Data Controller
Tuscan Province of the Augustinian Friars
Piazza Santo Spirito, 30
50125 Florence (Italy)
Tax Code and VAT Number: 94045560482
Telephone: +39 055 210030
E-mail: info@basilicasantospirito.it
Scope of this Privacy Policy
This Privacy Policy applies to the processing of personal data collected through the website www.basilicasantospirito.it, including:
- website browsing;
- contact requests;
- email communications;
- newsletter subscriptions;
- visit bookings;
- participation in events and activities promoted by the Basilica.
Categories of Personal Data
The following categories of personal data may be processed:
- technical browsing data;
- identification and contact data voluntarily provided by users;
- information submitted through contact forms;
- booking information;
- newsletter subscription data;
- communications sent by users.
Purposes and Legal Bases
Personal data are processed for the following purposes:
- responding to information requests;
- managing communications;
- organising and managing visits;
- sending newsletters and institutional updates;
- ensuring website security;
- complying with legal obligations.
Processing is carried out on the basis of Articles 6(1)(a), 6(1)(b), 6(1)(c) and 6(1)(f) of the GDPR, depending on the specific purpose.
Recipients of Personal Data
Personal data may be processed by authorised personnel, technical service providers, hosting providers, email service providers and consultants appointed by the Data Controller.
Personal data are not disclosed to the public.
Independent Data Controllers
Some activities promoted through the website are organised by independent entities acting as separate Data Controllers.
These include:
- Associazione A Minimo Incipe ETS, for visit bookings and cultural activities;
- Centro Studi Internazionale Leone XIV ETS, for conferences, workshops, educational and research activities.
Such processing activities are governed by the respective privacy policies of those organisations.
Data Retention
Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected.
Newsletter data are retained until consent is withdrawn.
Data Subject Rights
Users may exercise their rights under Articles 15–22 GDPR, including:
- access;
- rectification;
- erasure;
- restriction of processing;
- objection;
- withdrawal of consent;
- data portability where applicable.
Requests may be sent to:
Supervisory Authority
Data subjects have the right to lodge a complaint with the competent Data Protection Authority.
Cookies
For detailed information regarding cookies and similar technologies, please refer to the Cookie Policy available on this website.
Changes to this Policy
This Privacy Policy may be updated periodically.
In case of discrepancies between language versions, the Italian version shall prevail.