Leggi l'informativa sul trattamento dei dati personali per il servizio di newsletter e dai il tuo consenso informato al trattamento dei tuoi dati per le seguenti finalità

Puoi comunque annullare l'iscrizione in qualsiasi momento facendo clic sul collegamento a piè di pagina delle nostre e-mail.

Usiamo Mailchimp come piattaforma di marketing e newslettering. Leggi la policy per la privacy di Mailchimp.

privacy policy

the Data Protection Officer (DPO) is Systema Consulting Srl.


Information on the processing of personal data of users who visit the website  www.fondazionescuolapatrimonio.it

The data provided to the School of Cultural Heritage and Activities Foundation through the website www.fondazionescuolapatrimonio.it are processed in accordance with the provisions of the current privacy legislation, by Regulation (EU) 2016/679 (General Regulation on data protection).
The processing of personal data is in compliance with the aforementioned legislation and in particular with art. 13 of the regulation, along with the Directive 2002/58 / EC, as updated by the Directive 2009/136 EC regarding the provision by the Guarantor Authority for the protection of personal data of 8 May 2014 with respect to the use of cookies.


The controller of the personal data processing is
Fondazione Scuola dei beni e delle attività culturali
with registered office in Rome, via del Collegio Romano, 27
e-mail: privacy@fondazionescuolapatrimonio.it
pec: scuoladelpatrimonio@pec.it
telephone number: +39 06 4989341
You may contact the Fondazione to exercise your rights or obtain further clarifications of these regulations.

Data protection officer (DPO)
Pursuant to art. 37 of the EU Regulation, the Data Protection Officer (DPO) is Systema Consulting Srl, who can be contacted at the following addresses:
email: rpd@fondazionescuolapatrimonio.it
pec: rpd.scuolapatrimonio@pec.it
via del Collegio Romano, 27
00186 ROME

Data subject to treatment

Among the personal data collected by this site, independently or through third parties, there are:

  • navigation and usage data (through cookies)
  • personal data provided voluntarily

Other personal data collected could be indicated in other sections of this policy or through specific notifications displayed at the time of data collection.
The User assumes responsibility for the personal data of third parties published or shared through this Application and guarantees that he/she has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Navigation and usage data

For needs related to operation and maintenance, this site and any third party services used by it may collect system logs, i.e. files that record the interactions and which may also contain personal data, such as the user’s IP address.
For security reasons and specific legal obligations, users’ technical connection data are recorded within text files stored in the server’s memory (so-called Log files).
Technical data recorded within the log files include:

  • visitor’s IP address;
  • date and time of access;
  • page viewed;
  • any web page of origin;
  • browser and operating system used.

These data allow us to trace the identity of the connection owner following specific technical checks which can only be carried out by a judicial authority. Our operators will not be able to independently trace the identity of visitors through these navigation data, nor have the ability to make connections to any other data sources possibly in our possession in order to trace the navigation paths of specific users.


For more information about the use of cookies by www.fondazionescuolapatrimonio.it and third-party companies, please consult our cookie policy.

Personal data provided voluntarily

Users will be notified whenever access to certain services is subject to a registration procedure that requires the communication of any additional user’s personal data. This data provision can sometimes be carried out by the user in a simplified way through “connection” procedures with external services (such as Facebook Connect) which will, after the explicit consent of the interested party, send us automatically and electronically the data necessary to provide the requested service.
The acquisition of this data, when required, is necessary for accessing the services offered by our site.

Purposes for which we will use your personal data

We use navigation data and those that are voluntarily given to us by users only for the purposes for which the data were collected.

Navigation and usage data are processed

  • for statistics (Google Analytics);;
  • for viewing content from external platforms (Google Fonts, Google Maps Widget, Vimeo Widget, YouTube Video Widget, MailChimp Widget);
  • for interaction with social networks and external platforms;
  • for SPAM protection..

Log files are processed to ensure the proper functioning of the site and to protect our systems from possible cyber-attacks.

The personal data provided voluntarily are used to:

  • provide the requested services;;
  • access the newsletter service (MailChimp);
  • access the newsletter service (MailChimp);.
Data Processing

The treatment of personal data is carried out by the operations or set of operations indicated in art. 4, paragraph 1, no. 2 of Regulation (EU) 2016/679: collection, registration, organization, conservation, consultation, structuring, processing, adaptation, modification, selection, extraction, comparison, use, diffusion, interconnection, blocking, destruction.

The processing of data is carried out by the Owner and/or by the processing operators appointed by the owner as involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, post offices, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller pursuant to art. 28 of Regulation (EU) 2016/679.

The data being processed will be done so predominantly with automated IT tools. Manual intervention by authorized operators is only permitted in special and limited cases, usually at the direct request of the individual user in question. Suitable security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Non-compulsory conferment

Apart from the previously specified information regarding navigation data (log files) and cookies (which can be blocked and/or deleted within the browser settings) the user is free to decline sharing the personal data indicated in the registration and/or information request forms. It should be noted, however, that failure to provide this information can hinder the process or service requested.

Data retention

In compliance with the provisions of art. 5 paragraph 1, item e) of Regulation (EU) 2016/679, the data are kept only for the time necessary to achieve the purposes for which the data are processed and to provide the service requested by the User, which will not exceed ten years from initial collection.

Disclosure of data

Personal data may be disclosed to authorized operators and external collaborators who are in charge of managing the treatment of data necessary for the correct fulfillment of the purposes indicated in the Purposes for which we will use your personal data paragraph. Personal data may also be communicated to other recipients, appointed pursuant to art.28 of Regulation (EU) 2016/679 Data processors for the fulfillment of specific processing purposes (e.g. subjects who provide services for the management of the information system and online communication network).
The list of any Data Processors appointed by the Data Controller is constantly updated by the Foundation.

Transfer of data abroad

The Data Controller does not transfer personal data to countries outside of the EU; however, it reserves the right to use cloud services and in this case the service providers will be selected from among those who provide adequate guarantees, as required by art. 46 GDPR 2016/679.

Your Rights

The interested parties have the right to request access, correction, deletion, or limitation of usage of personal data from the Data Controller in the cases provided for by the legislation (pursuant to articles . from 15 to 22. of the GDPR), by sending a specific request to the addresses indicated above by e-mail or post. Requests will be processed by the Owner as soon as possible, and within a month at most.

The request for deletion of personal data could result in the consequent interruption of the services offered whose use was subject to acceptance of the treatment of such data.
In the event a user believes that the processing of their personal data referred occurs in violation of the provisions of the Regulation have the right to file a complaint with the Guarantor, as required by art. 77 of the Regulation itself, or file an appeal to the appropriate judicial offices (art. 79 of the Regulation).

Servizio di newsletter

www.fondazionescuolapatrimonio.it does not send spam. Each email is sent to our users following an explicit request (by registering through the MailChimp platform).
For more information about the treatment of personal data in relation to the newsletter delivery service, please consult the privacy policy for the newsletter service.
If you think you are a victim of spam, please contact us.

Further information on our Privacy Policy

Further information regarding the processing of Personal Data may be requested at any time to the Data Controller using the contact information listed above.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this information at any time by notifying users on this page. Therefore, please consult this page often, taking note of the date of the last modification
indicated at the bottom. In the event of non-acceptance of the changes made to this information, the user is required to cease using this site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous information will continue to apply to the Personal Data collected up to that moment.