Disclaimer on the use of personal data<\/p>\n
In line with the European Regulation n. 2016\/679 and with the current norms regarding the use of personal data, Fondazione MAXXI treats such data in a correct, legal and transparent way, while respecting the interested party\u2019s interests, rights and fundamental freedoms. Moreover, the Fondazione treats in an appropriate way only the relevant data that are needed in terms of the reasons for their treatment.
\nThis disclaimer is written according to art. 13 of the UE Regulation n 2016\/679.<\/p>\n
DATA CONTROLLER <\/strong> PERSONAL DATA CATEGORIES <\/strong> PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF DATA<\/strong> AUTHORISED PERSONS TO PROCESS THE DATA AND HOW THE DATA ARE PROCESSED<\/strong> SCOPE OF DATA TRANSFERS<\/strong> DURATION OF DATA STORAGE <\/strong> RIGHTS OF THE INTERESTED PARTIES<\/strong>
\nThe data controller is:
\nFondazione MAXXI, with headquarters in via Guido Reni, 4\/A \u2013 00196 Roma (e-mail: privacy@fondazionemaxxi.it \u2013 t: 063201954, c.f. 10587971002)<\/strong><\/p>\n
\nFondazione MAXXI only uses such data that are necessary in order to realise the purpose mentioned below. In particular, Fondazione collects and treats the following personal details:
\nBiographical data: <\/strong>
\n\u2022 Addresses <\/strong>
\n\u2022 Phone numbers and email addresses <\/strong>
\n\u2022 Occupation <\/strong>
\n\u2022 State of health <\/strong>
\n\u2022 Image <\/strong><\/p>\n
\nThe personal data provided by the interested party on a voluntary, free and spontaneous basis are collected and processed for the following purpose and on the following legal basis:
\nPreventing COVID-19 infections, in application of the safety anti-infection protocols, pursuant to art. 1, n. 7, lett. d) of the \u201cDPCM\u201d (extraordinary law decree) of March 11th 2020 and further amendments or integrations <\/strong>
\nUsing the images acquired during the didactic activities for advertisement and communication campaigns from the Fondazione, after receiving the written consent of the interested party or of someone acting on his\/her behalf <\/strong>
\nUsing the biographical data to perform the didactic\/educational activities, after receiving the written consent of the interested party or of someone acting on his\/her behalf <\/strong>
\nVerify, exercise or defend a right in a court of law or an extrajudicial setting, regarding the use of the images acquired during the didactic activities <\/strong>
\nTreating the functional data in order to fulfil those obligations is necessary for managing the relationship and the data must be provided in order to realise the above-mentioned goals. If one or more compulsory data are not communicated, or are wrong, the Data Controller won\u2019t be able to ensure the consistency of the treatment itself. The Data Controller can acquire personal data on the state of health pursuant to art. 9 of the EU Regulation n. 2016\/679.<\/p>\n
\nThe data will be exclusively processed by the authorised personnel of Fondazione MAXXI, on paper and\/or electronically (paper or electronic files).<\/p>\n
\nThe personal data acquired by Fondazione MAXXI can be communicated to third parties that can be designated as persons responsible for the data treatment in accordance with the law. In particular, data can be communicated to:
\nHealth Authorities <\/strong>
\nLaw enforcement agencies\/police <\/strong>
\nSocial networks <\/strong>
\nSocial media <\/strong>
\nCommunication agencies <\/strong>
\nConsultants and professionals, even as associates <\/strong>
\nFondazione doesn\u2019t transfer data abroad. The precise list of personal data recipients is available upon request from the interested party. Fondazione communicates to the recipients of the interested party\u2019s personal data any adjustments, cancellations, treatment restrictions, apart from anything that would be impossible or that would imply a disproportionate effort.<\/p>\n
\nIn line with the principles of legality, restriction of purpose and minimising the data, personal data are processed as follows:
\nFor a period no longer than the duration of a state of emergency <\/strong>
\nFor a period no longer than what is needed to realise the purpose for which the data was collected and treated and in line with the compulsory period of time by law <\/strong>
\nAfter realising the purpose for which the data were collected and treated, the data can be kept through techniques which do not directly link the images to the interested parties <\/strong>
\nAt any time, the interested party can request that his\/her own data are cancelled, at the conditions provided for in art. 17 of the European Regulation.<\/p>\n
\nRegarding the data provided, the interested party can request to Fondazione MAXXI:
\n\u2022 to access his\/her own data <\/strong>
\n\u2022 to rectify, update or add to his\/her own data <\/strong>
\n\u2022 to cancel, anonymously modify or freeze his\/her own data treated in breach of the law <\/strong>
\n\u2022 to certify that the above-mentioned transactions have been communicated to those to whom the data have been transferred or disseminated, except in the cases provided for by the law <\/strong>
\n\u2022 to limit the treatment of his\/her own data <\/strong>
\n\u2022 to oppose the treatment of his\/her own data <\/strong>
\n\u2022 to not being subject to automated processes, including profiling <\/strong>
\n\u2022 to be able to transfer his\/her own data <\/strong>
\n\u2022 to revoke any consent granted in the past, at any time <\/strong>
\n\u2022 to make a claim to the \u201cAutorit\u00e0 Garante per la Protezione dei dati personali\u201d (the authority for personal data protection) <\/strong>
\nRevoking the consent which was given in the past can be done at any time and without prejudice to the legality of the treatment, in writing to: privacy@fondazionemaxxi.it.
\nThe person responsible for the protection of personal data at the Fondazione MAXXI can be reached by email at dpo@fondazionemaxxi.it or via ordinary post to the address Via G. Reni n. 4\/A \u2013 00196 Rome.<\/p>\n