Cookie Policy of the Fondazione Palazzo Strozzi pursuant to the Cookie Guidelines and other tracking tools – 10 June 2021
1. Foreword
Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”), this page describes the methods for processing the personal data of users who consult the websites of the Fondazione Palazzo Strozzi accessible by electronic means at the following address. www.palazzostrozzi.org .
This information does not concern other websites, pages or online services that can be reached through hypertext links that may be published on the websites but refer to resources outside the domain of the Fondazione Palazzo Strozzi.
2. The Data Controller
The processing of personal data is carried out by the Fondazione Palazzo Strozzi, in its capacity as Data Controller. If you have any questions or requests relating to the processing of your personal data you may contact us at any time by sending a request to the following addresses:
| Company name FONDAZIONE PALAZZO STROZZI Registered office: Piazza Strozzi, 5023 Firenze CPO contact details: privacy@palazzostrozzi.org |
3. Type of Data and Purpose of Processing
Necessary Cookies
This Website uses Cookies commonly referred to as “technical” or other similar Tracking Tools to perform activities strictly necessary to ensure the operation or provision of the Service.
Third-Party Tracking Tools and Tag Management
This type of service is functional for the centralised management of tags or scripts used on this Website.
The use of these services involves the flow of the User’s Data through them and, where appropriate, their retention.
• Google Tag Manager is a tag management service provided by Google Ireland Limited.
| Personal data processed | Tracking instruments |
|---|---|
| Place of processing | Ireland – Privacy Policy. |
Other activities involving the use of Tracking Tools
Website Tracking Tools to provide a personalised user experience, enabling better management of personal settings and interaction with external networks and platforms.
Interaction with social networks and external platforms
This type of service makes it possible to interact with social networks, or other external platforms, directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network. This type of service may, however, collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended that you disconnect from the respective services to ensure that the data processed on this Website is not linked back to your profile.
• AddThis (Addthis Inc.)
AddThis is a service provided by Oracle Corporation that displays a widget that enables interaction with social networks and external platforms and the sharing of content on this Website.
Depending on how it is configured, this service may display widgets belonging to third parties, such as social network operators on which to share interactions In this case, the third parties providing the widget will also learn about the interaction performed and the Usage Data relating to the pages where this service is installed.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | UID 2 years __atuvc: 2 years __atuvs: 30 minutes |
• Twitter Tweet button and social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | peronsalisation_id 2 years |
• Facebook Like button and social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook Inc.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | _fbp: 2 months |
• Google+ +1 button and social widgets (Google Inc.)
The +1 button and Google+ social widgets are services for interaction with the Google+ social network, provided by Google Inc.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
• “Pin it” button and social widgets of Pinterest (Pinterest)
The “Pin it” button and social widgets are services for interacting with the Pinterest platform, provided by Pinterest Inc.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | _pin_unauth: 1 year _pinterest_ct_ua: duration of the session |
Viewing of contents from external platforms
This type of service makes it possible to view content hosted on external platforms directly from the pages of Website and to interact with them.
If a service of this type is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages where it is installed.
• Widget Video YouTube (Google Inc.)
YouTube is a video content display service operated by Google Inc. which allows Website to integrate this content into its pages.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | PREF: 8 months VISITOR_INFO1_LIVE 8 months YSC: duration of the session |
• Video Vimeo (Vimeo, LLC)
Vimeo is a video content display service operated by Vimeo, LLC which enables this Website to integrate such content within its pages.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | player 1 year vuid: 2 years |
Measurement
This Website uses Tracking Tools to measure traffic and analyse the Users’ behaviour with the aim of improving the Service.
Statistics
The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User’s behaviour.
• Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualise and personalise ads in its advertising network.
| Personal data processed | Cookies and Usage Data |
|---|---|
| Place of processing | USA – Privacy Policy – Opt Out. |
| Duration of archiving | AMP_TOKEN: 1 hour _ga: 2 years _gac*: 3 months _gat: 1 minute _gid: 1 day |
• Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms Ireland Limited)
Facebook Ads conversion tracking (Facebook pixels) is a statistics service provided by Meta Platforms Ireland Limited that links data from the Meta ad network with actions taken within this website. The Facebook pixel monitors conversions that can be attributed to Facebook Ads, Instagram and the Audience Network.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | Ireland – Privacy Policy. |
| Duration of archiving | _fbp: 3 months fr: 3 months |
• Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner information about traffic and interactions on this Website.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | Ireland – Privacy Policy. |
| Duration of archiving | _fbp: 3 months |
Targeting and Advertising
This Website uses Tracking Tools to provide customised commercial content based on User behaviour and to manage, deliver and track advertisements.
Interaction with social networks and external platforms
This type of service allows for interactions with social networks, or other external platforms, directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network. This type of service may, however, collect traffic data for the pages where the service is installed, even when Users do not use it. It is recommended that you disconnect from the respective services to ensure that the data processed on this Website is not linked back to your profile.
• AddThis (Addthis Inc.)
AddThis is a service provided by Oracle Corporation that displays a widget that enables interaction with social networks and external platforms and the sharing of content on this Website.
Depending on how it is configured, this service may display widgets belonging to third parties, such as social network operators on which to share interactions In this case, the third parties providing the widget will also learn about the interaction performed and the Usage Data relating to the pages where this service is installed.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | uid 2 years __atuvc: 2 years __atuvs: 30 minutes |
• Twitter Tweet button and social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | peronsalisation_id 2 years |
• Facebook Like button and social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook Inc.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | _fbp: 3 months |
• Google+ +1 button and social widgets (Google Inc.)
The +1 button and Google+ social widgets are services for interaction with the Google+ social network, provided by Google Inc.
| Personal data processed | Usage Data and Tracking Tool |
| Place of processing | USA – Privacy Policy. |
• “Pin it” button and social widgets (Pinterest)
The “Pin it” button and social widgets are services for interacting with the Pinterest platform, provided by Pinterest Inc.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | USA – Privacy Policy. |
| Duration of archiving | _pin_unauth: 1 year _pinterest_ct_ua: duration of the session |
Advertising
This type of service makes it possible to use the User’s Data for commercial communication purposes. These communications are displayed on Website in the form of banners and other forms of advertising, also in relation to the User’s interests. This does not mean that all Personal Data is used for this purpose. The data and conditions of use are indicated below.
Some of the services indicated below may use Tracking Tools to identify the User or use the behavioural re-targeting technique, i.e., displaying advertisements that are personalised according to the User’s interests and behaviour, also detected Website. For further information, we suggest you check the privacy policies of the respective services.
Generally, services of this type offer the possibility of disabling such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to disable interest-based advertisements in the section “How to disable interest-based advertising” in this document.
Facebook Lookalike Audience (Meta Platforms Ireland Limited)
Facebook Lookalike Audience is an advertising and behavioural targeting service provided by Meta Platforms Ireland Limited that uses Data collected through Facebook’s Custom Audience service. This serves the purpose of showing advertisements to Users with similar behaviour to Users who are already on a Custom Audience list based on their previous use of this Website or their interaction with relevant content through Facebook applications and services.
Depending on these Data, Personalized Ads will be shown to Users suggested by Facebook Lookalike Audiences.
Users can choose not to use Facebook’s Tracking Tools for ad customisation by visiting this opt-out page opt-out page
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | Ireland – Privacy Policy – Opt Out. |
| Duration of archiving | _fbp: 3 months |
• Taboola (Taboola Inc.)
