INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users accessing the American Friends of Museo Egizio website with regard to the protection of personal data pursuant to art. 13 of Regulation (EU) 2016/679

WHY THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (hereinafter "the Regulation"), this page describes the policy adopted for the processing of personal data concerning the protection of personal data of users accessing the American Friends of Museo Egizio website through the following address:

• www.af-me.org

This information does not apply to other websites, pages, or online services that can be reached through hypertext links that may appear in the websites listed above. The hypertext links may refer to resources that lie outside the scope of the American Friends of Museo Egizio website. The same also applies to any links to the official social media accounts of American Friends of Museo Egizio and Museo Egizio, that adopt the privacy policy of each social media (e.g., facebook.com).

DATA CONTROLLER
After accessing the websites listed above, data may be processed concerning identified or identifiable persons. The Data Controller is Fondazione Museo delle Antichità Egizie di Torino, with registered office in Turin, Italy, Via Academia delle Scienze, 6 - 10123 (certified email: fme.torino@pec.museoegizio.it, main switchboard: +39 011.561.7776)

DATA HANDLER IN CHARGE OF DATA PROTECTION
Data Protection is the responsibility of the Data Handler, that can be reached at this address: Fondazione Museo delle Antichità Egizie di Torino: Via Accademia delle Scienze 6, IT-10123, Turin (To) email: dpo@museoegizio.it.

LEGAL BASIS FOR DATA PROCESSING
The personal data indicated in this page is processed by Fondazione Museo delle Antichità Egizie di Torino (hereinafter "FME") in the performance of its tasks and in the pursuit of its public interest and for the dissemination of science, including improving website navigation and the collection of useful information.
The Data Controller processes Personal Data concerning the User in the following cases:
- the User has expressed one or more specific consents;
- the processing of data is required to execute a contract with the User and/or pre-contractual measures;
- the processing of data is required to fulfill the Data Controller's legal obligations;
- the processing of data is required to execute a task in the public interest or to exercise the public powers of the Data Controller;
- the processing of data is required to pursue the legitimate interest of the Data Controller or Third Parties.

TYPE OF DATA AND PURPOSE OF DATA PROCESSING
Navigation data
The website IT systems and software procedures acquire, in the course of their regular operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This includes IP addresses and domain names identifying computers and terminals used by users, URI/URL addresses (Uniform Resource Identifier/Locator) of requested resources, query time, the method used to query the server, the size of the response file, the code number indicating the status of the server's response (successful, error, etc.) and other parameters concerning the operating system and the user's IT environment.
This data is necessary to access web services and is also used to:

- obtain statistical information on service usage (most visited pages, number of hourly / daily visitors, visitor breakdown by geographical area, etc.);
- check the correct functioning of available services.
Navigation data has a duration of no more than seven days and is promptly deleted after being aggregated (except in case of criminal investigations by the relevant Authorities).

Data communicated by the user
The data included in optional, explicit, and voluntary messages sent to the FME as well as in forms filled out and sent via the American Friends of Museo Egizio website entail the acquisition of the sender's contact data that is necessary to reply, as well as of all personal data contained in those communications.

Cookies and other tracking systems
No cookies are used for user profiling and no other tracking systems are used.
Non-persistent session cookies are used only to the extent necessary to ensure the safe and efficient navigation of the sites. The storage of session cookies in computer terminals or browsers is controlled by the user. On servers, at the end of HTTP sessions, cookie information is recorded in service logs and is preserved for no more than seven days, like other navigation data.

DATA RECIPIENTS
The data collected from users when they visit the websites listed above is received by the following subjects designated by the Authority for Privacy, pursuant to art. 28 of the Regulation, as data controllers. The data controllers list is available by contacting at privacy@museoegizio.it.
The collected personal data is also processed by FME personnel, acting according to specific instructions provided for the exclusive purpose of the processing of the said data.

RIGHTS OF THE INTERESTED PARTIES
The interested parties have the right to obtain from FME, in the cases envisaged, access to their personal data or the modification or cancellation thereof or the limitation of their processing, or they may oppose their processing (artt. 15 and subs. of the Regulation). Requests in this sense should be addressed to FME by contacting the Data Handler for FME (Fondazione Museo delle Antichità Egizie di Torino: Via Accademia delle Scienze n. 6, IT-10123, Torino (To) email: privacy@museoegizio.it).

RIGHT TO COMPLAIN
Any interested party believing that the processing of their personal data through this website is in violation of the Regulation have the right to file a complaint with the Controlling Authority, pursuant to art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).