INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO EU REGULATION 2016/679
(updated on 16/07/2025)

1) Data Controller and Data Protection Officer
The Data Controller is the Recognized Association Museo Nazionale dell’Automobile “Avvocato Giovanni Agnelli” (VAT No. 00749090015), with registered office in Turin, Corso Unità d’Italia no. 40.
The Data Protection Officer (DPO) can be contacted at the following email address: privacy@museoauto.it.

2) Legal basis and purposes of processing
Personal data are processed on the basis of one of the following legal grounds:
• the user has given consent for one or more specific purposes;
• the processing is necessary for the performance of a contract with the user and/or for the implementation of pre-contractual measures;
• the processing is necessary to comply with a legal obligation;
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller.

Personal data may be collected and processed for one or more of the following purposes, where applicable:
a) browsing this website;
b) sending, upon the user’s request, personalized commercial offers from the Data Controller via email;
c) profiling activities aimed at improving the user’s experience, providing targeted content and enhancing our services;
d) performance of contractual or pre-contractual measures requested by the user;
e) compliance with legal and regulatory obligations and for administrative-tax purposes;
f) collection and analysis of suggestions, proposals and opinions from users, aimed at the planning, design and promotion of the cultural and museum activities of MAUTO.

3) Types of data processed
Processing may include the storage and use of personal data such as: identification details of the data subjects, contact information, and/or browsing data on this website collected through cookies installed on the user’s computer or mobile device (see the Cookies Policy).

4) Processing methods and recipients
Personal data are processed using paper and digital tools, including automated and cloud-based systems, by authorized staff or expressly appointed external parties, for the purposes indicated in Art. 2.
Processing takes place exclusively within the European Economic Area.
Access to data by unauthorized parties is strictly prohibited.

5) Data retention period
Personal data are processed and stored only for the time strictly necessary to achieve the purposes described in Art. 2 of this notice.

6) Data subject rights and contact details
The Data Controller, where possible, guarantees the following rights without undue delay and, in any case, no later than 30 days from receipt of the request:
• access to personal data concerning the data subject and provision of a copy thereof;
• objection to processing or request for restriction of processing, rectification or erasure of personal data;
• data portability, consisting of the delivery to the data subject of commonly used, machine-readable data, or the transmission to another Data Controller identified by the data subject.

For further information on the processing of personal data and to exercise the rights referred to in this section, please contact the Recognized Association Museo Nazionale dell’Automobile “Avvocato Giovanni Agnelli” at: privacy@museoauto.it.

In any case, the data subject has the right to lodge a complaint with a Supervisory Authority (Art. 77 GDPR).