1. Introduction
Fondazione Marini San Pancrazio (hereinafter referred to as the “Foundation”), which operates the Marino Marini Museum in Florence, is committed to protecting the privacy of individuals who visit the website https://museomarinomarini.it and use the online services made available through it.
This Privacy Policy explains how the Foundation collects, uses, stores and protects the Personal Data processed through the website, in accordance with Regulation (EU) 2016/679 (“GDPR”), the Italian Legislative Decree No. 196/2003 (Italian Privacy Code), as amended by Legislative Decree No. 101/2018, and the applicable Italian legislation on the protection of Personal Data.
The purpose of this Privacy Policy is to provide clear and transparent information about the processing of Personal Data collected through the website and the related online services.
2. Data Controller
The Data Controller is:
Fondazione Marini San Pancrazio
Registered office: Piazza San Pancrazio snc, 50123 Florence – Italy
Tax Code (Codice Fiscale): 04053590487
E-mail: amministrazione@museomarinomarini.it
3. Scope of this Privacy Policy
This Privacy Policy applies to the processing of Personal Data collected through the Foundation’s website and the related online services.
In particular, it applies when users:
– browse the website;
– contact the Foundation using the published e-mail addresses;
– subscribe to the newsletter;
– book and purchase admission tickets through the online booking system.
4. Categories of Personal Data Processed
Browsing Data
When users browse the website, certain technical information is collected automatically to ensure the proper functioning of the website. This may include, for example, IP addresses, browser type, operating system, and the date and time of requests.
Such information is processed exclusively to ensure the proper operation of the website, the security of the systems and the technical management of the services provided.
Data Provided Voluntarily by Users
Users may contact the Foundation through the e-mail addresses published on the website.
In such cases, only the Personal Data contained in the communication and those necessary to respond to the request will be processed.
Newsletter Subscription
Subscription to the newsletter is voluntary.
For this purpose, the Foundation collects the user’s first name, last name, e-mail address and any additional information voluntarily provided.
The newsletter service is managed through a dedicated external platform in compliance with the applicable data protection legislation.
Online Ticket Booking
Online bookings and ticket purchases are managed through the FareHarbor platform.
The Personal Data required during the booking process are processed only to the extent necessary to provide the requested service and in accordance with FareHarbor’s own privacy policy.
5. Purposes and Legal Basis for Processing
The Personal Data collected through the website are processed exclusively for purposes related to the Foundation’s activities and to provide the services requested by users.
In particular, Personal Data are processed in order to:
– respond to requests for information;
– manage ticket bookings and purchases;
– manage newsletter subscriptions and distribution;
– comply with applicable legal obligations;
– ensure the security, proper operation and technical management of the website.
Depending on the specific purpose, the processing of Personal Data is based on one or more of the following legal grounds:
– the performance of pre-contractual measures or a contract requested by the Data Subject;
– the Data Subject’s consent, limited to newsletter subscriptions and any other cases where consent is required by law;
– compliance with legal obligations to which the Foundation is subject;
– the Foundation’s legitimate interest in ensuring the security of its systems, the proper management of its services and the pursuit of its institutional purposes.
6. Processing Related to the Museum’s Activities
Photography and Video Recording
During exhibitions, openings, conferences, educational activities, guided tours and other events organised by the Foundation, photographs and video recordings may be taken for documentation purposes, institutional communication and the promotion of the Museum’s activities.
Images may be published on the Museum’s official website, the Foundation’s social media channels, newsletters and other informational or promotional materials, in compliance with applicable legislation and with due regard for the rights of the individuals portrayed.
Where photographs or recordings depict identifiable individuals or identifiable groups, the Foundation will provide appropriate information and, where required by law, obtain the necessary consent.
Activities Involving Minors
The Foundation organises educational activities and initiatives for children and young people in collaboration with families, schools and other organisations.
Where such activities involve the processing of Personal Data relating to minors, the Foundation processes such data in compliance with applicable legislation and adopts the measures necessary to ensure their protection.
Where consent is required by law, it will be obtained from the parent(s), legal guardian(s) or any other person legally authorised to provide it, including, where appropriate, through schools or the organisations arranging the activities.
7. Methods of Processing
Personal Data are processed using electronic and, where necessary, paper-based means, adopting appropriate technical and organisational measures to ensure their security, confidentiality and protection against unauthorised access, loss, destruction or unlawful processing.
Personal Data are processed exclusively by authorised personnel or by third parties acting on behalf of the Foundation, in accordance with applicable legislation and the instructions provided by the Foundation.
8. Recipients of Personal Data
Personal Data may be disclosed to third parties only where this is necessary for the provision of the requested services, to comply with legal obligations or for technical purposes related to the operation of the website.
For the provision of certain services, the Foundation relies in particular on the following service providers:
– FareHarbor, for online bookings and ticket purchases;
– Mailchimp, for newsletter management and distribution;
– SiteGround, for website hosting services.
Additional technical service providers may process Personal Data solely to the extent necessary for the operation of the website and the provision of the requested services.
Personal Data collected through the website are not disclosed to the public.
9. Data Retention
Personal Data are retained only for as long as necessary to fulfil the purposes for which they were collected and, where applicable, for the periods required by applicable law.
In particular:
– Personal Data relating to requests for information are retained for the time necessary to respond to the user’s request;
– Personal Data relating to bookings are retained for the period required by administrative, tax and accounting obligations;
– Personal Data collected for newsletter subscriptions are retained until consent is withdrawn or the newsletter service is discontinued.
10. Transfers of Personal Data Outside the European Economic Area
Some of the Foundation’s service providers may process Personal Data outside the European Economic Area (EEA).
Where this occurs, Personal Data are processed in accordance with the appropriate safeguards provided for by Chapter V of Regulation (EU) 2016/679 (GDPR), such as adequacy decisions or standard contractual cluases, and applicable data protection legislation.
11. Data Subjects’ Rights
Data Subjects may exercise the rights provided for under Articles 15 to 22 of Regulation (EU) 2016/679 (GDPR), where applicable.
In particular, Data Subjects have the right to:
– obtain confirmation as to whether or not Personal Data concerning them are being processed;
– access their Personal Data and obtain a copy of such data;
– request the rectification or updating of inaccurate Personal Data;
– request the erasure of Personal Data where permitted by law;
– request the restriction of processing;
– object to the processing of Personal Data in the cases provided for by law;
– request data portability, where applicable;
– withdraw consent at any time, without affecting the lawfulness of processing carried out before such withdrawal;
– lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
To exercise any of these rights, Data Subjects may contact the Data Controller at the following e-mail address: amministrazione@museomarinomarini.it.
12. Updates to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in applicable legislation, organisational requirements or technical developments.
Users are encouraged to review this page from time to time in order to remain informed of any updates.
For further information on the use of cookies and other tracking technologies, please refer to the website’s Cookie Policy
Last updated: July 2026