Privacy Policy of www.monteriggionimedievale.com
This website collects some personal data of users.
- Data controller
The Data Controller of your Personal Data is Monteriggioni A.D. 1213 s.r.l. (a company entirely owned by the Municipality of Monteriggioni), responsible towards you for the legitimate and correct use of your Personal Data and which you can contact for any information or request at the following addresses:
Data Controller: Monteriggioni A.D. 1213 s.r.l.
Headquarters: Via Cassia Nord, 150 – 53035 Monteriggioni (SI) – Italy
Contacts and contact details:
Telephone: +39 0577 304834
E-mail: info@monteriggioniturismo.it
PEC: annodomini1213@pec.monteriggioniturismo.it
You can also contact the Data Protection Officer for information and to make requests regarding your data or to report disruptions or any problems encountered.
Monteriggioni A.D. 1213 s.r.l. has appointed AKSILIA S.R.L. as Data Protection Officer, with registered office in Via Fontana 22, Milan, and who can be contacted at the following addresses:
Telephone: +39 0583 578787
E-mail: dpo@consilia.srl
PEC: dpo.consilia.srl@pec.it
In the person of the identified contact person Dr. Turri Michela, who can be reached at the contacts indicated above and at the following mobile number: +39 347 3674033.
- Types of data collected, purpose and legal basis
The Personal Data processed is collected as provided directly by the User/Interested party or collected automatically through the site.
PURPOSE | DATA PROCESSED | LEGAL BASIS | |
A | Purposes strictly connected to the execution of pre-contractual measures and to respond to specific requests. | Data sent or communicated through the contact channels specified on the Contacts page, typically are: Name, Surname, Email, Telephone, address, data relating to family composition, data relating to personal tastes, travel data. Contract of which the interested party is a party and/or execution of pre-contractual measures adopted at the request of the interested party. | User/Interested Party and with reference to the reserved area for the management of registration and for the provision of the related services. |
B | Exercise of the Owner’s rights, for example the right of defense in court | Data sent or communicated through the contact channels specified on the Contacts page, typically are: Name, Surname, Email, Telephone, address, data relating to family composition, data relating to personal tastes, travel data. | Legitimate interest. |
The User/Interested Party assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that they have the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.
Data collected automatically through the site:
The data collected automatically is information collected automatically through the website www.monteriggionimedievale.com (also from third-party applications integrated into this Application), including for example: IP addresses or domain names of the computers used by the User/ Interested party who connects to this site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the IT environment of the User/Interested Party. Complete details on each type of data collected are provided in the dedicated sections of the cookie policy of this site.
The data collected automatically are processed exclusively for the purposes for which they are collected, as described below. The Data Controller processes the data provided by Users/Interested Parties to allow the functioning of the site, to allow the display of content from external platforms, statistics, optimization and distribution of traffic in addition to the further purposes described in this document and in the cookie policy.
- Mandatory or optional nature of providing data and consequences of any refusal to provide it
The provision of data for the purposes referred to in points a, b is optional but necessary to execute the contract.
The provision of data for the purposes referred to in point c is optional and your data may be used subject to your consent. If you do not consent, your data cannot be processed for the purpose described in that point.
Unless otherwise specified, all data required for browsing the site are mandatory. If the User/Interested Party refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some data as optional, Users are free to refrain from communicating such data, without this having any consequence on the availability of the Service or its operation.
Users who have doubts about which Data is mandatory are encouraged to contact the Owner.
- Treatment methods
The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
- Recipients
Your data may be communicated, in addition to the personnel in charge of processing, to the following subjects appointed, if necessary, as Data Processors by the Data Controller:
- a) consultants and companies that assist the Company from an IT and infrastructural point of view;
- b) other companies, professionals and agents who collaborate with the Company to provide the services.
The updated list of Managers can always be requested from the Data Controller. The data will not be subject to other methods of dissemination.
- Place of processing
The Data is processed at the Owner’s operational offices and in any other place where the parties involved in the processing are located.
The data provided directly by the User/Interested Party and collected automatically could be transferred to a country other than the one in which the User/Interested Party is located, even outside the European Economic Area. In this case Monteriggioni A.D. 1213 s.r.l. ensures that the processing of your Personal Data by these subjects to whom the data is transferred takes place in compliance with European Regulation 679/2016, all always in compliance with the principles indicated in the art. 45 of the GDPR 2016/679 relating to the existence of an adequacy decision by the European Commission, or in the absence of such decisions in compliance with art. 46 relating to the transfer in the presence of adequate guarantees or in compliance with art. 49 paragraph 1 letter b) – transfer necessary for the execution of a contract concluded between you and the Data Controller or for the execution of pre-contractual measures.
Further information regarding the place of processing is indicated in the cookie policy, or can be obtained by contacting the Data Controller.
- Retention period
Data provided directly by the User/Interested Party
The Personal Data provided directly by the User/Interested party collected for the purpose of responding to specific requests and/or for carrying out pre-contractual negotiations will be processed and stored for the period of time necessary to pursue the purposes indicated above and in any case no later than 5 years from their collection.
The registration data necessary for the creation and use of the reserved area account will be retained until the interested party requests cancellation.
Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. In case of pending judgments, the data will be processed further until their resolution. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
Data collected automatically through the site
The data collected automatically will be retained for the period better specified in the cookie policy.
- Rights of the interested party
Pursuant to the articles. from 15 to 22 of the GDPR, each User/Interested Party has the right to obtain confirmation of the existence or otherwise of their Personal Data, even if not yet registered, and their communication in an intelligible form.
In particular, the interested party has the right to obtain from the Data Controller the indication:
- the origin of the Personal Data;
- the purpose and methods of processing;
- the logic applied in case of processing carried out with the aid of electronic/IT tools;
- the identification details of the Owner, Managers and designated Representative;
- of the subjects and categories of subjects to whom the data can be communicated or who can become aware of them as designated Representative in the territory of the State
Information on the processing of personal data collected by Monteriggioni AD 1213 srl
Below is the information on the processing of personal data collected in various capacities by Monteriggioni AD 1213 srl, a company 100% owned by the Municipality of Monteriggioni (SI). The company manages numerous services on behalf of the same institution.
The information can also be consulted at the following locations managed by Monteriggioni AD 1213 srl:
- Monteriggioni tourist office
Piazza Alighieri (formerly Rome) 23, 53035
Monteriggioni (SI) -
MaM-Monteriggioni Archaeological Museum
Piazza Gino Strada (formerly Garfonda) 3, 53035
Loc. Abbadia Isola-Monteriggioni (SI)