Privacy

1) Data controller

The Data Controller for the processing of personal data is the Betrieb Landesmuseen [Department of Provincial Museums], which operates through the South Tyrol Museum of Mining.

Department of Provincial Museums
E-mail address: info@museiprovinciali.it
Tel. +39 0471 320162

South Tyrol Museum of Archaeology
E-mail: office@iceman.it
Tel.: 0471 320 112

Data Protection Officer (DPO)
The contact details of the Data Protection Officer (DPO) are as follows:
Renorm GmbH
E-mail address: renorm@legalmail.it
Tel. +39 0471/1882777

This privacy policy statement is intended to provide information on the processing, purposes, methods and, in general, management of personal data collected through the website www.museominiere.it (hereinafter the “website”). This privacy policy statement applies only to this website and therefore excludes additional pages that may be accessed via any link.

2) Purpose of data processing and legal basis for processing
The Data Controller guarantees, within the limits of the law, that the processing of personal data will be carried out in respect of the fundamental rights and freedoms as well as in respect of the dignity of the data subject, with particular reference to confidentiality, personal identity and the right to the protection of personal data.

In accordance with the conditions of lawfulness provided for in Article 6, GDPR 2016/679, the personal data you provide via the website may only be processed for the following purposes:
a) management of reservations and groups reservations;
b) management of contact requests;
c) management of applications and personnel selection
In the Jobs area one can find links to public competitions, published on the Job Exchange and/or other provincial platforms (separate web pages with different data controllers). One can also find job advertisements, which are managed directly by the South Tyrolean Museum of Archaeology. For more details about the processing of personal data on the latter type of applications, please visit the 'Candidate Information' section;
c) press subscription
processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures (Art. 6, para. 1, sentence 1, (a)).
e) website browsing and improvement
more details on these purposes and data types can be found in the Cookie Policy section.

3) Type of data processed
The following categories of personal data may be processed for the purposes mentioned above:
a. generic personal data (e.g. first name, last name, phone number and email address).

4) Data processing methods
Data processing is carried out:
a. by staff members who are authorised to carry out processing activities;
b. using manual and electronic systems;
c. by persons who are legally authorised to carry out these tasks;
d. with appropriate organisational and technical measures to ensure the confidentiality of the data and to prevent access by unauthorised third parties.

5) Retention of personal data
The data you provide will be kept for as long as is strictly necessary for the realisation of the relevant purposes, in particular:
-reservation management: max. 10 years in accordance with the retention periods for accounting, tax and administrative records (Art. 2200 of the Italian Civil Code);
- contact requests: Until the purpose for which the data was collected is fulfilled;
- press subscription: Up to revocation
- application management and personnel selection: see Candidate information
- website navigation and improvement: see Cookie Policy

6) Distribution and disclosure of personal data
Your personal data will not be distributed; however, it may be disclosed to third parties in the following cases:
a) public administrations and authorities, if provided for by law;
b) service providers and third parties that have a contractual relationship with the Data Controller, who have been appointed as “processors” in accordance with Article 28 of the GDPR, and who are obliged to comply with the data protection obligations on the basis of a specific agreement with the Data Controller;
c) legal entities that are entitled to access the data on the grounds of legal and administrative regulations.

7) Rights of the data subject
You have the right to assert your rights with respect to the Data Controller as set out in Article 15 ff. of the GDPR 2016/679, namely:
- information regarding personal data;
- the right to rectification and erasure (“right to be forgotten”) of personal data;
- the right to the restriction of processing;
- the right to data portability;
- the withdrawal of consent to the processing of personal data.

If you believe that your rights have been violated, you have the right to file a complaint with the Italian Data Protection Authority: www.garanteprivacy.it

Information on data processing through video surveillance: https://www.iceman.it/en/cctv/