This page provides a description of the procedures for managing the website www.formafoto.it of Fondazione Forma per la Fotografia, with regard to processing of personal data of website users.
This policy is also provided pursuant to Article 13 of Italian Legislative Decree 196/2003 – Personal Data Protection Code, and is addressed to those who interact with the web services of Fondazione Forma per la Fotografia, which can be electronically accessed from the address:
The policy is provided only for the aforesaid website and is not to be considered valid for other websites that the user may consult through link, for which Fondazione Forma per la Fotografia is in no way responsible.
The policy is also based on Recommendation no. 2/2001 that the European authorities for personal data protection, brought together in a Working Party (Article 29 of Directive no. 95/46/EC), adopted on 17 May 2001, to identify a number of minimum requirements for collection of personal data online, and in particular, the procedures, times and nature of the information that data controllers must provide to users when they connect to web pages, for whatsoever reason.
THE “DATA CONTROLLER”
After consultation of this website, data concerning identified or identifiable persons may be processed. The “data controller” is Fondazione Forma per la Fotografia, P.zza Tito Lucrezio Caro n. 1, 20136 Milano (MI).
The Data Processor is Mr. Roberto Koch.
PLACE and PURPOSE of PROCESSING
Processing associated with the web services offered by this site is carried out at the head office of Fondazione Forma per la Fotografia and is performed only by employees and collaborators of Fondazione Forma per la Fotografia appointed persons in charge of processing, or by persons in charge of occasional maintenance operations.
The personal data provided by users requesting dispatch of information and related material is used for the sole purpose of carrying out the service requested and is not disclosed to third parties, unless communication is imposed by legal obligations or is strictly necessary in order to comply with the request.
TYPES of DATA PROCESSED
In the course of their normal use, the computer systems and software procedures used to enable functioning of the website, acquire some personal data of which transmission is implicit when internet communication protocols are used.
This is information that is not collected to be associated with identified data subjects but, by its very nature could, through processing and association with data held by third parties, allow identification of the users.
This data category includes IP addresses or domain names of the computers used by the users who connect to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
This data is used only for gathering anonymous statistical information on use of the website and for checking that it is in good working order and is deleted immediately after processing. The data could be used to establish liability in the event of hypothetical computer crimes to the detriment of the website. Without prejudice to this possibility, at present the data on web contacts is not held for longer than seven days.
Data provided voluntarily by the user
Optional, explicit or voluntary dispatch of emails to the addresses indicated on this website leads to subsequent acquisition of the sender’s address, necessary to reply to the requests, as well as of other personal data included in the message.
Specific summary information is stated on the pages of the website to be used for specific on-demand services.
No personal data concerning users is deliberately acquired by the website.
Cookies are not used to transmit personal information, nor are any form of persistent cookies or of user tracing systems.
Use of session cookies (which are not persistently stored on the user’s computer and disappear when the browser is closed) is strictly limited to transmission of session identifiers (made up of casual numbers generated by the server) required to allow safe and efficient exploration of the website.
The session cookies used in this website avoid use of other computer techniques that could be potentially detrimental to the confidentiality of the user’s connection and do not allow the user’s personal identification data to be acquired.
OPTIONAL NATURE OF DATA DISCLOSURE
Except as specified for connection data, the user is free to provide personal data to request dispatch of informative material or for other communications. Failure to disclose this data may mean that it is impossible to obtain the requested information.
Personal data is processed with automated equipment, for the time strictly required to achieve the purposes for which it was collected.
Specific security measures are observed to prevent loss of data, unlawful and improper use and unauthorised access.
RIGHTS OF DATA SUBJECTS
The subjects to whom the personal data refers are entitled to obtain at any time confirmation as to whether or not such data exists and to know the content and source, check its accuracy or request its integration or update, or correction, as provided by Article 7 of Italian Legislative Decree 196/2003).
Pursuant to the same article they are entitled to request deletion, transformation into anonymous form or blocking of data processed in breach of the law, or to object in any case, for legitimate reasons, to its processing. Requests must be addressed to the Data Controller by traditional mail and sent to: Fondazione Forma per la Fotografia, P.zza Tito Lucrezio Caro n. 1, 20136 Milano (MI) or by sending an email to the following email address: email@example.com.