Menu
PRIVACY POLICY
Data Controller:
Beatrice M.L. Carafa d’Andria
Via Antonio Bertoloni, 1E
00197 Rome (Italy)
Email: info@cittadellamistica.org
PEC: beatricecarafa@pec.it
PREMISE
This section contains information on how this Site is managed in relation to the processing of data of users who consult it. This information is also provided for the purposes of the various legislative provisions, including Articles 13 and 14 of EU Regulation 2016/679, for subjects who interact with CITTÀ DELLA MISTICA and can be reached at the address corresponding to the home page: www.cittadellamistica.org
This information is provided only for the website mentioned above (hereinafter referred to as "SITE" or "this SITE") but not for other websites that may be consulted by the user through links contained therein.
DATA PROCESSING
Data Controller:
In the course of using this Site, data relating to identified or identifiable persons may be processed in order to provide services or improve them, both for basic services such as identifying the user's language and for more complex services.
The Data Controller is:
Beatrice M.L. Carafa d'Andria
Via Antonio Bertoloni, 1E
00197 Rome (Italy)
Email: info@cittadellamistica.org
Methods: The Data Controller, in processing Personal Data, uses the most appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Personal data are processed by the Data Controller with automated tools, with organizational methods and with logic strictly related to the indicated purposes. In addition to the Data Controller, in some cases, the data may also be accessible to persons involved in the management of the site (employees, commercial and administrative personnel, lawyers, system administrators, etc.) as well as external parties such as, for example, communication agencies, IT companies, hosting providers, providers of technical services. These subjects will be appointed, if necessary, Data Processors by the Data Controller. The updated list of Data Processors can be requested at any time from the Data Controller.
Legal basis: The Data Controller uses the User's personal data in the event of one of the following cases: The User has authorized the use of the data for one or more specific purposes. The Data Controller is authorized to process personal data only following the User's consent, if such processing is governed by European legislation on the protection of personal data; otherwise the Data Controller may be authorized to process personal data without the User's consent and until the User does not object. The processing is necessary to execute a contract with the User and/or to perform pre-contractual procedures. The processing is necessary to fulfill a legal obligation to which the Data Controller is subject. The processing is necessary to pursue the legitimate interest of the Data Controller or of any third party. The processing is necessary to exercise the public powers vested in the Data Controller or to perform a task of public interest. The User can always ask the Data Controller to specify the legal basis of each processing, asking if such processing is based on the law, provided for by a contract or necessary for the conclusion of a contract.
Times: The Data Controller processes the data for the time necessary to achieve the purposes described in this policy for which they are collected. Personal data that is collected to execute a contract between the Data Controller and the User will be kept until the aforementioned contract is fully executed. Personal data that is collected for purposes related to the legitimate interest of the Data Controller will be kept until such interest has been satisfied. In this case, the User may obtain further information regarding the legitimate interest pursued by the Data Controller in the following sections of this Privacy Policy or by contacting the Data Controller directly at the contact details indicated above. If the processing is based on the User's consent, the Data Controller may keep the personal data for a longer period of time for a legal obligation, by order of the authorities or in any case, until such consent is revoked by the User himself. At the end of the retention period, the personal data will be deleted and, therefore, once this period has been reached, the right of access, cancellation, rectification and the right to portability of the data can no longer be exercised.
Place: The data processing generated by the use of this SITE takes place at the operating offices of the Data Controller and in any other place where the parties involved in the processing are located. It is impossible to obtain further information by contacting the Data Controller at the contact details indicated above. If necessary, the data connected to the newsletter service may be processed by the data processor or persons appointed by it for this purpose at the relative location. The User's personal data may be transferred to a country other than the one in which the User is located. More information is provided in the specific sections on the processing of personal data. The User always has the right to obtain further information regarding the security measures adopted by the Data Controller to protect the data or regarding the legal basis for the transfer of personal data to an International Organization of public international law, outside the European Union or to an organization formed by several countries. In the event of one of the transfers described above, the User can contact the Data Controller at the contact details indicated above.
Data collected: Among the data collected by this SITE, independently or through third parties, there are: name, surname, telephone number, address, city, province, email, nickname, password, cookies, usage data.
Personal data collected: The personal data collected are detailed in the specific sections on the processing of personal data of this privacy policy or through specific summary information that will be progressively reported or displayed on the pages of the site before collecting the data themselves. Personal data can be provided voluntarily by the User or, in the case of usage data, collected automatically during the use of this Site. All data requested by this site are mandatory unless otherwise specified; in this case if the User refuses to transmit them, it will not be possible to provide the service requested by the User. With regard to the data indicated as optional, they may also not be communicated by the User, without this affecting the provision of the service. Any use of cookies or other tracking systems, by this site or by the owners of third-party services used by this site, unless otherwise specified, is intended to provide the service requested by the User and any other purposes indicated in this privacy policy and in the cookie policy: URL Privacy Policy. The User is responsible for the personal data of third parties shared, published or obtained through this site and declares that he has the right to disseminate them, exonerating the Data Controller from any liability towards third parties.
Data collected automatically: The data collected automatically by this SITE (or by third-party applications that this SITE uses) are: the IP addresses or domain names of the computers used by the User connecting to this SITE, the addresses in URI notation (Uniform Resource Identifier), the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server, the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal statistics of the visit (for example the time spent on each page) and the details relating to the itinerary followed within this SITE, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's computer environment. Cookies are processed in accordance with the provisions of the specific "Cookie Policy": URL Cookie Policy.
