PROCESSING OF PERSONAL DATA
This page describes how the site processes the personal data of the users who consult it.
This information is also provided, pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and Council, to those who interact with the web services of www.fondazionerenzopiano.org accessible online.
The information is provided only for the above-mentioned website and not for other websites that may be consulted by the user via links.
1. THE DATA CONTROLLER
The Data Controller is Fondazione Renzo Piano in the person of the legal representative pro tempore, based in Genoa (16158) at Via Pietro Paolo Rubens 30A (hereafter the “Data Controller”).
2. PLACE OF DATA PROCESSING
Processing connected with the web services of this site takes place at the registered office of the Foundation and are only handled by the technical personnel of the office appointed as Data Processor by the Data Controller, or by persons duly delegated by the Data Controller to perform occasional maintenance operations. No data deriving from the web service is passed on to others.
The personal data provided by users who request dispatch of informative material (e.g. newsletters, documents, answers to questions and all types of telematic contacts) are used for the sole purpose of performing the service or satisfying such requests and are communicated to third parties only if this is necessary for that purpose.
3. TYPES OF DATA PROCESSED
3.1 Navigation data
The computer systems and software procedures used to operate this website acquire, dur-ing their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or do-main names of the computers of users connected to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the meth-od used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are used only to obtain anonymous statistical information on the use of the site and to verify its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: apart from this eventuality, the data on web contacts are not kept for more than seven days.
3.2 Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site – the sending of spontaneously communicated requests, communications or other personal data – necessarily involves the acquisition of personal information that will be used for the sole purpose of providing an answer and/or of satisfying the request of the interlocutor, whenever this is possible.
Also registration to receive the newsletter service, if activated, is optional and voluntary and can be canceled at any time by sending an email to the address below
Specific information will be progressively reported or displayed on the website pages dedicated to particular services on request.
4. OPTIONAL PROVISION OF DATA AND RETENTION TIMES
Apart from navigation data, the user is free to provide the personal data indicated in the contacts to request the sending of informative material or other communications.
Failure to provide such data may make it impossible for the request to be met. Personal data will be processed only for the time necessary to satisfy the request or for the time it takes to activate the service. Hence, since it is not possible to accurately determine the retention period of your personal data, the Foundation undertakes to inspire the processing of your personal data with the principles of adequacy, relevance and minimization of data, as required by the European Regulations, verifying annually the need for their retention.
Once this deadline has elapsed and unless there is a need to keep such data to ascertain, exercise or effectively defend a right in court, the Foundation will cancel or make anonymous your personal data.
5. PROCESSING METHODS
Personal data is processed by automated devices for the time strictly necessary to perform the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access (accesses with passwords, encryptions, firewalls, etc.).
6. RIGHTS OF INTERESTED PARTIES
In relation to the processing of your personal data, in accordance with the European Regulations, you have the right to:
• withdraw your consent to the processing at any time. It should be noted, however, that the withdrawal of consent does not affect the lawfulness of the treatment based on consent before the revocation, as provided under art. 7, paragraph 3, of the European Regulation;
• ask the Data Controller to access your personal data, as required by art. 15 of the European Regulation;
• obtain from the Data Controller the rectification and integration of your personal data deemed inaccurate, also by providing a simple supplementary declaration, as required by art. 16 of the European Regulation;
• obtain from the Data Controller the cancellation of your personal data if there is only one of the reasons provided under art. 17 of the European Regulation;
• obtain from the Data Controller the limitation of the processing of your personal data if even only one of the hypotheses envisaged by art. 18 of the European Regulation subsists;
• receive from the Data Controller the personal data concerning you in a structured format, commonly used and readable by an automatic device, as well as having the right to transmit such data to another data controller without hindrance, as required by art. 20 of the European Regulation;
• oppose at any time, for reasons connected to your particular situation, the processing of your personal data carried out pursuant to art. 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions, as required by art. 21 of the European Regulation;
• not be subjected to decisions based solely on automated processing, including profiling, which produce legal effects that concern you or that significantly affect your person, if you have not previously and explicitly consented to them, as required by art. 22 of the European Regulation.
By way of a non-exhaustive example, this category includes any form of automated processing of personal data aimed at analyzing or forecasting aspects concerning consumption and purchase choices, financial situation, interests, reliability, behavior;
• lodge a complaint with a supervisory authority, if you consider that the processing of data concerning you violates the European Regulation. The complaint can be submitted in the Member State in which you habitually reside or work or in the place where the alleged violation occurred, as provided under art. 77 of the European Regulation.