PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR BROWSING AND USING COOKIES
Pursuant to Article 12 et seq. of Regulation (EU) 2016/679 (GDPR)

Foreword
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 “General Data Protection Regulation”, hereinafter GDPR, provides for the protection of individuals with regard to the processing of personal data. In compliance with the aforementioned regulations, CASA LEOPARDI S.r.l. undertakes to ensure that the processing of data relating to a natural person (hereinafter “data subject”) is based on the principles of correctness, lawfulness and transparency, as well as the protection of the confidentiality and rights of the data subject.

In compliance with the provisions of the GDPR, we provide you with the necessary information regarding the processing of your personal data. Our organization, as data controller, will process your personal data in accordance with the regulations and with the utmost care, implementing effective management procedures and processes to guarantee the protection of the processing. To this end, the undersigned undertakes to protect the information provided by using material and administrative procedures to safeguard the data collected, to prevent unauthorized access or disclosure, to maintain its accuracy and to ensure its appropriate use.

Legal basis for processing

This website processes data on the basis of consent. By using or consulting this site, visitors and users expressly accept this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including possible communication to third parties when necessary for the provision of a service. The provision of data, and therefore consent to the collection and processing of data, is mandatory in order to continue browsing the site.

Processing without the data subject’s consent

Please note that the undersigned is entitled to process your personal data, even without your consent, if this is necessary:

1. to fulfil an obligation laid down by law, regulation or Community legislation;
2. to fulfil obligations arising from a contract to which you are a party or to satisfy specific requests made by you prior to the conclusion of the contract.

Your explicit consent is also not required if the processing:

1. relates to data taken from public registers, lists, deeds or documents available to the public, without prejudice to the limits and methods established by laws, regulations or Community legislation for the disclosure and publication of the data, or to data relating to the performance of economic activities, processed in compliance with current legislation on commercial and industrial secrecy;
2. is necessary to protect the life or physical safety of a third party (in this case, the controller is obliged to inform the data subject of the processing of personal data by means of the information notice even after the processing itself, but without delay). In this hypothesis, therefore, consent is given after the provision of the information notice);
3. is necessary, with the exclusion of disclosure, for the purposes of carrying out defence investigations as provided for by Law No. 397 of 7 December 2000 or, in any case, to assert or defend a right before a court, provided that the data are processed exclusively for such purposes and for the time strictly necessary for their pursuit, in compliance with applicable legislation on commercial and industrial secrecy;
4. is necessary, with the exclusion of disclosure, to pursue a legitimate interest of the data controller or of a third party recipient, also in the cases identified by the Data Protection Authority on the basis of the principles laid down by law, also with reference to the activities of banking groups and
5. subsidiaries or affiliates, unless the fundamental rights and freedoms, the dignity or a legitimate interest of the data subject are overridden.

In accordance with this premise, the following information is provided:

Data controller

CASA LEOPARDI S.r.l. – Head office: Via Leopardi, 14 – 62019 RECANATI (MC) ITALY – VAT number: 01330370436 – Tel. +39 071/7573380 –

e-mail address: casaleopardi@giacomoleopardi.it –

Certified e-mail address: casaleopardi@pec.it – WEB: www.giacomoleopardi.it

Personal data collected and compulsory or optional nature of the supply and consequences of refusal

Like all websites, this site makes use of log files which store information automatically collected during user visits. The information collected may include the following:

1. Internet Protocol (IP) address;
2. browser type and parameters of the device used to connect to the site;
3. name of the Internet Service Provider (ISP);
4. date and time of the visit;
5. referrer and exit pages;
6. number of clicks, if any.

This information is automatically processed and collected in order to verify the correct functioning of the site and for statistical or security purposes. For security purposes (anti-spam filters, firewalls, virus detection), the automatically collected data may include personal data such as the IP address, which may be used, in accordance with the legislation in force, to prevent attempts to damage the site itself or other users, or in any case to prevent harmful or criminal activities. This information is never used to identify or profile users, but only to protect the site and its users.

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

With the exception of what is specified for navigation data, the user is free to provide personal data other than those previously specified using the tools on the website. However, failure to do so may make it impossible to obtain what is requested, may make it impossible to provide certain services and may affect the navigation of the site.

CASA LEOPARDI S.r.l. would like to inform you that it does not, under any circumstances, collect your “sensitive” data.

