Privacy Policy & Cookie Law for users visiting this website in accordance with Article 13 of Regulation (EU) 2016/679

WHY THIS INFORMATION

The following information pertains to the use of personal data and cookies on this website.

As for cookies, this notice is provided to the user/browser in accordance with the measure of the Italian Data Protection Authority of June 10, 2021, “Cookie Guidelines and Other Tracking Tools,” and in compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data.

In accordance with Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the processing of user/browser personal data while using the services of the site, and the options for contacting and acquiring user personal data, in full compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data, regarding users who access the following websites via electronic means:

saintpetermosaicgallery.com
mosaicigalleriasanpietroroma.it

This information does not concern other websites, pages, or online services accessible through hyperlinks that may be published on the sites but refer to resources external to the domains.

DATA CONTROLLER

Following the consultation of the aforementioned sites, data relating to identified or identifiable individuals may be processed.

The Data Controller is:

Galleria San Pietro srl
L.go del Colonnato, 5 – 00193 Roma
info@saintpetermosaicgallery.com
Vat ID: 13465561002

CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING

Navigation Data

The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.

This category of data includes, by way of example but not exhaustively, IP addresses or domain names of computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user’s IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

– obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);

– checking the proper functioning of the services offered.

Navigation data does not persist for more than the time strictly necessary and is deleted immediately after its aggregation (except when necessary for the detection of crimes by the judicial authorities).

Data Provided by the User

The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, entail the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.

Specific information notices will be published on the Data Controller’s websites pages dedicated to the provision of specific services.

Cookies and other tracking devices

This website uses cookies to ensure the correct use of the site’s contents.

The site uses technical and session cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies on terminals or browsers is under the user’s control. On the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for proper functioning.

Banner operation

The privacy management banner activated on this site does not allow any profiling cookies to be activated until the user has given their consent. If the user clicks the “I agree” button, all profiling cookies will be activated. If the user decides to click the “Personalize” button, they can customize their choices and decide which profiling cookies to activate. If the user clicks on the “Reject” button or the “X” in the top right of the banner, no profiling cookies will be activated.

The user’s choices will be stored for six months through a technical cookie that will be installed on the device used by the user to access the site. It is essential to explain that if the user changes their device, for example, from a computer to a mobile phone, the choices cannot be transferred to the new device for technical reasons, and they will need to be selected again on the new device.

The user’s choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last for six months.

The site uses cookies for third-party profiling as specified below.

Which cookies are installed on this site?

Google reCAPTCHA

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Place of processing: Ireland – Privacy Policy

Jetpack

Jetpack is an advertising service provided by Jetpack Digital LLC.

Place of processing: United States – Privacy Policy

LEGAL BASIS FOR THE PROCESSING

The personal data indicated on this page is processed by the Data Controller in the performance of the services provided by the website and subsequently, if provided by the website itself, in compliance with contractual or legal obligations.

In case there are specific sections for newsletter subscriptions or marketing services, they will be managed through specific information notices.

OPTIONALITY OF DATA SUPPLY

As provided by the resolution of 10 June 2021 “Guidelines on cookies and other tracking tools”, the user of the site is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookie prevents being able to send the request via data acquisition forms. If necessary, it will be possible to re-enable the cookie from privacy preferences, or possibly if you decide to keep the cookie block, send such a request via email.

Apart from what specified for navigation data, the user is free to provide personal data reported in the request forms present on the sites or otherwise indicated in contacts with the structures to request the sending of the newsletter, of informative material or other communications.

Their failure to provide may result in the impossibility of obtaining what is requested.

LEGITIMATE INTEREST

The data controller does not rely on legitimate interest for the processing of personal data except for the protection of their own rights.

PROCESSING METHODS

Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

DATA RECIPIENTS

The recipients of the data collected following the consultation of the sites listed above are the subjects designated by the Data Controller, according to Article 28 of the Regulation, as data processors. The complete list of data processors is available at the Data Controller’s office and can be requested by email.

The collected personal data is also processed by staff authorized to process it, who act based on specific instructions provided regarding the purposes and methods of the same processing.

DATA TRANSFER

Data will only be transferred within the EU.
Some applications like Google Analytics and reCaptcha may undergo extra-EU transfers.

DATA CONSERVATION PERIOD

The retention time of the user’s choices relating to cookies is six months as required by the measures.

The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.

Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.

DATA SUBJECT RIGHTS PURSUANT TO ART. 15 EU 2016/679

Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.

RIGHT TO COMPLAIN

Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).