Privacy Policy
NOTICE ON THE PROCESSING OF WEBSITE USERS’ DATA
pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani (Association of Italian Contemporary Art Museums), VAT no. 03051470163, represented by its legal representative and President, Dr Lorenzo Balbi, with registered and operational office in Bergamo (BG) at Via San Tomaso 53, acting as “Data Controller”, is committed to respecting and protecting your privacy and wants you to feel secure both while simply browsing this website and should you decide to register and provide your personal data in order to make use of the services offered to its Users.
Through this notice, AMACI – Associazione dei Musei d’Arte Contemporanea Italiani intends to provide certain information regarding the processing of personal data relating to users who visit or consult the association’s website, accessible online at https://amaci.org/, and the related commitments undertaken by AMACI in this regard; where required by EU Regulation 2016/679, the user’s consent will be requested before proceeding with the processing of their personal data.
This notice applies solely to the website managed by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani and excludes any other websites the user may access via links (for which reference should be made to the respective privacy notices/policies).
This notice is inspired by the directives set out in the “European Data Protection Package” which, since 4 May 2016, has established technical and organisational security measures appropriate to the processing of data, including online, as well as the purposes, methods, timeframes and nature of the information that data controllers must provide to data subjects, and the rights of data subjects.
This notice also draws on Recommendation No. 2/2001, adopted on 17 May 2001 by the European data protection authorities gathered in the Working Party established under Article 29 of Directive 95/46/EC, to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timeframes and nature of the information that data controllers must provide to users when they access web pages, regardless of the purpose of access.
Reproduction or use of pages, materials and information contained within the Site, by any means and on any medium, is not permitted without the prior written consent of AMACI – Associazione dei Musei d’Arte Contemporanea Italiani. Copying and/or printing for strictly personal, non-commercial use is permitted; other uses of the content, services and information on this website are not permitted.
With regard to the content offered and the information provided, AMACI – Associazione dei Musei d’Arte Contemporanea Italiani will endeavour to keep the website’s content reasonably up to date and reviewed, without providing any guarantee as to the adequacy, accuracy or completeness of the information provided, and expressly disclaims any liability for errors or omissions in the information provided on the site.
Place of data processing
Processing connected with the web services of this site takes place at the above-mentioned office of the Data Controller and is carried out solely by persons authorised to process data by the Controller.
Source – Browsing data
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani informs you that the personal data you provide, acquired in connection with requests for information and/or contact, registration on the site and use of the services via smartphone or any other device used to access the Internet, as well as the data necessary for the provision of such services — including browsing data and data used for any purchase of products and services offered by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, including simply the “browsing” data of Users on the site — will be processed in compliance with applicable regulations.
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be linked to identified data subjects, but by its very nature could, through processing and association with data held by third parties, enable users to be identified.
This category of data includes:
the “IP addresses” or domain names of the computers used by users connecting to the site;
the URI (Uniform Resource Identifier) addresses of the resources requested;
the time of the request;
the method used to submit the request to the web server;
the size of the file obtained in response;
the numerical code indicating the status of the response given by the web server (success, error, etc.);
other parameters relating to the user’s operating system and computing environment.
This data is used solely to derive anonymous statistical information on the use of the site and to check that the AMACI – Associazione dei Musei d’Arte Contemporanea Italiani website is functioning correctly. It should be noted that this data could be used to establish liability in the event of computer crimes committed against the AMACI website or other connected or linked sites: save for this eventuality, web contact data is not currently retained for more than a few days.
Source – Data provided by the user
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani collects, stores and processes your personal data for the purpose of providing the products and services offered on the Site, or to comply with legal obligations. Personal Data provided or acquired will be processed in accordance with the principles of fairness, lawfulness, transparency and confidentiality protection under applicable legislation. The Controller processes Users’ Personal Data by adopting appropriate security measures designed to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated.
With regard to certain specific Services, Products, Promotions, etc., AMACI – Associazione dei Musei d’Arte Contemporanea Italiani may also process your data for commercial purposes. In such cases, specific, separate, optional and always revocable consent will be requested, using the methods and contact details indicated below.
The optional, explicit and voluntary sending of emails to the addresses indicated in the relevant section of the Website, as well as the completion of questionnaires (e.g. forms) and communication via chat, push notifications via the App, social networks, call centre, etc., entails the subsequent acquisition of certain personal data, including data collected through the use of Apps and related services, necessary to respond to requests.
