Home » Privacy Center » Privacy policy

Privacy policy

Information for request of information and / or reservation pursuant art. 13 of EU Regulation 2016/679 and the applicable legislation in force.

In accordance with Article 13 of EU Regulation 2016/679 (the “Regulation”), as well as according to applicable privacy legislation, Fondazione Asti Musei, in its capacity as Data Controller of your personal data (hereinafter “Foundation” or “Data Controller”), informs you that the personal data you provide concerning requests in order to receive specific information, book events organized by the Foundation and/or the use of museum areas, will be processed in compliance with applicable legislation and the principles of fairness, lawfulness, transparency and protection of confidentiality provided by it.

Purpose of data processing and nature of data conferment

The personal data provided by the interested parties will be processed in order to:

(a) manage and satisfy requests for information. The provision of personal data is a necessary requirement for the conclusion of any contract. The refusal to provide data makes it impossible for the owner to manage and respond to requests for information received;

(b) managing and satisfying requests for reservations (i) for events organized at the Foundation and/or (ii) for the use of the museum areas, and in order to apply and put into effect obligations deriving from the contract; depending on the relationship that the interested party has established with the Foundation, the provision of data could be a contractual obligation or a necessary requirement for the conclusion of any contract. In any case, refusal to provide the data will make it impossible for the Data Controller to use the personal data for the purpose of examining, managing and responding to the request for information made by the interested party and/or correctly fulfilling the obligations deriving from the contract.


Modalities for data processing

Personal data processing will be carried out by means of paper, computer or telematic tools and with appropriate security measures to ensure the security and confidentiality of personal data in accordance with the provisions of current legislation.

Legal basis of the treatment

The legal basis for processing data is the execution of a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the data subject who submits requests for information and/or reservations (i) for events organized by the Foundation and/or (ii) for the use of museum areas by means of:

1) sending an e-mail to the address available on the Foundation’s website;

2) telephone contact set up by the Foundation;

3) social channels used by the Foundation;

4) the Foundation’s ticket office.


Data retention

In accordance with the principles of proportionality and necessity, the data will be kept for the time necessary to fulfil the above-mentioned purposes and, therefore, the service offered or the specific legal regulations of law relating to it.


Communication and dissemination of data

Personal data, collected for the above mentioned purpose, will not be subject to communication/dissemination.

The personal data may be known by authorized employees of the Owner.


Rights of the interested parties

The subjects whose personal data refer have the right at any time to obtain confirmation of the existence or otherwise of data themselves and the right to know their content and origin, verify their  accuracy or request their integration or updating, or correction (Articles 15 and 16 Regulation).

In addition, the interested parties have the right to request cancellation, limitation of data processing and portability, the right to file a complaint to the supervisory authority and to oppose their processing in any case, for legitimate reasons (art. 17 ff. of the Regulation).

The interested parties also have the right to withdraw at any time any consent given to specific optional activities, without prejudice to the lawfulness of the processing carried out prior to the revocation.

These rights can be exercised by written notice to be sent to: privacy@fondazioneastimusei.it

The Data Controller

The data controller is Fondazione Asti Musei with registered office in Asti, Corso Vittorio Alfieri n. 357.