Purposes of Data Processing: The data collected from the user allows the Data Controller to: Provide its services Contact the User Send newsletters Interact with social networks and external platforms Display content from external platforms Manage addresses and send e-mail messages Generate statistics Fulfill legal obligations
Specific Sections on the Processing of Personal Data Personal Data is collected for the following purposes through the following services:
Contact the User
• Contact Form: By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header, by the User, or by the page on which the form is located. Personal Data collected: name, surname, telephone number. • Telephone Contact Users who provide their telephone number may be contacted to fulfill support requests submitted through the contact form filled out on this SITE. Personal Data collected: telephone number. • Sending Newsletters By subscribing to the newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Site may be transmitted. This type of service allows you to collect data relating to the date and time the messages are viewed by the user, as well as the user's interaction with them, such as information on clicks on the links inserted in the messages. • The Newsletter Plugin by Web Agile S.a.s. of Fietta Roberto The Newsletter Plugin is a mail marketing service provided by Web Agile Sas di Fietta Roberto that allows you to create and send newsletters and collect the email addresses of users interested in receiving them. The email addresses collected are stored within the TheNewsletterPlugin site, but are not shared with other services and are only visible to the mailing list manager, i.e. the authors of this SITE. Personal data collected: name, surname (optional), email address Place of processing: Italy. For more information, visit the privacy policy page of TheNewsletterPlugin at this https://www.thenewsletterplugin.com/legal/privacy.
Interaction with social networks and external platforms: This type of service allows you to interact with social networks, or with other external platforms, directly from the pages of this SITE. The interactions and information acquired by this site are in any case subject to the User's privacy settings for each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed. The external platforms connected are the following: Facebook: https://www.facebook.com/policy.php YouTube: https://policies.google.com/privacy
Analytics: The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior. • Google Analytics with anonymized IP (Google Inc.) Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected to track and examine the use of this SITE, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its advertising network. This integration of Google Analytics anonymizes your IP address. Anonymization works by abbreviating the IP address of Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and abbreviated within the United States. Personal Data collected: Cookies and Usage Data. Place of processing: USA
Displaying content from external platforms This type of service allows you to view content hosted on external platforms directly from the pages of this Site and to interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.
MORE INFORMATION ON PERSONAL DATA
Personal Data Collected Through Third Parties The Data Controller of this Website may have legitimately collected personal data about the User without the User being directly involved, by drawing from third-party sources in accordance with the legal bases described in the section on the legal bases of processing. In the event that the Data Controller has collected Personal Data in this way, the User may find specific information about these sources in the respective sections of this document or by contacting the Data Controller.
COOKIE POLICY
This website uses cookies. To learn more and to view the detailed information, the User can consult the Cookie Policy.
Further information on the processing
Defense in court: The User's Personal Data may be used by the Data Controller for defense in court or in the preliminary stages, against abuses in the use of the same or of the related services by the User. The User declares to be aware that the Data Controller may be obliged, upon request, to reveal the Data to the public authorities.
Security breach attempts: Any attempt to violate the system will be prosecuted by law and the competent authorities will be informed. It is explicitly forbidden to attempt to access confidential information in the archives.
Additional information: Following the User's request, in addition to the information contained in this privacy policy, this SITE may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.
System logs and maintenance: This SITE and other third-party services used by it, for reasons related to operation and maintenance, may collect System Logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Response to "do not track" requests: This site does not manage "do not track" requests. The User must consult the privacy policies of third parties to verify if their possible services, used by this site, support them.
Information not present in this policy Further information on the processing of Personal Data may always be requested from the Data Controller using the contact information.
Exercise of rights by Users: The data subject has the right to obtain confirmation of the existence or not of personal data concerning him/her, even if not yet registered, and their communication in an intelligible form. The data subject has the right to: Access his/her data or obtain information on the data processed by the Data Controller, on the various aspects of the processing and to receive a copy of the data processed. Verify the accuracy of the data and request its correction or updating. Object to the processing of the data, if it takes place on a legal basis different from the consent given. Revoke the consent previously given to the processing of his/her data. Request the limitation of the processing of his/her data when certain conditions occur. In this case, the Data Controller will only keep the data. Request and obtain the cancellation of his/her personal data. Receive his/her personal data in a common format readable by any automatic device and, if possible, obtain its transfer to another Data Controller, provided that the data, the processing of which is based on the User's consent or on a contract to which he/she is a party, are processed by automated means. Lodge a complaint with the competent authority or take legal action.
Users can exercise their rights, free of charge, by sending a request to the aforementioned contact details of the Data Controller, who will process them as soon as possible, or within one month.
Right to object: If the data is processed in the public interest, in the exercise of public powers by the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object for reasons related to their particular situation. In the event that the data is processed for direct marketing purposes, Users may object without providing any justification.
Changes to this privacy policy: The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Users are therefore invited to consult this page periodically, comparing the date of the last modification indicated at the bottom each time. If a User does not intend to accept the changes made to this privacy policy, he/she is required to cease using this SITE and may request the Data Controller to remove his/her Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.
Information on this privacy policy: The Data Controller is responsible for this privacy policy published on this page.
Legal references: Notice to European Users: This privacy policy is drafted in fulfillment of the obligations set forth by various legislative systems, including Articles 13 and 14 of EU Regulation 2016/679.
English (UK) 
Italiano