Storage periods for your data

Personal data collected during browsing will be kept for as long as necessary to carry out the specified activities, but for no longer than 24 months. Data provided voluntarily by the user will be kept until the customer withdraws consent.

Methods of processing

Pursuant to and in accordance with Articles 12 et seq. of the GDPR, we wish to inform you that the personal data you communicate to us will be recorded, processed and stored in our electronic archives, adopting appropriate technical and organizational measures to protect the data. The processing of your personal data may consist of any operation or set of operations among those listed in Article 4, paragraph 1, point 2 of the GDPR. Personal data will be processed using instruments and procedures that guarantee security and confidentiality and may be carried out directly and/or through delegated third parties, using computerized or electronic means.

Transfer of personal data abroad

The data you provide will only be processed in Italy. If, in the course of a contractual relationship, your data is transferred to a third country or to an international organization, the rights granted to you by EU legislation will be guaranteed and you will be informed in good time.

Purposes of the processing for which personal data are intended
For all users of the site, personal data may be used for the following purposes:

1. to allow navigation through the public pages of our site;
2. to respond to requests sent to the e-mail addresses published on the site;
3. to obtain anonymous statistical information on the use of the site (e.g. analysis of the most frequently visited pages);
4. to obtain anonymous statistical information on geographical areas of origin;
5. to check the correct functioning of the site;
6. to ascertain any liability in the event of crimes committed against the site.

In addition to the purposes described above, your personal data will also be processed for purposes related to the services expressly requested from CASA LEOPARDI S.r.l., and in particular:

1. to provide information about visits
2. to allow the viewing of informative material
3. to complete the registration of users for the services requested
4. to fulfil the contractual obligations of the service requested, if applicable;
5. to send technical and promotional information by e-mail;

Scope of knowledge of your data

The following categories of persons appointed by the undersigned as data processors or persons in charge of data processing may have access to your data.

employees or collaborators in general assigned to:

1. Casa Leopardi’s offices;
2. marketing of the products of Casa Leopardi’s MUSEUM SHOP;
3. Casa Leopardi’s ticket office and guides;
4. management of certain services provided for Casa Leopardi.

Cookie policy for https://www.giacomoleopardi.it

We inform you that by navigating Casa Leopardi’s website, information defined as technical will be downloaded, i.e. cookies, to make its services simple and efficient for users viewing the pages of www.giacomoleopardi.it.

Communication and disclosure

Your data, provided through the tools on the site, may be communicated, this term being understood as the disclosure of the same to one or more specific subjects, by the undersigned outside the company in order to carry out all the necessary legal and/or contractual obligations. In particular, your data may be communicated to:

1. a) other parent companies, subsidiaries and affiliates of Casa Leopardi S.r.l.
2. b) public bodies or authorities or supervisory bodies, in accordance with legal and/or contractual obligations.

Your data may be communicated by the undersigned in the following cases:

1. to third parties, whether natural or legal persons, who may access the data in accordance with the provisions of the law, regulations or
2. EU regulations, within the limits provided for by such regulations;
3. to subjects only if involved and functional to the performance of the services requested from us and, in general, to all those subjects to whom the communication is necessary for the proper fulfilment of the purposes expressed in this policy;

Dissemination – The undersigned will not disseminate your data indiscriminately, in other words, will not make them known to unspecified parties, even by making them available or consulting them. Trust and confidentiality – The undersigned considers the trust shown by those who have consented to the processing of their personal data to be precious and, for this reason, undertakes not to sell, rent or lease the personal data to third parties.

Rights according to Art. 15 et seq. of the GDPR

According to Art. 15 et seq. of the GDPR, you have the right to obtain confirmation as to whether or not personal data concerning you are being processed and recorded. You have the right to access your personal data and to request its rectification, erasure or restriction, as well as to object, in whole or in part, to its processing. The data subject may exercise the rights recognized by the GDPR by writing to the data controller or contacting the data processor at the following addresses: CASA LEOPARDI S.r.l. – Via Leopardi, 14 – 62019 RECANATI (MC) ITALY- VAT number 01330370436 – Tel. +39 071-7573380 – e-mail address: casaleopardi@giacomoleopardi.it – Certified e-mail address: casaleopardi@pec.it

The application must be accompanied by a copy of a valid identity document.

According to art. 77 of the GDPR, if you consider that the processing of your data is contrary to the legislation in force, you have the right to lodge a complaint with the Data Protection Authority, as supervisory authority, with registered office in Piazza di Monte Citorio, n. 121 – 00186 Rome, Italy, following the procedures and indications available on the website www.garanteprivacy.it.

