This policy is written in accordance with the General European Regulation regarding the protection of personal data UE 2016/679 (article 13) and subsequent amendments or additions as well as with national laws and regulations regarding the use of personal data as applicable (“Privacy Law”) in order to guarantee that the use of personal data is conducted by controller in accordance with the rights and freedoms of individuals and, in particular, describes the methods of management and use of personal data users insert or communicate when requesting information, making reservations, or purchasing the services of the Fondazione Museo dei Bambini Milano (also “MUBA”) through the website www.muba.it and ticketing.muba.it (hereinafter the “Site”) or directly at the Museum (hereinafter “Services”).
The disclaimer is written only for the use of services provided directly by the MUBA and not for other websites that may be accessible by users through links or in any case not directly offered: in these cases, when the user is redirected an appropriate disclaimer or request for consent will be provided from relevant controller.
DATA CONTROLLER AND DATA PROCESSOR
Controller of the data processing is Fondazione Museo dei Bambini - MUBA, located in Milano, via Enrico Besana, 12, P.IVA 06089390964 (hereinafter “MUBA” or “Controller”).
The Data Processor appointed for the processing of personal data collected during reservation or purchase of tickets or services through the Site is M.I.D.A. Informatica S.R.L. located in via Casalino 27, 24121 Bergamo – P.IVA 02758170167, the company that manages, on behalf of MUBA the online ticketing service.
WHAT DATA DO WE USE AND HOW IS IT COLLECTED
We process and/or collect the following information:
o name, address, phone, birthdate, fiscal code and/or tax ID, email;
o data related to the account and Services;
o your preferences for specific products, services and activities;
o data derived from cookies, web beacons or other similar technologies (see the section dedicated to cookies).
WHY DO WE USE THE DATA
MUBA informs its users that it will use their personal data in order to execute in order to take steps at the requests received, to fulfill contractual obligations, and to carry out all the activities necessary or useful for the improvement of the service provided.
In the cases above indicated, the processing is necessary for the purpose of the execution of a contract or a specific request or MUBA’s legitimate interest. The failure to provide the information requested as mandatory will not allow MUBA to proceed with the related processing and the execution of the contract or the specific request.
Furthermore, without prejudice to the right to opt-out), the e-mail address may be used to send information material (such as the newsletter) regarding products and services similar to those purchased.
MEANS OF PROCESSING AND COMMUNICATION
The personal data collected will be processed by MUBA’s employees that need to know the data on the basis of their activity and by third parties authorized by the Controller that could act as co-controller or data processors, with or without the use of electronic instruments (such as e-mail, fax, telephone or any other technology for long-distance communication), according to the principles of correctness, lawfulness and transparency in such a way as to guarantee their security and confidentiality.
The data could be transferred to another country on the basis of adequacy decisions made by the European Commission or rather on the basis of adequate guarantees foreseen by the regulations in force. Personal data collected will not be disseminated.
The personal data collected will be conserved for a period of time not superior to that necessary for the completion of the services for which they were collected and in any case for the maximum time foreseen by applicable laws (for example 10-year prescription for civil law data). With regards to the processing of data (email) for marketing purposes, in the absence of specific legal or regulatory indications, excluding opt-out or revocation, the data will be handled and conserved for a period congruous with the interest manifested by the individual the data refer to toward the initiatives of the Controller, who will periodically verify the effective interest.
All the rights provided for by the Privacy Law may be exercised by sending an email to email@example.com including i) access (to know the origin of the data, the use and methods of processing and information regarding the controller, processor, and categories of subjects to whom the data could be communicated), ii) correction (to update and correct data), iii) cancellation of the data (oblivion), iv) limit (to limit its processing), v) portability (receive the data provided and transfer them to another owner), vi) revocation of consent and opposition to process.
In the case of processing in violation of EU Regulations, it is possible to lodge a complaint to the data protection authority. Contact information for the Italian Authority can be found at http://www.garanteprivacy.it/home/footer/contatti.
Cookies are small text files that the websites visited by the user send to his/her device where they are memorized and then resent to the same sites at the following visit by the same user, in order to improve their visit to the site.
Cookies can also be from sites or web servers that are not the one on which the user is navigating (“third party” cookies) in the presence of links (or images or sounds) to web pages of other dominions. Cookies can be technical and/or for profiling, our own and/or of third parties.
Which cookies does MUBA use
Technical cookies (for which consent is not required) such as: a) session or navigation cookies (that allow the user to access the services available for each type of user and to upload personalization to the interface and functionality of the Site); b) analytical cookies (used directly by the manager of the site and/or app to collect analytical information, in anonymous and aggregate form, on how the users use the site and to monitor the performance of the site); c) functional or personalization cookies (cookies that are used to recognize and remember preferences and allow for access to a version of the site that is based on some predefined criteria, such as language).
Web Beacon: These are small images, also known as "tag pixels" or "transparent GIFs", that the owner can include in its site, services apps, messages or instruments. Normally they work with the cookies to identify users and their activity.
How to block or cancel Cookies
Each user can set up privacy preferences in his/her browser in order to block cookies, cancel them after each visit or each time the browser is closed or even to only accept cookies from the Site and not those of third parties. If the user chooses to eliminate cookies from MUBA, access to some functionalities and areas of the Site could be affected or limited, and in any case not fully satisfying.
How to contact us
For further information, please contact MUBA, via Enrico Besana, 12, Milano by sending an email to firstname.lastname@example.org.
Version June 2018