PRIVACY & COOKIES POLICY
INFORMATION

This page describes how the website http://www.santospiritomuseums.com is managed in
reference to the processing of personal data of users who consult it. This is
an information notice that is provided in accordance with the European Regulation 679/2016 dictated on
protection of individuals with regard to the processing of personal data, as well as the free
circulation of such data (hereinafter also Regulation) for users of the services of our site, which
are provided via the Internet. The information does not apply to other websites that may be consulted
through our links.

DATA CONTROLLER OF PERSONAL DATA PROCESSING (ART. 13.1.A REGULATION 679/2016/EU)
The Data Controller of personal data is Jera srl.

As of today’s date, all information pertaining to the Owner, together with the updated list of designated Responsible Persons and Administrators of
system, can be found at:

JERA SRL

U.Tupini Avenue 105

00144 Rome

Tel: +39 06 45495645

THE DATA PROTECTION RESPONSIBLE
The Data Protection Officer can be contacted by writing to: info@jeranet.com

PURPOSE OF THE PROCESSING AND LEGAL BASIS
This website collects personal data such as e.g. the user’s IP address in order to allow
itself to navigate through the website, as well as identifying data such as first and last name and
email address in order to respond to any user requests sent through the
email addresses on the pages of this website. The data are processed because of the following legal basis
:

TYPES OF DATA PROCESSED

Navigation data
The computer systems and software procedures used to operate this website
acquire, during their normal operation, some personal data whose transmission is
implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but
by its very nature could, through processing and association with data held by third parties,
allow users to be identified.

This category of data includes IP addresses or domain names of computers used by
users who connect to the site, addresses in URI (Uniform Resource Identifier) notation of the
requested resources, the time of the request, the method used in submitting the request to the server, the
size of the file obtained in response, the numerical code indicating the status of the response given by the
server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment
.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of
site and to check its correct functioning. The data could be used for
the ascertainment of responsibility in case of hypothetical computer crimes against the site.
Browsing data will be retained for 7 days, except for the time necessary to meet
requests received by the Judicial Authority for purposes of defense and / or state security and / or
prevention, detection or prosecution of crimes or to meet requests received by the Authority
Guarantor for the Protection of Personal Data.

Data provided voluntarily by the user
Data provided voluntarily by the user are the identification, contact and data in
mails forwarded to the addresses on the pages of this website.

