{"id":3,"date":"2025-03-27T19:06:00","date_gmt":"2025-03-27T18:06:00","guid":{"rendered":"https:\/\/siramuse.it\/en\/?page_id=3"},"modified":"2025-07-30T14:26:48","modified_gmt":"2025-07-30T12:26:48","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/siramuse.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p><strong>pursuant to Regulation 2016\/679\/EU \u201cEuropean Regulation on the protection of personal data\u201d<\/strong><\/p>\n<p>In accordance with Regulation EU No. 2016\/679\/EU \u2013 GDPR (hereinafter the \u201c<strong>Regulation<\/strong>\u201d) and with current national legislation (Legislative Decree 196\/03 and subsequent amendments and integrations), Civita Sicilia Srl (the \u201c<strong>Company<\/strong>\u201d), in its capacity as \u201c<strong>Data Controller<\/strong>\u201d, wishes to provide users (the \u201c<strong>Users<\/strong>\u201d or the \u201c<strong>User<\/strong>\u201d) with information regarding the processing of their personal data. This Privacy Notice refers only to the Website <a href=\"https:\/\/siramuse.it\/en\">www.siramuse.it<\/a> (the \u201c<strong>Website<\/strong>\u201d) and not to other websites that may be accessed by the user via links. The Privacy Notice also applies to the contact center service provided by the Company to allow Users to make reservations by phone (the \u201c<strong>Contact Center<\/strong>\u201d).<\/p>\n<p><strong>DATA CONTROLLER<\/strong><\/p>\n<p>Pursuant to art. 4 of the Regulation, the Data Controller is Civita Sicilia Srl,<br \/>\nVAT No. 05668320822, whose contact details are as follows:<br \/>\n<strong>Registered office<\/strong>: 90143 \u2013 Palermo (PA), Via della Libert\u00e0 52;<br \/>\n<strong>Email address: <\/strong><a href=\"mailto:privacy@civita.art\">privacy@civita.art<\/a><\/p>\n<p><strong>PURPOSE, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING<\/strong><\/p>\n<p>The Data Controller undertakes to process the Users\u2019 personal data only as necessary for the following purposes:<\/p>\n<ol>\n<li>to provide the services requested by the User through the Website and the Contact Center;<\/li>\n<li>to fulfill specific obligations arising from the law, regulations or EU legislation, to comply with requests from authorities;<\/li>\n<li>to carry out newsletter and marketing activities: with the User\u2019s prior consent, the email address will be used to send newsletters promoting initiatives managed by the Company concerning current or upcoming cultural projects or events in which the User may be interested.<\/li>\n<\/ol>\n<p>The processing of personal data under letter a) is legally based on art. 6 letter b) of the Regulation (performance of a contract or pre-contractual measures requested by the data subject). The processing under letter b) is based on art. 6 (c) of the Regulation (compliance with a legal obligation of the Controller). The processing under letter c) is based on art. 6 (a) of the Regulation (consent).<br \/>\nProviding personal data for the purposes under letter a) is necessary for the Company to provide the requested services.<br \/>\nConsent to processing for the purposes under letter c) is optional and does not affect access to the services. If the User does not consent to processing under letter c), the Company will not send communications regarding its initiatives and offers.<br \/>\nIn any case, the User has the right to withdraw consent given for the processing under letter c) at any time, without affecting the use of the services or the lawfulness of processing carried out before withdrawal.<\/p>\n<p><strong>TYPES OF DATA PROCESSED<\/strong><\/p>\n<ul>\n<li>Identification data (first and last name);<\/li>\n<li>Contact information (phone, email address);<\/li>\n<li>Data required for billing, if requested.<\/li>\n<\/ul>\n<p>The IT systems and software procedures used for the functioning of this Website, by their nature, collect various types of usage data whose transmission is implicit in the use of internet protocols. This information could potentially identify Users through processing and association with data held by third parties. This category includes IP addresses of computers used by Users connecting to the Website, type of browser used, operating system, date and time of visit, URLs of pages visited, and other browsing data. These data are used solely to obtain anonymous statistical information about the Website\u2019s use, to check proper functioning, to identify anomalies and\/or abuses, and are deleted after processing. Such data may be used to ascertain liability in case of hypothetical cybercrimes against the Website or third parties.<\/p>\n<p>Data necessary for payment will be managed by the payment service provider and\/or the bank.<\/p>\n<p><strong>PROCESSING METHODS<\/strong><\/p>\n<p>Data will be processed using both electronic and traditional tools.<\/p>\n<p>Data processing may be carried out by staff specifically appointed for this purpose or by processor(s), where applicable.