About

The address of our website is: https://www.karalisbrick.com.

The Karalisbrick Association takes user privacy seriously and is committed to respecting it. This privacy policy (“Privacy Policy”) describes the personal data processing activities carried out by the Karalisbrick Brick Museum through the website www.karalisbrick.com and the related commitments assumed by the Company in this regard. The Karalisbrick Association may process the user’s personal data when they visit the Site and use the services and features available on the Site. In the sections of the Site where the user’s personal data is collected, a specific information notice is normally published in accordance with art. 13/15 of EU Regulation 2016/679.
Where provided for by EU Regulation 2016/679, the user’s consent will be required before processing their personal data. If the user provides personal data of third parties, they must ensure that the communication of the data to the Karalisbrick Association and the subsequent processing for the purposes specified in the applicable privacy policy notice is in compliance with EU Regulation 2016/679 and applicable law.

Identification details of the responsible data controller

Associazione Culturale Karalisbrick, Viale Trento, 5 09123 – Cagliari (CA), represented by Maurizio Lampis.

Email: maurizio.lampis@gmail.com

Tel: +39 3477161229.

Type of data processed

Visiting and consulting the Website generally does not involve the collection and processing of the user’s personal data except for navigation data and cookies as specified below. In addition to the so-called “navigation data” (see below), personal data voluntarily provided by the user when interacting with the Website’s features or requesting to use the services offered on the Website may also be subject to processing. In compliance with the Privacy Code, Museo del Mattoncino may also collect the user’s personal data from third parties in carrying out its activities.

Cookies and Navigation Data

The Site uses “cookies”. By using the Site, the user consents to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the user’s computer hard drive. There are two main categories of cookies: technical cookies and profiling cookies.

Technical cookies are necessary for the proper functioning of a website and to allow user navigation; without them, the user may not be able to correctly view pages or use some services.

Profiling cookies are used to create user profiles in order to send advertising messages in line with the preferences expressed by the user during navigation.

Cookies can also be classified as:

_ “session cookies”, which are deleted immediately when the browsing browser is closed; _ “persistent cookies”, which remain within the browser for a certain period of time. They are used, for example, to recognize the device that is connecting to a site, facilitating authentication operations for the user;

_ “first-party” cookies, generated and managed directly by the website manager on which the user is browsing;
_ “third-party” cookies, generated and managed by subjects other than the website manager on which the user is browsing.

Cookies used on the site
The Site uses the following types of cookies:

first-party cookies, session and persistent, necessary to allow navigation on the Site, for internal security purposes and system administration;

third-party cookies, session and persistent, necessary to allow the user to use multimedia elements present on the Site, such as images and videos;

third-party cookies, persistent, used by the Site to send statistical information to the Google Analytics system, through which the Karalisbrick Brick Museum can perform statistical analysis of accesses/visits to the Site. The cookies used exclusively serve statistical purposes and collect information in an aggregate form. Through a pair of cookies, one persistent and the other session (expiring at the end of the browser session), Google Analytics also saves a log with the start and exit times of the visit to the Site. Google can prevent data detection through cookies and subsequent processing of the data by downloading and installing the browser plug-in from the following address:

http://tools.google.com/dlpage/gaoptout?hl=en

third-party cookies, persistent, used by the Site to include buttons for some social networks (Facebook, Instagram) on its pages. By selecting one of these buttons, the user can publish the contents of the Site web page they are visiting on their personal page of the relevant social network.

Embedded content from other websites

The Site may contain links to other websites (so-called third-party sites). The Karalisbrick Brick Museum does not access or control any cookies, web beacons, and other user tracking technologies that may be used by third-party sites that the user may access from the Site; the Karalisbrick Brick Museum does not control any content and materials published by or obtained through third-party sites, nor their related personal data processing methods, and expressly declines any responsibility for such eventualities. The user is required to verify the privacy policy of third-party sites accessed through the Site and to inform themselves about the applicable conditions for the processing of their personal data. This Privacy Policy applies only to the Site as defined above.

How to disable cookies in web browsers

Please visit the following page to get instructions on how to disable cookies in Chrome, Mozilla Firefox, Microsoft Edge, and Opera browsers.

https://tools.google.com/dlpage/gaoptout?hl=en

Storage of personal data

Personal data is stored and processed through computer systems owned by the Museo del Mattoncino Karalisbrick and managed by the Associazione Culturale Karalisbrick or by third-party technical service providers; for more details, please refer to the section “Scope of accessibility of personal data” below. The data is processed exclusively by specifically authorized personnel, including personnel in charge of carrying out extraordinary maintenance operations.

