Skip to content
Explora
Menu

PRIVACY STATEMENT ON PERSONAL DATA PROCESSING – VIDEO RECORDINGS – Rev 02 del 20/07/24 IN-06

Article 13 REG.UE 2016/679 on the protection of personal data collected from the data subject

1. Data Controller
Pursuant to Article 13 REG.UE 2016/679 on the protection of personal data collected from the data subject (

1. Titolare del Trattamento dei dati personali

– Ai sensi dell’art. 13 del Regolamento 2016/679 UE (“GDPR”), The Data Controller is the Museo dei Bambini SCS Onlus with registered office in Via Flaminia no. 80/86 -00196 (RM), Tel. +39 06 3613776, e-mail: privacy@mdbr.it.

 2. Source of personal information

In accordance with Article 13 of the EU Regulation 2016/679, we hereby inform you that the Museo dei Bambini Soc. Coop. Sociale processes personal data collected from the data subjects who have freely communicated in person and/or by means of forms their personal information to our offices.

3. Purposes of personal data processing

The Museo Dei Bambini Scs will process the personal data provided for the purposes strictly connected and instrumental to the activities as indicated in its extended release. In accordance with the law indicated, the Data Controller ensures that the processing of personal data is carried out with respect for the fundamental rights and freedoms, as well as for the dignity of the person concerned, with particular reference to confidentiality, personal identity and the right to protection of personal data.

3.1 All personal data communicated with this release are processed for purposes related to the possibility of video, audio and photo shooting for the following purposes:

dissemination and reproduction of photos, audio and video for purposes of promoting the services of Museo dei Bambini Scs.

4. Personal data collection and consequences for non-consent to processing

The submission of personal data for the purposes set out in point 3.1 is optional, i.e. it is not compulsory, and may be manifested by checking the appropriate box at the end of this information notice and signing the release form. Any refusal to provide such data will result in the impossibility of using photos or audio and video of the child.

5. Data communication and disclosure

Personal data, i.e. photos, audio and video recordings freely obtained from the data subject will be disclosed on the following channels:

Personal data, whenever necessary, might be communicated to:

5.1 to all subjects to whom the right of access is recognised by virtue of regulatory provisions;

5.2 to our collaborators, employees and suppliers or sponsors, as part of their duties and/or possible contractual obligations with them, inherent to business relations with the data subjects

5.3 to all those public and/or private individuals and/or legal entities (legal, administrative and tax consultancy firms, judicial offices, etc.), if the communication is necessary or functional to the performance of our activity;

In these cases, only essential data, and not excessive in relation to the purposes for which they are communicated, will be communicated. 

6. How personal data is processed

The personal data provided by you, including the portrait included in the photographs/videos, will be processed in compliance with current legislation and with the principles of correctness, lawfulness, transparency and confidentiality that inspire the activities of Museo Dei Bambini Scs.

Personal data will be processed using both paper and computer media with the observance of all precautionary measures, in order to guarantee the security measures envisaged by the GDPR. The data will also be managed and protected in environments whose access is under constant control. In particular, all technical, IT, organisational, logistical and procedural security measures will be adopted, so that the appropriate level of data protection required by law is guaranteed, allowing access only to the persons in charge of the processing by the Data Controller or by the Managers that may be designated by the same.

 7. How long personal data will be kept

The data collected (photos, video, audio) will be kept in our computer archives and the purposes of these publications are purely informative/promotional as well as for the Museum’s institutional use. The collected data will be kept in the archives in order to have a historical memory of the events and activities carried out for possible periodical historical publications. A check on the obsolescence of the data stored in relation to the purposes for which it was collected is carried out periodically.

 8. Rights of the data subject

The user may, at any time, exercise the rights set out below.

a. Access to personal data: to obtain confirmation of whether or not personal data concerning him/her are being processed and, if so, access to the following information: the purposes, the categories of data, the recipients, the storage period, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure or restriction of processing or to object to processing, and the existence of an automated decision-making process;

b. Request for rectification or erasure of data or restriction of processing concerning him/her; ‘restriction’ means the marking of retained data with the aim of limiting their processing in the future;

c. Objection to processing: to object on grounds relating to his or her particular situation to the processing of data for the performance of a task carried out in the public interest or in pursuit of a legitimate interest of the Data Controller;

d. Data portability: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive in a structured, commonly used and machine-readable format the data concerning you; in particular, the data will be provided to you by the Controller in word or similar format;

e. Revocation of consent to processing for the purposes of direct marketing and market research; the exercise of this right in no way affects the lawfulness of processing carried out prior to revocation.

To lodge a complaint pursuant to Article 77 of the GDPR with the competent supervisory authority based on your habitual residence, place of work or the place where your rights have been violated; for Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted using the contact details provided on the website (visit the official page).

The above-mentioned rights may be exercised by making a request to the Data Controller, at the e-mail privacy@mdbr.it and at the contact details given in the header of this notice. The data subject’s right to object to the processing of personal data for audio/video/photo dissemination purposes extends to traditional data processing. Requests relating to the exercise of the user’s rights shall be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and number of requests this term may be extended by a further 2 (two) months.

Tickets