Please also note that when using a mobile connection to access digital content and services offered directly by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani or by our Partners, it may be necessary to transfer your personal data to such third parties.
Contact form
By filling in the Contact form with their Data, the User consents to its use to respond to requests for information, or for any other purpose indicated in the heading of the form. Personal Data collected via the Contact form: Email, Name and Surname. Except as specified with regard to browsing data, users are free to provide the personal data requested in the information request forms in order to request quotes or information about the services requested. Failure to provide such data may make it impossible to obtain what has been requested.
Purposes of processing and legal basis
Your data is processed by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani for the following purposes:
purposes strictly connected with and necessary for browsing the website https://amaci.org/, for using the related information services, and for handling requests for contact or information;
for ancillary activities connected with managing the User’s requests and sending responses, which may include the transmission of promotional material and/or the completion of an order for the purchase of products and services offered;
purposes related to compliance with obligations under EU and national legislation, the protection of public order, and the investigation and prosecution of crimes;
direct marketing, market research or commercial communications regarding products and/or services offered by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani;
this activity may also relate to products and services offered by Partners of AMACI – Associazione dei Musei d’Arte Contemporanea Italiani and may be carried out by sending advertising/informational/promotional material and/or invitations to take part in initiatives, events and offers aimed at rewarding users/customers, using “traditional” methods (for example, paper mail and/or operator calls) or “automated” contact systems (for example, email, interactive applications);
for sending information and promotional offers, including via the newsletter service. This processing is based on consent freely given by the User, which may be withdrawn at any time.
The provision of data for the purposes set out in points 1), 2) and 3), connected with a pre-contractual and/or contractual stage or functional to a User’s request or required by specific legal provisions, is mandatory; failing this, it will not be possible to receive the information or access the services requested. For this reason, consent to the processing of data under Article 6 of EU Regulation 2016/679 is not required, given that the processing of personal data takes place on the basis of Article 6(1)(b) of EU Regulation 2016/679, in particular as it is necessary for the successful completion of a pre-contractual stage to which the data subject is party.
With regard to points 4) and 5) of this section, the user’s consent to data processing is, by contrast, free and optional and may always be withdrawn without affecting the usability of the products and services, save that AMACI – Associazione dei Musei d’Arte Contemporanea Italiani will be unable to keep users updated on new initiatives or on any particular promotions or benefits that may be available.
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani may send commercial communications relating to products and/or services similar to those already provided, pursuant to Directive 2002/58/EC, using the email or postal details you have provided on such occasions, to which you may object using the methods and contact details indicated below.
Methods and logic of processing, retention periods and security measures
Data processing is also carried out with the aid of electronic or otherwise automated means and is carried out by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani and/or by third parties engaged by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani to store, manage and transmit such data.
As expressly provided for under Article 5(1)(e) GDPR, Data is retained for the time necessary to process it in relation to the service requested by the User, or as required by the Purposes described in this document, and in particular:
Data collected for Purposes falling within the Controller’s legitimate interest will be retained until that interest has been satisfied;
Data collected on the basis of the User’s Consent may be retained until such Consent is withdrawn;
Data collected for tax/administrative obligations or contractual obligations will be retained for the time necessary to fulfil such purposes and in accordance with the law, for a period not exceeding that laid down by civil law and in any event not exceeding 10 (ten) years;
Data collected for marketing and profiling purposes will be retained for a period not exceeding 24 (twenty-four) months from the acquisition of consent.
The Controller may retain Data for a longer period in compliance with legal obligations or by order of an Authority. The User may at any time request that processing be stopped or that Data be deleted.
Also with regard to data security, in the sections of the website set up for particular services, where personal data is requested from the browsing user, the data is encrypted using a security technology called Secure Sockets Layer, abbreviated as SSL. SSL technology encodes information before it is exchanged over the Internet between the user’s computer and the central systems of AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, rendering it unintelligible to unauthorised parties and thereby ensuring the confidentiality of the information transmitted.
With regard to the protection of personal data, users/customers are invited, pursuant to Article 33 of EU Regulation 2016/679, to report to AMACI – Associazione dei Musei d’Arte Contemporanea Italiani any circumstances or events that could give rise to a potential “personal data breach”, in order to enable prompt assessment and the adoption of any action needed to address such an event.
Such reports may be made by sending a communication to AMACI – Associazione dei Musei d’Arte Contemporanea Italiani at info@amaci.org or by contacting the Data Controller at the contact details given below.