Purpose and methods of data processing

The Museo del Mattoncino Karalisbrick may process the user’s common and sensitive personal data for the following purposes: use by users of services and features on the Site, management of requests and reports from its users, sending newsletters, management of job applications received through the Site, etc.

In addition, with the user’s further and specific optional consent, the Museo del Mattoncino Karalisbrick may process personal data for marketing purposes, i.e. to send promotional material and/or commercial communications related to the Company’s services, to the addresses indicated, both through traditional contact methods (such as postal mail, telephone calls with operator, etc.) and automated ones (such as internet communications, fax, email, SMS, mobile device applications such as smartphones and tablets – so-called APPS -, social network accounts – e.g. via Facebook or Twitter -, automatic operator telephone calls, etc.).

Personal data is processed both in paper and electronic form and entered into the company’s information system in full compliance with EU Reg. 2016/679, including security and confidentiality profiles, and inspired by the principles of correctness and lawfulness of processing. In compliance with EU Reg. 2016/679, data is stored and kept for 12 months.

The security and quality of personal data

Il Museo del Mattoncino Karalisbrick is committed to protecting the security of the user’s personal data and complies with the provisions on security provided by the applicable legislation in order to prevent data loss, illegal or illicit use of data, and unauthorized access to them, with particular reference to the Technical Disciplinary on minimum security measures. In addition, the information systems and computer programs used by the Museo del Mattoncino Karalisbrick are configured to minimize the use of personal and identifying data; such data is processed only for the specific purposes pursued from time to time. The Museo del Mattoncino Karalisbrick uses multiple advanced security technologies and procedures designed to promote the protection of users’ personal data; for example, personal data is stored on secure servers located in protected and controlled access areas. The user can help the Museo del Mattoncino Karalisbrick update and maintain their personal data by communicating any changes related to their address, qualification, contact information, etc.

Scope of communication and access of data

The user’s personal data may be disclosed to:
• all subjects to whom access to such data is recognized by law;
• our collaborators, employees, within the scope of their duties;
• all individuals and/or legal entities, public and/or private, when communication is necessary or functional to the performance of our activities and in the ways and for the purposes illustrated above;

Nature of the provision of personal data
The provision of some personal data by the user is necessary to enable the Company to manage communications, requests received from the user or to contact the user to follow up on their request. This type of data is marked with an asterisk [*] and in this case, the provision is mandatory to allow the Company to follow up on the request which, if not provided, cannot be fulfilled. On the other hand, the collection of other data not marked with an asterisk is optional: failure to provide them will not have any consequences for the user.
The provision of personal data by the user for marketing purposes, as specified in the “Purpose and methods of processing” section, is optional and the refusal to provide them will have no consequences. The consent given for marketing purposes is extended to the sending of communications made through both automated and traditional contact methods, as exemplified above.

Data subject rights
12.1 Art. 15 (right of access), 16 (right to rectification) of EU Reg. 2016/679
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and where that is the case, access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Right under Art. 17 of EU Regulation 2016/679 – right to erasure (“right to be forgotten”)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) and where there is no other legal ground for the processing;
c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
d) the personal data have been unlawfully processed;
e) the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of EU Regulation 2016/679.

Right referred to in art.20 Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller.

Withdrawal of consent to processing

The data subject has the right to withdraw his or her consent to the processing of his or her personal data by sending a registered letter with return receipt to the following address: Museo del Mattoncino Karalisbrick Viale Trento, 5 09123 – Cagliari (CA) Sardegna – Italy, accompanied by a copy of his or her identity document. For information on the request form, please refer to the website https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/2014184.

At the end of this operation, your personal data will be removed from the archives as soon as possible.
If you wish to obtain more information about the processing of your personal data, or to exercise the rights referred to in the previous point 7, you can send a registered letter with return receipt to the following address: Museo del Mattoncino Karalisbrick Viale Trento, 5 09123 – Cagliari (CA) Sardegna – Italy. Before we can provide or modify any information, we may need to verify your identity and answer some questions. A response will be provided as soon as possible.