  • OPTIONAL SUBMISSION OF DATA
    Apart from what is specified for navigation data and what is specified in the specific information notices
    present in other sections of this website, the user is free to provide personal data to request
    information on the services of the Entity. Failure to provide them may result in the impossibility of
    obtaining the requested information.
  • METHODS OF PROCESSING
    Personal data are processed primarily by automated means and will be kept in
    such a way as to minimize, through the adoption of appropriate and preventive security measures, the risks
    of destruction or loss, even accidental, of the data themselves, of unauthorized access or
    processing that is not permitted or does not conform to the purposes of collection.
  • DATA RECIPIENTS
    Personal data collected may be processed within the organization of the owner of
    processing by authorized and trained persons. The data may be disclosed to third party companies
    who support the Data Controller for the purposes mentioned above, appointed as Data Processors
    treatment ex art 28 of the Regulations (subjects in charge of the management of the site, to partners
    technological and instrumental partners that the Data Controller uses for the provision of services requested by users);
    as well as to subjects whose right to access the data is recognized by provisions of the law and / or
    secondary legislation.
    The Holder may use suppliers or sub-suppliers who do not reside in the European Union, to that
    In this regard, it is guaranteed that the transfer may take place only to entities that guarantee an
    adequate level of protection of data processing and/or to countries for which the competent
    Authorities have issued an adequacy decision as well as to entities that have provided
    appropriate guarantees to data processing through adequate regulatory/contractual means such as
    for example the signing of standard contractual clauses. To obtain information on this
    regard, you may send an e-mail to rpd@santospiritoinsassia.com.
  • STORAGE TIME
    Personal data are processed by manual and automated means, in compliance with
    requirements of the Regulations. The data will be kept only for the time necessary to achieve the
    purpose for which it was collected (to allow navigation through the site and respond to
    requests from interested parties) except for different requirements arising from legal obligations. Thereafter, the
    data will be deleted. For the retention times of data collected in specific sections of the
    present website, please refer to specific summary information that will be progressively
    reported or displayed on the pages of the site set up for particular services on request.
    The retention times of cookies, are indicated in the appropriate table in the paragraph
    “COOKIE POLICY”.
  • MINORS
    No personal data should be entered on the site by minors without the prior consent of
    parents or guardians. The owner encourages all parents and guardians to educate minors about the use on
    Internet of their personal data in a safe and responsible manner. The owner, however, pledges
    not to knowingly store or use any personal data collected from minors for any
    purpose, including disclosure to third parties.
  • LINKS TO OTHER WEBSITES
    On the site you may find hyperlinks to other websites, proposed to
    provide a better service to its users. The owner is in no way responsible for the
    content of websites that users may eventually access through its site.
    The existence of a hyperlink to another site therefore does not imply approval or acceptance
    of responsibility by the owner about the content of the new site accessed, including in
    relation to the policy adopted for the processing of personal data, as well as its use.
    RIGHTS OF THE DATA SUBJECT (ART. 13.2.B REGULATION 679/2016/UEU)
    Notice is hereby given that, at any time, the interested party may exercise:
    – Right to request from the Data Controller, ex Art. 15 Reg. 679/2016/EU, to be able to
    Access their personal data;
    – Right to request from the Data Controller, ex Art. 16 Reg. 679/2016/EU, to be able to
    Rectify their personal data, where the latter does not contravene current legislation
    On the retention of the data themselves;
    – Right to request from the Data Controller, ex Art. 17 Reg. 679/2016/EU, to be able to
    Delete their personal data, where the latter does not conflict with current legislation
    On the retention of the data themselves;
    – Right to request the Data Controller, ex Art. 18 Reg. 679/2016/EU, to be able to restrict
    The processing of their personal data;
    – to data portability, ex Art. 20 Regulation 679/2016/EU;
    – Right to object to processing, ex Art. 21 Reg. 679/2016/EU;
    – Right to withdraw consent to the processing of one’s personal data at any time
    without affecting the lawfulness of processing based on consent given before the
    revocation, ex Art. 7(3) Reg. 679/2016/EU;
    – Right to object at any time to the processing of one’s personal data for purposes of
    Direct marketing including profiling to the extent related to such marketing
    direct;
    – Right not to be subjected to a decision based solely on treatment
    automated including profiling, which produces legal effects that affect you or
    significantly affects you in a similar way
    You are advised that you have the right to lodge a complaint with the Supervisory Authority, which for Italy
    is the Italian Data Protection Authority(www.garanteprivacy.it).

COOKIES POLICY
This website uses cookies and similar technologies to ensure the proper functioning of
procedures and to improve the user experience of online applications. A cookie is defined as a
textual element that is placed on a computer’s hard drive. Cookies have the function of
streamlining web traffic analysis or signaling when a specific site is visited and
allow web applications to send information to individual users. Below is
detailed information about the use of cookies and similar technologies, how they are used by Rome
Capital and how to manage them.
The https://www.santospiritoinsassia.com website uses the following types of cookies:

TECHNICAL COOKIES
Technical cookies are used for the sole purpose of carrying out“…the transmission of a communication on
an electronic communications network, or to the extent strictly necessary for the provider of a
Information society service explicitly requested by the subscriber or user to deliver
such service.”

They are not used for any further purposes and are normally installed
directly by the site owner or operator. Functionality cookies are technical cookies and
allow the user to navigate according to a set of selected criteria (e.g.,
language, products selected for purchase) in order to improve the service rendered. Analytics cookies
where used directly by the site operator to collect information in aggregate form
and anonymously about the number of users and how they visit the site itself, are considered technical
cookies.