Taboola is an advertising service provided by Taboola Inc
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | UNITED STATES– Privacy Policy – Opt Out. |
| Duration of archiving | *:session-data: not defined COu: 1 month _date: 1 day _tb_sess_r: 30 minutes _tb_t_ppg: 30 minutes abLdr: 3 hours abMbl: 3 hours br: 30 minutes cnx_roi: 1 month eng_mt.crossSessionsData.SessionsHistory: not defined eng_mt.numOfTimesMetricsSent: not defined eng_mt.scrollDepth: not defined eng_mt.sessionDepth: not defined eng_mt.sessionStartTime: not defined eng_mt.timeOnSite: not defined eng_mt.ver: not defined redirect_data: 1 month rng: 1 day roi_cookie: 1 month sessionid: 1 day t_gid: 1 year taboola global:local-storage-keys: not defined taboola global:lspb: not defined aboola global:tblci: not defined taboola global:user-id: not defined taboola_fp_td_user_id: 1 year taboola_select: 1 year taboola_session_id: duration of the session tb_click_param: 50 seconds tbl-exm-apperance: not defined bl-exm-history: not defined tbl-session-referrer: not defined tbl_rtus_id: not defined trc_cache: not defined trc_cache_by_placement: not defined trc_cookie_storage: 1 year |
Remarketing and behavioural targeting
This type of service allows this website and its partners to communicate, optimise and serve advertisements based on the User’s past use of this website
This activity is facilitated by tracking of Usage Data and the use of Tracking Tools to collect information that is then transferred to partners that manage remarketing and behavioural targeting activities.
Some services offer a remarketing option based on lists of email addresses.
Generally, services of this type offer the possibility to disable such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to disable interest-based advertisements in the section “How to disable interest-based advertising” in this document.
• Facebook Remarketing (Meta Platforms Ireland Limited)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. which links the activity of Website with the Facebook advertising network.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | Ireland – Privacy Policy – Opt Out. |
| Duration of archiving | _fbp: 3 months |
• Facebook Custom Audience (Meta Platforms Ireland Limited)
Facebook’s Custom Audience is a remarketing and behavioural targeting service provided by Meta Platforms Ireland Limited that links the activity of this website with Facebook’s advertising network.
Users can choose not to use Facebook’s Tracking Tools for ad customisation by visiting this opt-out page.
| Personal data processed | Usage Data and Tracking Tool |
|---|---|
| Place of processing | Ireland – Privacy Policy – Opt Out. |
| Duration of archiving | _fbp: 3 months |
4. How to manage preferences and give or withdraw consent
There are various ways to manage preferences related to the Tracking Tools and to give or withdraw consent where necessary:
Users can manage preferences relating to Tracking Tools directly through their device settings – for example, they can prevent the use or storage of Tracking Tools.
In addition, whenever the use of Tracking Tools is dependent on consent, Users may give or revoke such consent by setting their preferences within the cookie policy or updating such preferences via the tracking settings widget, if available.
It is also possible to remove previously saved Tracking Tools by means of special browser or device functions.
Other Tracking Tools stored in the local browser memory can be removed by deleting the browsing history.
As regards third-party Tracking Tools, Users may manage their preferences and revoke their consent by visiting the relevant opt-out link (if available), using the tools described in the third-party’s privacy policy or contacting the third party directly.
Users can, for example, find information on how to manage Cookies in some of the most popular browsers at the following addresses:
Users may also manage certain Mobile Application Tracking Tools by deactivating them through the appropriate device settings, such as mobile advertising settings or tracking settings in general (Users may consult their device settings to find the relevant one)
5. How to disable interest-based advertising
Notwithstanding the above, Users are informed of the possibility of making use of the information on YourOnlineChoices (EU), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. With these services it is possible to manage the tracking preferences of most advertising tools. The Controller therefore advises Users to use these resources in addition to the information provided herein.
The Digital Advertising Alliance also provides a called AppChoices that helps users control behavioural advertising on mobile applications.
6. Consequences of refusing consent
Users are free to decide whether or not to give consent. However, please note that the Tracking Tools allow this Website to provide a better experience and enhanced functionalities to Users (in line with the purposes outlined in this document). Therefore, without the User’s consent, the Data Controller may not be able to provide the relevant functions.
7. Rights of data subjects
Data subjects have the right to obtain from the Fondazione, in the cases provided for, access to their personal data and the rectification or deletion thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation
8. Right to complain
Data subjects who believe that the processing of their personal data carried out through this website is in breach of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority, as provided for by art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).