Privacy Policy
Who we are
The Biblioteca Casanatense (hereinafter “Casanatense”) is a special autonomous institution of the Italian Ministry of Culture, with administrative offices located at Via S. Ignazio, 52, 00186 Rome, Italy.
Contact information
Phone: +39 06 69760300 (switchboard)
Email: b-casa@cultura.gov.it
Website: https://casanatense.cultura.gov.it
What personal data we collect and why
The editorial team of the website bsmc.cultura.gov.it guarantees that the processing of data received via email, registration forms, or in any other paper or electronic format complies with the Ministry of Culture’s privacy regulations, adapted to the European General Data Protection Regulation (GDPR). Personal data is used exclusively to provide information on events, exhibitions, and activities organized by Casanatense or hosted at the library premises, via a newsletter sent by email. You may unsubscribe from the newsletter using the link at the bottom of the email or by contacting b-casa@cultura.gov.it. Data is retained until the user requests removal, after which the information will be permanently deleted.
Any communication sent to b-casa@cultura.gov.it or related addresses, or circulated through mailing lists, will not be treated as confidential, must not infringe upon third-party rights, and must contain truthful, lawful information. The Casanatense staff assumes no responsibility for the content of such communications.
Cookies
This website only uses technical, functional, and analytical cookies for aggregated data collection, without storing IP addresses. This cookie policy was last updated on January 3, 2023, and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
1. Introduction
Our website, https://casanatense.cultura.gov.it (hereinafter “website”), uses cookies and other related technologies (collectively referred to as “cookies”), including those placed by third parties. This document provides information about the use of cookies on our website.
2. What are cookies?
Cookies are simple files sent along with the pages of this site and stored by your browser on your device. The information stored therein may be returned to our servers or to those of relevant third parties on subsequent visits.
3. What are scripts?
A script is a piece of code used to ensure the proper functioning and interactivity of our website. This code may run on our servers or your device.
4. What is a web beacon?
A web beacon (or pixel tag) is a small, invisible piece of text or image embedded in a website to monitor traffic. Visitor information may be collected through web beacons.
5. Cookies
5.1 Technical or functional cookies
These cookies ensure the website functions correctly and your preferences are remembered. Functional cookies simplify your browsing experience (e.g., remembering items in your cart). Session cookies are temporarily stored during your visit and are deleted once the browser is closed. Mandatory cookies preserve privacy settings and prevent repetitive cookie warnings.
5.2 Analytical cookies
These cookies anonymously collect and analyze website traffic data to improve performance and usability. Their deactivation does not affect site functionality.
5.3 Marketing/tracking cookies
These cookies are used to build user profiles and deliver personalized ads or track activity across websites for marketing purposes. Casanatense does not collect personal data for such purposes.
5.4 Social media
We embed content from Facebook, Instagram, and YouTube to share or promote pages. These services may set cookies and process user data for personalized advertising. For more information, refer to their respective privacy policies. These companies are based in the United States.
6. Cookies in use
-
Google Analytics – Statistics
-
Divi (Elegant Themes) – Functional
-
WordPress – Functional
-
Facebook – Advertising/Tracking, Functional
-
Instagram – Functional, Advertising/Tracking
-
Others – Purpose pending investigation
7. Consent
On your first visit, a cookie popup will appear. By clicking “Save preferences,” you authorize the use of selected cookies as described. You may disable cookies via your browser, but some features may not function properly.
8. Enabling/disabling and deleting cookies
You can manually or automatically delete cookies via your browser and set rules to block them. For more information, consult your browser’s help section. Note that some site features may not work if all cookies are disabled. Cookies will be set again upon renewed consent during future visits.
9. Your rights regarding personal data
Although no user account is required, you may request an exported file of your personal data or request deletion. This does not include data we must retain for legal, administrative, or security reasons. You can exercise your rights using the contact information provided.
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves exactly as if you visited the external site. These sites may collect data, use cookies, and monitor your interaction if you’re logged into their platforms.
Data processing notice pursuant to Article 13 of the GDPR (EU Regulation 2016/679) and Legislative Decree 196/2003
Processing: definition
“Processing” refers to any operation, performed with or without automated means, concerning personal data, such as collection, recording, organization, storage, use, deletion, etc., as defined by Article 4 of the GDPR.
Purpose and legal basis
Data is collected to enable the provision of services related to institutional activities, such as sharing news, event invitations, and managing registrations. Data is processed if:
-
the data subject has given consent;
-
processing is necessary to fulfill a contract or pre-contractual measures;
-
it is required by law;
-
it serves public interest or official authority;
-
it aligns with the legitimate interests of the Controller or third parties.
You may always ask the Controller to clarify the legal basis for processing.
Data processing methods and storage period
Data collected via email or phone may be processed electronically or on paper for the time needed to achieve its purpose, considering legal archiving requirements. Data collected via Google Forms is stored on Google Ireland servers and may be converted into Excel files stored electronically by the Controller.
Data is retained:
-
no longer than necessary to fulfill processing purposes;
-
within the limits of legal obligations.
10. Mandatory or optional nature of data provision
Providing data may be mandatory or optional, depending on its purpose. Mandatory data is required to deliver the requested service; failure to provide it will result in service denial.
11. Data provided voluntarily by the user
In cases where users voluntarily provide data (e.g., name, email, phone), this policy applies in full. Missing required data may prevent service delivery.
12. Data communication and disclosure
Your data may be shared with:
-
public entities with a legal right to access it;
-
private third parties or service providers under contract, designated as data processors;
-
legal representatives acting on behalf of the Institute.
Data will be accessible only to authorized personnel. No dissemination to the public is foreseen.
13. International data transfers
No international transfer occurs for data collected via email, paper, or phone. Data collected through Google Forms is processed via Google Ireland data centers. Google complies with Privacy Shield (for data transfers from EU to the U.S.) and is responsible for onward transfers. See Google’s privacy policy: https://policies.google.com/privacy
14. Data subject rights
Under Articles 15–22 of the GDPR, you have the right to:
-
access your data (Art. 15),
-
request rectification (Art. 16),
-
request deletion (“right to be forgotten”) (Art. 17),
-
request restriction of processing (Art. 18),
-
data portability (Art. 20),
-
object to processing (Art. 21).
Requests may be addressed to the Controller using the contact details provided.
You may also lodge a complaint with the Italian Data Protection Authority: http://www.garanteprivacy.it
15. Data Controller and Data Protection Officer (DPO)
The Data Controller is the Ministry of Culture, Via del Collegio Romano 27, 00186 Rome, Italy. Data will be collected and processed by Biblioteca Casanatense, acting as the Data Controller (pursuant to Ministerial Decree no. 147 of 14 March 2019), with offices at Via S. Ignazio 52, 00186 Rome.
Data Processing Officer for Casanatense: Dr. Cristiana Aresti
Phone: +39 06 69760300 (switchboard)
Email: b-casa@cultura.gov.it
The Ministry has appointed a DPO under Art. 37 of the GDPR:
Data Protection Officer, Ministry of Culture
Via del Collegio Romano 27, IT-00186 Rome
Phone: +39 06 67232494
Email: rpd@cultura.gov.it
Certified Email (PEC): rpd@pec.cultura.gov.it
General contact for data rights: gdpr@cultura.gov.it
If you believe your data has been processed unlawfully, you may file a complaint with the relevant authority as per Article 77 of the GDPR.
For any matters not covered herein, reference is made to the applicable legislation, in particular EU Regulation 2016/679.
Last updated: June 26, 2023