The measures adopted by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani do not exempt the Customer from exercising due care in the use, where required, of passwords/PINs of adequate complexity, which should be updated periodically, particularly if the Customer fears they may have been compromised or discovered by third parties, and from keeping them safe and inaccessible to third parties in order to prevent improper or unauthorised use.
Cookies
The AMACI website uses cookies and similar technologies to ensure the site functions correctly, improve its security, analyse traffic, store users’ browsing preferences and, where applicable, enable the use of additional services or features.
Information regarding the categories of cookies used, their purposes, retention periods, any third-party providers involved, how consent is managed, and the ability to change preferences expressed at any time is set out in the specific Cookie Policy, available on this website.
Cookies not strictly necessary for the operation of the site are installed only with the user’s prior consent, expressed via the dedicated cookie management banner, in accordance with applicable regulations. Preferences expressed by the user may be changed or withdrawn at any time using the tools provided on the website.
Interaction with social networks
The Site’s pages feature social network buttons and widgets to facilitate interaction with social platforms and the sharing of content directly from this website’s pages.
Social networks serve as informational portals regarding the products supplied by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, as well as services, events, in-depth content, offers and discounts.
The “social” platforms used by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, through accounts to which dedicated pages are linked, are currently four: Facebook, Instagram, X (formerly Twitter) and YouTube.
These channels operate under their own privacy policies, which the user accesses and accepts. In this respect, the management of any data collected and processed takes place directly via the platforms, and AMACI – Associazione dei Musei d’Arte Contemporanea Italiani makes use of it in the manner and for the purposes set out in this section.
The content set out below is to be understood as implementing the privacy policies applied by the social network platforms on which AMACI – Associazione dei Musei d’Arte Contemporanea Italiani holds its own account, used solely and exclusively to present its products and services and for the stated purposes. Accordingly, AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, as a legal entity with its own privacy management structure in accordance with EU Regulation 2016/679 and Legislative Decree 101/2018, is relieved of liability for any actions taken by the operators of the social network platforms that do not comply with the applicable rules and that could potentially harm individuals’ freedoms.
The following links, which may be consulted at any time and are subject to ongoing updates, relate to the privacy policies applied by the social network platforms mentioned:
- Facebook social button and widget (Meta Platforms Ireland Limited)
Facebook’s social buttons and widgets are services for interacting with the Facebook social network, provided by Meta Platforms Ireland Limited. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy - Instagram social button and widget (Meta Platforms Ireland Limited)
Instagram’s social buttons and widgets are services for interacting with the Instagram social network, provided by Meta Platforms Ireland Limited. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy - X social button and widget (X Corp.)
X’s social buttons and widgets are services for interacting with the X social network, provided by X Corp.
Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy - YouTube social button and widget (Google Ireland Limited)
YouTube’s social buttons and widgets are services for interacting with the YouTube web platform, provided by Google Ireland Limited.
Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy
Content on external platforms
These services allow content hosted on external platforms to be viewed directly from this Site’s pages and to be interacted with. Where a service of this kind is installed, it is possible that, even if Users do not use the service, it may still collect traffic data relating to the pages on which it is installed.
YouTube Videos (Google Inc.)
YouTube is a video content viewing service managed by Google Inc. that enables this Site to embed such content within its pages.
Google Fonts (Google Inc.)
Google Fonts is a typeface display service managed by Google Inc. that enables this Site to embed such content within its pages.
Google Maps (Google Inc.)
Google Maps is a map display service managed by Google Inc. that enables this Site to embed such content within its pages.
Remarketing
These services enable this Site and its partners to communicate, optimise and serve advertising based on the User’s past use of this Site. This is carried out by tracking Usage Data and using Cookies, information which is transferred to the partners with whom remarketing and behavioural targeting activities are associated.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a Remarketing and Behavioural Targeting service provided by Facebook, Inc. that links the activity of this Site with the Facebook advertising network.
Google Ads Remarketing (Google Inc.)
Google Ads Remarketing is a remarketing and behavioural targeting service provided by Google that links the activity of this Application with the Google Ads advertising network and the DoubleClick Cookie. Users may opt out of Google’s use of cookies for ad personalisation by visiting Google Ads Settings.