The site uses the following technical cookies:

The user’s personal data are processed by the data controller so that the site functions
properly and provides useful information to the user who visits it. The lawfulness of the processing of
personal data is based on the need to perform a task of public interest or related
to the exercise of public authority (Article 6.1 letter e) of the Regulations). Therefore, the installation of all
types of technical cookies does not require the user’s prior consent.

PROFILATION COOKIES
Profiling cookies are aimed at creating profiles related to the user and are used in order to
send advertising messages in line with the preferences manifested by the same as part of the
web browsing. Due to the particular invasiveness that such devices can have
within the private sphere of the user, European and Italian regulations provide that the user
must be adequately informed about the use of the same and thus express their valid
consent. In particular, profiling cookies are used to publish advertisements
tailored to the user’s interests: targeting or promotional cookies. These
make it possible to obtain detailed information about the user’s browsing of the site (for
example, the products or services most viewed by a particular person). They also allow
to recognize a user who returns to visit the site. Analytics cookies where used directly
by the site operator to collect non-aggregated and anonymous information on the number
of users and how they visit the site itself, are considered profiling cookies.
This site uses profiling cookies, they are detailed on this page: Cookies Policy (EU).

The user’s personal data are used in order to send advertising messages in line with the
preferences expressed by the user when browsing the web.
The lawfulness of the processing of personal data collected with profiling cookies is based on the user’s free, express and explicit consent
(art. 6.1 letter a) of the Regulations).

TOTAL OR PARTIAL DISABILITATION OF COOKIES
Only if the user has given consent, the site provides the cookies not strictly
necessary in such a way as to allow the user to navigate the Web site with full functionality,
in the absence of consent the same will be blocked.
Disabling all or part of the technical cookies may affect the use of the features
of the site reserved for registered users. On the contrary, the usability of public content is possible
also by disabling cookies completely.
Below we indicate how to proceed to disable cookies also through some
browsers.
Edge
1. Open Microsoft Edge
2. Select Settings and more > Settings > Privacy, search and services.
3. Under Clear browsing data select Choose items to delete.
4. Under Time range choose a time range.
5. Select Cookies and other site data, then Delete now.
Chrome
1. Select the Chrome menu icon .
2. Select Settings.
3. Under Privacy and Security, click Cookies and Other Sites Data.
4. Click Show all cookies and sites data. Remove All.
5. Confirm by clicking Delete All.
Firefox
1. Click the menu button and select Options.
2. Select the Privacy s Security panel.
3. In the Advanced Anti-Tracking Protection section, select Custom and
check the Cookies box.
4. Use the drop-down menu to choose the types of cookies to block
5. Close the “about:preferences” page. Any changes you make will be saved
automatically.
Explorer
1. In Internet Explorer, select the tools button and then select Internet Options.
2. Select the Privacy tab and, under Settings, select Advanced, then choose whether you want to
accept, block, or be prompted for proprietary or third-party cookies.
Safari
1. Go to the Safari menu (icon at the top right of the browser) and select Preferences.
2. In the pop-up window that opens, select the Security icon (in the shape of a padlock).
3. Under “Accept Cookies,” select the “Never” button.

SOCIAL NETWORK BUTTONS AND WIDGETS
Social buttons are those particular “buttons” on the site that depict the icons of social
networks (Facebook, Instagram, Youtube) and allow users who are
browsing to interact with a “click” directly with the social platforms.
The social buttons used by the site are links that refer to the Owner’s accounts on the social
networks depicted. Through the use of such buttons, therefore, no
third-party cookies are installed on the site. However, links are provided where the user can view the privacy policy
regarding data management by the Social to which the buttons refer:

– https://www.facebook.com/privacy/center/;
– https://privacycenter.instagram.com/;
– https://policies.google.com/privacy?hl=it.

“The Data Controller reserves the right to make changes to this policy at
any time by giving notice to you on this Site. Therefore, please consult
this page frequently to be constantly updated.”

Rome – 01/March/2025