Programme AM x Aostae2025
Information - Data Protection
Pursuant to Reg.(EU) 679/2016 (hereinafter referred to as "GDPR") and Legislative Decree no. 196 of 30 June 2003, as amended and supplemented, the undersigned Association informs the user of the Subscription Museums APP that it will come into possession of his/her information in connection with the download and use of the application.
The personal profile data processed by the Subscription Museums APP is provided directly by the data subject; other data is collected through the use of the Subscription.
This information notice is intended for users with valid Subscription Musei Piemonte Valle d'Aosta, Subscription Musei Lombardia Valle d'Aosta and Subscription Musei Formula Extra, who are entitled to register with the Abbonamento Musei APP to participate in the points collection programme.
It should be noted that data, in general, are processed for everything that is inherent to pre-contractual, contractual and legal obligations for the purposes of joining the programme AM 30andLODE (with reference to the legal bases set out in GDPR art.6 letter b, c); in this case, the provision of certain data is mandatory and therefore the refusal to provide such data may make it impossible to participate in the aforementioned points collection programme.
On how to collect points, how to use them, verification of points collected, duration and other detailed information, please refer to the Regulation AM x Aostae2025.
Further processing purposes, based on the legitimate interest in processing (GDPR Art. 6 lett. f) or on consent (GDPR Art. 6 lett. a) concern:
- the use of the device's camera whenever the QR Code capture and recognition service is activated. This permission is necessary as, without it, it will be impossible to capture and process the QR Code;
- geolocalisation of the device is activated when the QR code is recognised, otherwise points cannot be accumulated;
- the sending of communications, even personalised ones, if permission is obtained to receive push notifications on the device;
- the processing of statistics and aggregated information used by Subscription Museums.
Personal data are processed by manual and computerised means, with logic strictly related to the aforementioned purposes. Specific security measures are observed to prevent loss of data, illegal or incorrect use and unauthorised access. No personal data deriving from the web service is disseminated.
The information collected is protected by means of encryption and authentication systems and is only accessible to authorised users or those directly concerned.
The data collected and processed may be brought to the attention of natural or legal persons as data processors on behalf of the undersigned company and to natural persons identified by the Association itself as authorised to carry out processing operations (e.g. the Association's employees and collaborators); including the System Administrator and the loyalty programme service provider and manager.
The software platforms used to operate the APPs (Apple Store and Google Store) acquire, in the course of their normal operation, certain data referring to the user whose transmission is implicit in the use of Internet communication protocols, smartphones and devices used. Subscription Museums is not involved in such processing and cannot be considered liable for it. We therefore recommend that you also refer to the privacy policies published on the aforementioned platforms.
In addition, Abbonamento Musei may collect anonymous information for the sole purpose of collecting statistical data on the number of users who have downloaded the APP or are users of it.
Personal data will be stored, in general, as long as the purpose of the processing lasts, in any case no longer than 24 months from the time of collection.
The processing will take place in Italy and in the EU or EEA. Should the need arise to transfer data outside the EEA, the guarantees in favour of the data subjects will be carefully assessed and they will receive a specific update of this notice.
At any time you can:
- exercise your rights (access, rectification, erasure, limitation, portability, objection, no automated decision-making processes) when provided against the data controller, pursuant to Articles 15 to 22 GDPR;
- file a complaint with the Garante (www.garanteprivacy.it);
- where the processing is based on consent, revoke such consent given, bearing in mind that revocation of consent does not affect the lawfulness of processing based on consent before revocation.
The data controller is the Associazione Abbonamento Musei, which can be contacted by writing to [email protected] or by calling 011.52210.
The Data Protection Officer has been appointed and can be contacted at [email protected]
Digital Assistant
️