<\/p>\n<p><strong>DATA RECIPIENTS<\/strong><\/p>\n<p>User data may be transferred to the following categories of recipients:<\/p>\n<ul>\n<li>entities or authorities to whom communication is mandatory under law, regulation, or orders of authorities;<\/li>\n<li>parties authorized by the Company to perform activities strictly related to service provision, duly appointed as processors pursuant to art. 28 of the Regulation;<\/li>\n<li>Consultants and professionals, including in association (ICT consultants and data protection consultants).<\/li>\n<\/ul>\n<p>In relation to these categories of recipients, the Data Controller undertakes to rely only on parties that provide adequate guarantees regarding data protection.<\/p>\n<p><strong>TRANSFERS TO NON-EU COUNTRIES<\/strong><\/p>\n<p>User data will not be transferred to non-EU countries.<\/p>\n<p><strong>DATA RETENTION PERIOD<\/strong><\/p>\n<p>Data will be stored for as long as necessary to pursue the purposes for which they were collected, or until the User exercises their right to object to processing, subject to retention rights or obligations under applicable law.<\/p>\n<p><strong><u>RIGHT OF ACCESS TO PERSONAL DATA AND OTHER RIGHTS<\/u><\/strong><\/p>\n<p>In relation to the processing of personal data described above, the Regulation grants the data subject the rights set forth in arts. 15\u201322, in particular:<\/p>\n<ul>\n<li><strong>15 \u2013 Right of access<\/strong>: the data subject has the right to obtain confirmation of whether personal data concerning them are being processed and, if so, access to the data as well as their origin, purposes, methods of processing, recipients of the data, and the logic applied in case of electronic processing.<\/li>\n<li><strong>16 \u2013 Right to rectification<\/strong>: the data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them;<\/li>\n<li><strong>17 \u2013 Right to erasure<\/strong>: the data subject has the right to obtain the erasure or anonymization of personal data concerning them (where specific conditions under Art. 17 of the Regulation are met);<\/li>\n<li><strong>18 \u2013 Right to restriction<\/strong>: the data subject has the right to restrict processing of personal data concerning them (under the conditions set out in Art. 18 of the Regulation);<\/li>\n<li><strong>19 \u2013 Right to notification in case of rectification\/erasure\/restriction<\/strong>: the Data Controller is obliged to inform each recipient to whom personal data have been disclosed of any rectification, erasure, or restriction of processing carried out under Arts. 16, 17, and 18, unless this proves impossible or involves disproportionate effort;<\/li>\n<li><strong>20 \u2013 Right to data portability<\/strong>: the data subject has the right to receive in a structured, commonly used, machine-readable format the personal data concerning them, which they have provided. When exercising the right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible;<\/li>\n<li><strong>21 \u2013 Right to object<\/strong>: the data subject has the right to object to processing (under the conditions set out in Art. 21 of the Regulation), and the Controller must refrain from further processing unless specific conditions under Art. 21 apply;<\/li>\n<li><strong>22 \u2013 Right not to be subject to automated decision-making<\/strong>: the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.<\/li>\n<\/ul>\n<p>The Data Controller will respond to requests without undue delay and in any case within one month of receipt. This period may be extended by a further two months, considering the complexity and number of requests (in such cases the data subject will be duly informed).<\/p>\n<p>Requests concerning these rights may be submitted in writing or electronically via the dedicated email address <a href=\"mailto:privacy@civita.art\">privacy@civita.art<\/a>, and must be addressed to the Data Controller (see contact details in the \u201cData Controller\u201d section).<\/p>\n<p>Furthermore, under art. 7 of the Regulation, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out by the Controller before withdrawal.<\/p>\n<p><strong>RIGHT TO LODGE A COMPLAINT<\/strong><\/p>\n<p>If you believe that the processing carried out by the Data Controller may have infringed the provisions of the European Regulation on the protection of personal data, you have the right to lodge a complaint with the Italian Data Protection Authority pursuant to art. 77 of the Regulation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>pursuant to Regulation 2016\/679\/EU \u201cEuropean Regulation on the protection of personal data\u201d In accordance with Regulation EU No. 2016\/679\/EU \u2013 GDPR (hereinafter the \u201cRegulation\u201d) and with current national legislation (Legislative Decree 196\/03 and subsequent amendments and integrations), Civita Sicilia Srl (the \u201cCompany\u201d), in its capacity as \u201cData Controller\u201d, wishes to provide users (the \u201cUsers\u201d or [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":925,"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/925"}],"wp:attachment":[{"href":"https:\/\/siramuse.it\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}