General privacy information

What rights do you have in relation to your personal information?

You have certain rights in relation to your personal information. They are:

1. The right to obtain confirmation that we are processing your personal information
2. The right to access your information;
3. The right to have your personal information rectified if it is incomplete or inaccurate;
4. The right to have your personal information removed or deleted in certain circumstances, for example when you have withdrawn consent to its being processed and we have no other basis for processing it;
5. The right to restrict the processing of your personal information in certain circumstances;
6. The right to object to certain processing including the right to not be subject to automated decision making and the right to object where we are processing your information on the basis of our legitimate interest;
7. Where you have provided your consent to the processing, the right to withdraw consent to the processing of your data (without affecting the lawfulness of processing based on consent before its withdrawal); and
8. The right to require us not to send you marketing communications.

Please note that the above rights are not absolute, and requests may be refused where exceptions apply.

How do we keep your information secure?

We follow strict security procedures in the storage and disclosure of information which you have given us to try to prevent:

• Unauthorised access;
• Improper use or disclosure;
• Unauthorised modification and
• Accidental loss, damage, and destruction.

We are required to ensure any transfers of information will be done securely, in accordance with best practice, and in compliance with Data Protection regulations.

All our staff and data processors, who have access to, and are associated with the processing of personal information, are legally obliged to respect the confidentiality of the personal information of our visitors and email subscribers and all those who engage with us.

What personal information do we collect about our email /newsletter subscribers?

We only collect information that is necessary to keep you informed about the Gallery and its activities. The personal information we collect from you as an email subscriber may include your:

• email address;
• name;

In addition to the above, when you visit our website we use cookies to improve your experience and personalise the service you receive. See our cookies policy for more information.

Under data protection law, certain categories of personal information are recognised as sensitive, including health information and information regarding race, religious beliefs, and political opinions (‘special category data’). We do not collect special category personal data about email and or newsletter subscribers.

Information you give us

We collect personal information that you may provide to us, including when you:

• sign up to our newsletter updates;
• complete a visitor survey;

Information we get from your use of our website(s) and services

We collect information about the services you use and how you use them in a number of ways, including when you:

• visit our website, including through the use of cookies (see our cookies policy for more information);
• view and interact with our emails and content;
• you subscrive our newsletter.

Information from third parties

We may also receive information about you from third parties, for example when you:

• follow the Polo Museale’s social media channels, subject to your privacy settings on those channels;

How do we use your information as an email subscriber and what is our legal basis for processing it?

We will only process your information if we have a legal basis for doing so under current italian data protection legislation, including:

• monthly newsletters, what’s on round-ups, exhibition reminders, alerts, and surveys;
• letting you know about our latest exhibitions, courses, talks, news, changes to our services;
• invitations to press.

Where processing your information is necessary for our legitimate interests

We are committed to communicating with you using an approach that is right for you. This means we carefully manage the communications we send you to make sure that we are contacting you in the most relevant way.

In order to do this, we may combine the information we collect about you and analyse what we know about your interests, preferences, and interactions with our website(s) and marketing emails to create a profile, so we can contact you in the most appropriate way, and with the most relevant information.

Examples of communications that use profiling in this manner include our email updates, some newsletters, exhibition pre- and post-visit emails, abandon browse.

You do have the right to object to us combining and analysing information in this way. To make this easy for you, if you tell us that you don’t want to receive personalised emails, we will treat this as an objection to the combining and analysing of your data and will stop dealing with your data in this way and sending you personalised emails.

Changing your email update preferences

You can change your email preferences or unsubsribe at any time by:

• indicating that you do not wish to receive our emails by clicking the ‘unsubscribe’ link at the end of our emails; or
• contacting us at This email address is being protected from spambots. You need JavaScript enabled to view it..

What other organisations do we share your information with?

We will not sell your personal information to any third parties or external organisations.

How long do we keep your information?

Generally we will only keep information about you for as long as you subscribe to our emails. However, we are required to keep a minimal amount of your personal information (your name and email address) if you indicate that you do not wish to be contacted for email communications purposes. These details are kept securely on a suppression list to help us make sure that we do not continue to contact you.