PRIVACY: VIDEO SURVEILLANCE DISCLOSURE (Vers. 2019-07)

Pursuant to art. 13 of Regulation (EU) 2016/679 (“GDPR”) and to complete the summary information contained in the signs displayed in the entrances, premises and areas of this S.r.l. company, where video surveillance systems are in operation, the following information is provided:

Data controller: CASA LEOPARDI S.r.l. – Head office: Via Leopardi, 14 – 62019 RECANATI (MC) ITALY– VAT Number: 01330370436 – Tel. +39 071/7573380 – Certified e-mail address: casaleopardi@pec.it – www.giacomoleopardi.it

Purposes and legal basis of the processing:

Personal data is processed to protect the property and assets of CASA LEOPARDI S.r.l. against criminal acts, to protect the safety of customers, CASA LEOPARDI S.r.l. staff, including at work, and of persons who access it, and for the possible defence of the rights of CASA LEOPARDI S.r.l. in legal proceedings. With regard to employees, the processing of data in accordance with the provisions of the Workers’ Statute (art. 4, law no. 300/1970) has been authorized by the National Labour Inspectorate of Macerata with provision prot. no. 10566 of 28 May 2015. The legal basis is the pursuit of the data controller’s legitimate interest (article 6, paragraph 1, letter f of the GDPR). It should be noted that the acquisition of the data is necessary to the extent that it is strictly necessary for access to the company’s premises. Without it, the data controller will not be able to grant access to the premises. Similarly, the consent of the data subjects is not required in relation to the provisions of the Regulation of the Data Protection Authority on the subject of video surveillance for the pursuit of the purposes of the protection of company assets and the protection and safety of persons.

Type and method of processing
Electronic or magnetic media.

The controller will not transfer your personal data outside the European Economic Area.      

Retention period

Data will be retained for a maximum period of seven days, except for the longer period that may be necessary to comply with specific requests from judicial authorities or judicial police in relation to ongoing investigations (in this case, the legal basis is the legal obligation to which the controller is subject – article 6, paragraph 1, letter f of the GDPR).

Type of data processed

Images and video (without facial recognition). The CCTV system allows images to be viewed and recorded in real time. The images recorded by the video surveillance system may only be viewed by the data controller or by persons specifically authorized in writing by the data controller. In particular, live images may only be viewed by persons specifically authorized by CASA LEOPARDI S.r.l. and security measures are in place to prevent viewing by other parties. The areas under video surveillance are marked with special signs.

Interested parties

Customers, suppliers, consultants, political and managerial staff, personnel of CASA LEOPARDI S.r.l., including employees and third parties who, for whatever reason, have access to the premises of CASA LEOPARDI S.r.l. or to the immediate vicinity of the premises.

Data recipients

The data may be disclosed to subjects such as supervisory and control authorities and to any public authority entitled to request the data, such as judicial and/or public security authorities.

Persons authorized to process the data

The video surveillance data may be processed on behalf of the data controller only by personnel specifically appointed by CASA LEOPARDI S.r.l. or by parties designated as data processors (e.g. companies providing control and surveillance services), external consultants, including labour consultants, and professionals who will assist CASA LEOPARDI S.r.l. in any legal proceedings. The data (images) recorded for access by CASA LEOPARDI S.r.l. are processed using an encryption system and are inaccessible to personnel and maintenance staff, as a special procedure is provided for decoding them in the presence of the person specifically designated by the data controller.

Rights of the data subject

The data subject may exercise the rights recognized by the GDPR (see also the general information notice on the website www.giacomoleopardi.it) by writing to the data controller or contacting the data processor at the following addresses CASA LEOPARDI S.r.l. – Via Leopardi, 14 – 62019 RECANATI (MC) ITALY – VAT number 01330370436 – Tel. +39 071- 7573380 – e-mail address: casaleopardi@giacomoleopardi.it – Certified e-mail address: casaleopardi@pec.it

The request must be accompanied by a copy of a valid identity document.

In accordance with article 77 of the GDPR, if you consider that the processing of your data does not comply with the legislation in force, you have the right to lodge a complaint with the Data Protection Authority, as supervisory authority, with registered office in Piazza di Monte Citorio, no. 121 – 00186 Rome, Italy, following the procedures and instructions available on the website www.garanteprivacy.it.