PRIVACY POLICY GOVERNING THE PROCESSING OF PERSONAL DATA OF USERS ACCESSING THE "Project Erasmus+ CONTAN" WEBSITE

Overview

Dear user, the “European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data”, requires the protection of natural persons in relation to the processing of personal data.
This policy sets out the methods whereby the portal of the website related to the CONTAN Erasmus+ Project is managed. It does not cover other websites, pages, social networks or online third-party services that may be reached by following hypertext links that may be published on the portal itself.

In our capacity as “Data Controller”, we wish to inform you that the data provided to MUSE – Museo delle Scienze will be processed by adopting appropriate measures ensuring security and confidentiality thereof, in accordance with the above-mentioned Regulation. Below are the purposes for which and methods whereby we collect and process your personal data. More specifically, the following information is provided:

1 Identity and contact details of the data controller

The Data Controller is MUSE – Museo delle Scienze, having its office in Corso del Lavoro e della Scienza, 3 – 38122 Trento.
You may contact the Data Controller by using the following contact details:

• Phone: +39 0461 270311
• Email: amministrazione@muse.it
• Certified email (PEC): museodellescienze@pec.it

2 Identity and contact details of the Data Protection Officer

The Data Protection Officer of MUSE – Museo delle Scienze is QSA S.r.l. – ENGINEERING CONSULTING TRAINING, with registered office in via alla Marcialonga, 3 – 38030 Ziano di Fiemme (Trento).
You may contact the Data Protection Officer by using the following contact details:

• Email: privacy@qsa.it
• Certified email (PEC): privacy.qsasrl@pec.it

3 Purpose of Processing

Personal data (if any) may be collected and processed for the following purposes:

• Provide the services requested by customers/users;
• Provide support to customers/users;
• Comply with legal requirements;
• Send any communications, including by email, regarding new initiatives launched by the museum;
• Carry out statistical analysis, for the sole purpose of improving the services being offered.
• While providing your data for the above-mentioned purposes is optional, failure to do so will prevent you from accessing the services offered by the Museum.

4 Legal Basis of Processing

The legal basis that makes processing lawful will, with respect to the purposes described above, be deemed to exist in order to:

• Comply with legal obligations the Data Controller is required to abide by; and
• Perform a duty of public interest, such interest being identified in the purpose of providing information, establishing a dialogue and inspiring on the subjects of nature, science and sustainable future, which duty MUSE – Museo delle Scienze is required to discharge under applicable regulations.

5 Type of data processed

• Common data voluntarily provided by the user through the interactive features (if any) of the website for the purpose of:
  • Sending newsletters;
  • Sending publications, catalogues and invitations;
  • Participating in surveys, online contests, competitions, events.
  • The data collected through the portal will be used for the delivery of the aforementioned services.
• Navigation data

Information systems and software procedures of this portal will, during their normal operations, collect some personal data, the transmission of which is considered as implied in the use of Internet communication protocols.
This information is not collected for the purpose of being associated with identified users. However, due to its nature it may, through associations with and processing of data held by third parties, allow users to be identified.
This type of data includes the IP addresses and domain names of the computers used by the users to access the website, addresses in URI (Uniform Resource Identifier) notation of the resources requested, time of request, method used to submit the request to the server, size of the file received in response, numerical code representing the status of the response provided by the server (successful, error, etc.) and other metrics related to the user’s operating system and IT environment.
These data are (i) used for the sole purpose of gathering anonymous statistical data regarding the use of the site and to check its proper running and (ii) retained for such time as may be strictly necessary. These data may be used to investigate and establish liability in the event of possible cybercrimes against the site.

6 Place of data processing

The web farm servers are located in Italy.

7 Disclosing data to third parties

MUSE – Museo delle Scienze may disclose your personal data to entities that deliver specific services and, for this purpose, are appointed as data processors in accordance with Article 28 of the GDPR.
You may request a list of the Data Processors using the contact details of the Data Controller provided above.

8 How we process your data

In relation to the aforesaid purposes, your personal data will be processed using manual, electronic and/or computer telecommunications tools, in strict accordance with the aforesaid purposes and, in any event, in such a way as to guarantee the security and confidentiality of your data in compliance with the aforesaid Regulation.

9 Duration of processing and retention period.

Your data will be processed only for the time necessary to pursue the above purposes.

10 Transfer of data outside the European Union

The data collected will not be transferred to non-European countries.

11 Cookies

This website makes use of cookies, i.e. text files that are recorded on the user’s device or that allow access to information on the user’s device. Cookies make it possible to store information about visitors’ preferences. They are used to (i) ensure the proper running of the website, (ii) improve its features by customizing the content of the pages according to the type of browser used, and finally (iii) perform a depersonalised analysis of how visitors use the website.

Cookie list

12 Data Subject Rights

In your capacity as a data subject, you may exercise the rights set forth in Articles 15 et seq. of the GDPR as shown below:

right of access, rectification, amendment and erasure of data, portability, limitation of processing and withdrawal of consent given.

1. According to Regulation EU 2016/679, you have the right at any time to obtain from the Data Controller access to your data, as well as the rectification, amendment or erasure of such data. Within 30 days of submitting your request, you will receive a written reply, including by electronic means.
2. You also have the right to object to the processing or request limitation of such processing, for legitimate reasons and in the cases as under Articles 18 and 21 of Regulation EU 2016/679.
3. You may withdraw at any time your consent to the processing of data provided for the purposes stated herein.
4. Finally, you may exercise your right to data portability, requesting the Data Controller to transfer your data to another data controller.

You may exercise the aforesaid rights by using any of the Data Controller’s contact details provided under 1 above.

Right to lodge a complaint with the Supervisory Authority.

1. If you believe that your data have been processed unlawfully or in breach of applicable law provisions, you will be entitled to lodge a complain with the Supervisory Authority.