the sender’s address for the relevant reply as well as any other personal data included in the e-mail or in the relevant attachments or in the relevant forms. In this event (e-mail only without forms that must filled out, including references to the relevant privacy policies), provision of data is not mandatory. However, should data or the relevant e-mail address not been provided, the relevant request cannot be fulfilled.
For any request for materials, APS may disclose the relevant data for the delivery to the mail/courier companies.
APS may process data, whether on paper or on IT support, both manually and with other IT or electronic means.
As for specific data collected with relevant forms (i.e. navigation forms), reference is hereby made to the relevant forms and the relevant privacy policies.
OPTIONAL NATURE OF THE TRANSFER OF PERSONAL DATA
Apart from what is above specified for navigation data, Users are free to provide personal data in requests for information or in case of sending suggestions or comments to the staff of APS. The missing data may unable APS to fulfill the requests.
METHODS AND LOCATION OF DATA PROCESSING
Data are processed by automated tools for the time strictly necessary to achieve the purposes for which they are collected.
Specific security measures are taken to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access to the data, unlawful or improper use of the data or otherwise incompatible with the purposes for which the same are collected. However, although APS adopt all necessary measures to protect the information provided by the Users, no transmission of information via Internet can be absolutely guaranteed against access by unauthorized third parties and APS can not be held responsible for any breach of security that is not due to negligence of APS itself.
Data processing shall be limited to what is necessary to achieve the purposes set out in this document and in other informational document provided to the Users at the time of collection of their data.
The data will be stored and processed for a period of time which complies with applicable regulations and purposes for which they are collected.
The data can be organized and stored in databases also electronic.
The server that hosts the site is register.it (IP address: 184.108.40.206).
The server on which reside some interactive services (photos, blogs, comments, reviews, etc.) is at register.it (IP address: 220.127.116.11).
Apart from what is above specified about the server, the data may be processed at the headquarters of APS and at the premises of controllers or of who is in charge of the processing appointed by APS.
NOTICE AND DISCLOSURE SCOPE
No data acquired from the Site may be notified or disclosed (except for notification to the judiciary or the police, if required).
With respect to specific data processing for which there is a special form on the Site, reference is hereby made to the relevant forms and applicable rules.
For any other processing, data provided by Users are disclosed (and processed on behalf of APS) to persons in charge of processing appointed by APS (administrative staff, staff in charge of external relations, IT staff that may also be system managers, IT experts also external to the Company that may also be system managers, members, agents, marketing staff also external to the Company, staff of the enveloping and mailing companies, staff of the data processors appointed by APS processing data for the same purposes of the data processors on behalf of APS, staff of the Site administration also external to the Company, legal counsels also external to the Company, staff of the legal department). Data may also be disclosed and processed by data processors appointed by APS (including external companies in charge of mailing, marketing, administration and maintenance of the Site activities).
Persons in charge and data processors may process data only if the treatment is instrumental to implement the tasks assigned by APS exclusively for the activities which are necessary to such end.
If needed, APS may disclose data to the judiciary or to the police or to any other Public authority requiring them pursuant to the law, the in force regulations or EU legislation or to defend any right in the appropriate jurisdiction.
RIGHT TO ACCESS PERSONAL DATA AND OTHER RIGHTS
Pursuant to art. 13 Italian Legislative Decree no. 196/2003 people to whom the personal data refer (the “Data Subject”) have the right to obtain at any moment the confirmation of the existence, or lack thereof, of the same data, regardless of their being already recorded, and the communication of such data in intelligible form.
Data Subject shall have the right to be informed about:
a. the source of the personal data;
b. the purposes and methods of the processing;
c. the logic applied to the processing, if the latter is carried out with the help of electronic means;
d. the identification data concerning data controller, data processors and the representative designated as per art. 5, comma 2, Italian Legislative Decree no. 196/2003;
e. the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
Data Subject shall have the right to obtain:
a. updating, rectification or, where interested therein, integration of the data;
b. deleting, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
Data Subject shall have the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
For more information and in order to exercise, in the time and manner pursuant to the law, the right arising from art. 7 Italian Legislative Decree no. 196/2003 please write to email@example.com.