PRIVACY POLICY

(pursuant to Article 13 of Regulation (EU) 2016/679 – GDPR)

1. Data Controller

The Data Controller is:

Associazione Maestro Archivio Carmassi
Via Ramoni 116, Torre, Fucecchio (FI), Italy
Email: info@archiviocarmassi.it

2. Types of Data Collected

The website may collect the following categories of personal data:

  • Identification data (first name, last name)
  • Contact data (email address)
  • Browsing data (IP addresses, access logs, technical data)
  • Any data voluntarily provided through forms (e.g. contact requests or newsletter subscriptions)

3. Purpose of Data Processing

Personal data are processed for the following purposes:

  • Responding to requests submitted via the website
  • Managing newsletter subscriptions
  • Sending updates regarding the Association’s activities
  • Ensuring the proper functioning of the website
  • Complying with legal obligations

4. Legal Basis for Processing

Data processing is based on:

  • Consent of the data subject (e.g. newsletter subscription)
  • Pre-contractual measures (contact requests)
  • Legal obligations
  • Legitimate interest of the Data Controller (website security)

5. Methods of Processing

Data are processed using electronic and IT tools, in compliance with the principles of lawfulness, fairness and transparency, and with appropriate security measures in place.

6. Data Retention

Personal data will be retained:

  • For the time necessary to respond to requests
  • Until consent is withdrawn (for newsletters)
  • Within the limits established by law for administrative obligations

7. Data Sharing and Disclosure

Data may be shared with:

  • Technical service providers (hosting, website maintenance)
  • Email marketing platforms (e.g. Mailchimp)
  • Competent authorities, when required by law

Data will not be publicly disclosed.

8. Data Transfers Outside the EU

Some services (e.g. newsletter platforms) may involve the transfer of data to countries outside the European Union (such as the United States), in compliance with the safeguards provided by the GDPR.

9. Data Subject Rights

Data subjects may exercise their rights under Articles 15–22 of the GDPR at any time, including:

  • Access to personal data
  • Rectification or erasure
  • Restriction or objection to processing
  • Data portability
  • Withdrawal of consent

Requests can be sent to: info@archiviocarmassi.it

10. Cookies

The website uses technical cookies and, subject to consent, third-party cookies.
For more information, please refer to the Cookie Policy.

11. Changes to This Policy

This Privacy Policy may be updated over time. Users are encouraged to review it periodically.