Privacy policy

Information provided pursuant to Articles 13-14 of GDPR 2016/679 (General Data Protection Regulation)

Pursuant to Article 13 of EU Regulation 2016/679 and in relation to the information that will be obtained, for the purpose of protecting individuals and other subjects regarding the processing of personal data, the following is hereby provided:

Purpose of the processing

The data you provide will be used for the purpose of managing the reservation list for visits to the Bologna Cathedral complex.

Method of processing

The personal data will be processed exclusively for internal management by the association, through their recording in a physical or electronic list, which will be entrusted to the visitor reception officer on the day of the visits. From the day following the visit, the data will be deleted.

Provision of data

Providing the data referred to in point 1 is mandatory; refusal to provide authorization will make it impossible to provide the reservation service.

Communication and dissemination of data

The data provided will not be subject to communication or dissemination.

Data controller

The data controller is APS Bologna Storica e Archeologica, Tax ID 91396560376, registered office via Procaccini 21, 40129 Bologna (BO), Italy.

Rights of the data subject

At any time, you may exercise, pursuant to Articles 15 to 22 of EU Regulation 2016/679, the right to:

• Request confirmation of the existence or non-existence of your personal data;

• Obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and, where possible, the retention period;

• Obtain correction and deletion of data;

• Obtain restriction of processing;

• Obtain data portability, i.e., receive your data from a controller in a structured, commonly used, machine-readable format and transmit it to another controller without hindrance;

• Object to the processing at any time, including for purposes of direct marketing;

• Object to an automated decision-making process concerning natural persons, including profiling;

• Request from the data controller access to your personal data, rectification or deletion of the data, restriction of processing, or objection to processing, as well as the right to data portability;

• Withdraw consent at any time without affecting the lawfulness of processing based on consent given before the withdrawal;

• Lodge a complaint with a supervisory authority. You can exercise your rights by sending a request to the Italian Data Protection Authority (Garante Privacy) here: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524