Dear Data Subject providing your Personal Data to Palazzo Grassi S.p.A., we wish to inform you that EU Regulation
no. 679/2016 General Data Protection Regulation (hereinafter the "GDPR") provides for the protection of persons and other parties regarding the processing of Personal Data. The Data Controller, pursuant to art. 4 GDPR, is Palazzo Grassi S.p.A.
– San Marco 3231, 30124 Venice (Italy) – e-mail address email@example.com. Palazzo Grassi, pursuant to art. 13 GDPR, provides you with the following information:
G. Purposes of processing
Palazzo Grassi will process your Personal Data for purposes strictly connected and instrumental to the creation and dissemination, in any form, of communications, promotional, institutional and archival material.
H. Processing methods
The Personal Data you provide will be processed in compliance with the GDPR and the principles of correctness, lawfulness, transparency and confidentiality which inspire the activity of Palazzo Grassi. This Data will be processed with digital instruments, on paper and any other type of appropriate media, in compliance with the security measures provided for by the GDPR.
I. Legal basis
The legal basis for processing your Data is your consent, which is optional. In the absence of consent it will not be possible to use your images for the purposes indicated above.
J. Communication and dissemination of Data
Within the limits relevant to the processing purposes indicated, your Personal Data (images) may be communicated, published and/or disseminated including
to third parties and by any means.
K. Period of retention of the Data
Your Personal Data will be used and retained in the Palazzo Grassi archives for the period of time necessary to fulfil the purposes pursued and, in any case, for a period of 10 years from the date of acquisition, after which it will be automatically deleted. The Data Subject may at any time revoke their consent to the processing of their Personal Data. L. Rights of the Data Subject
Consent to the processing of Personal Data is optional.
At any time it is possible to exercise the rights established
by art. 15 to 22 and art. 34 GDPR, in particular the right of the Data Subject to request the Data Controller to access Personal Data and to correct or delete it or limit processing of the same or to oppose its processing, in addition to the right to portability of Data and the right to lodge a complaint with a supervisory authority. These rights may be exercised by written notice to be sent to Palazzo Grassi S.p.A.,
San Marco 3231 – 30124 Venice (Italy) or to the e-mail address firstname.lastname@example.org.