Newsletter
By registering for the newsletter, the User’s email address is automatically added to a contact list to which emails containing information, including of a commercial and promotional nature, relating to this Website may be sent. The User’s email address may also be added to this list as a result of registering on this Site or after making a purchase. The User may unsubscribe from the newsletter at any time by clicking a specific link found within the emails. Once the unsubscribe link has been clicked, the User’s Data will be immediately deleted from the “email marketing” software. Personal Data collected: email address, name and surname.
This Website uses the newsletter service provided by: Brevo (SENDINBLUE — 17 rue de Salneuve, 75017, Paris, France; Brevo Privacy Policy)
Scope of communication, place of processing and transfer of data abroad
Data is processed at the Controller’s operational headquarters. For further information, please contact the Data Controller. Data may be processed by individuals and/or legal entities acting on behalf of the Controller under specific contractual obligations and located in EU member states or outside the EU. Should Data be transferred outside the European Economic Area, the Controller will adopt all contractual measures suitable to ensure adequate protection of the Data.
In pursuit of the purposes set out in this notice, AMACI – Associazione dei Musei d’Arte Contemporanea Italiani may disclose and have processed, within Italy (no transfer will be made outside the European Economic Area), users’/customers’ personal data to third parties with whom AMACI – Associazione dei Musei d’Arte Contemporanea Italiani has relationships, where such third parties provide services at our request.
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani undertakes to provide these third parties only with the information necessary to carry out the requested services, taking all measures to protect your personal data.
Personal data may be disclosed to the competent public bodies and authorities as required to comply with legal obligations or to establish liability in the event of computer crimes committed against the site, and may also be disclosed to, or held by, third parties (acting as processors or, in the case of electronic communication service providers, as independent controllers) that provide IT and telematic services (e.g. hosting, website management and development services) and of which AMACI – Associazione dei Musei d’Arte Contemporanea Italiani makes use to carry out tasks and activities of a technical and organisational nature that are instrumental to the operation of the website. Entities in the above categories act as External Data Processors, formally appointed by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani. Your personal data may also be accessed by AMACI’s employees/consultants, who are specifically trained and appointed as “Persons Authorised to Process Data under the direct responsibility of the Data Controller”.
The categories of recipients to whom data may be disclosed are available by contacting AMACI – Associazione dei Musei d’Arte Contemporanea Italiani at the contact details below.
Rights of data subjects
In accordance with, and within the limits and conditions set out in, the legislation on the protection of personal data regarding the exercise of Data Subjects’ rights (Chapter III of EU Regulation 2016/679), with regard to the processing covered by this Notice, as a Data Subject you have the right to:
access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be disclosed, the applicable retention period, and the existence of automated decision-making processes;
obtain, without undue delay, the rectification of inaccurate personal data concerning you;
obtain, in the cases provided for, the erasure of your data;
obtain the restriction of processing or object to it, where possible;
request the portability of the data you have provided to AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, i.e. to receive it in a structured, commonly used and machine-readable format, including for the purpose of transmitting such data to another Controller, within the limits and subject to the conditions set out in Article 20 of EU Regulation 2016/679;
lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali) pursuant to Article 77 of EU Regulation 2016/679.
With regard to the processing referred to in point d) of the “purposes of processing and legal basis” section, the Customer may always withdraw consent and exercise the right to object to direct marketing (in both “traditional” and “automated” form). In the absence of any indication to the contrary, an objection will be understood to apply to both traditional and automated communications.
Rights relating to privacy and the protection of personal data may be exercised at the request of the Data Subject by downloading and completing the relevant form for exercising data protection rights and sending it by email to info@amaci.org, or otherwise using the contact details given at the foot of this notice.
Changes to the Privacy Policy
Use of the Website, including via tablet and/or smartphone, by the Customer and/or User implies full knowledge and acceptance of the content and any provisions included in this version of the notice published by AMACI – Associazione dei Musei d’Arte Contemporanea Italiani at the time of accessing the website.
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani, as Data Controller, reserves the right to make changes to this Privacy Policy at any time, giving notice to Users on this page. Please therefore check this page regularly, referring to the last update date shown at the bottom. In the event that the User does not accept changes made to this Privacy Policy, the User must cease using this Website and may ask the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that point. The Controller is not responsible for keeping all links shown in this Privacy Policy up to date; accordingly, whenever a link is not working and/or is outdated, Users acknowledge and accept that they must always refer to the document and/or section of the linked websites in question.
Privacy Policy updated as of June 2026
Yours faithfully,
The Data Controller
AMACI – Associazione dei Musei d’Arte Contemporanea Italiani
