EXTENDED PRIVACY POLICY ON THE USE OF COOKIES

Home / EXTENDED PRIVACY POLICY ON THE USE OF COOKIES

 

Last updated: 18 August 2026

This Cookie Policy describes the use of cookies and other tracking technologies through the website www.museonicolis.com (hereinafter the “Website”).

This information is provided pursuant to Regulation (EU) 2016/679 (“GDPR”), Article 122 of Italian Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 (“Italian Privacy Code”), and the Guidelines on cookies and other tracking technologies adopted by the Italian Data Protection Authority on 10 June 2021.

1. Data Controller

The Data Controller is:

Associazione Museo Nicolis
Registered office: Via Lussemburgo 9, Villafranca di Verona (VR), Italy
VAT number: 03062140235
Email: privacy@museonicolis.com

For information regarding the processing of personal data or to exercise the rights provided by applicable data protection legislation, users may contact the Data Controller using the details indicated above.

2. What cookies are

Cookies are small text files that websites may send to and store on the device used by the user for browsing, such as a computer, smartphone or tablet.

Cookies may allow the Website, for example, to:

  • ensure the proper operation of pages and services;
  • retain certain settings selected by the user;
  • protect forms, payments and other functions against fraudulent use;
  • collect statistical information about the use of the Website;
  • measure the effectiveness of content and campaigns;
  • provide content or promotional communications consistent with the user’s interests.

During browsing, technologies other than cookies may also be used, including pixels, tags, identifiers, scripts, browser local storage and similar technologies. In this Cookie Policy, the term “cookies” also includes these tracking technologies where applicable.

Cookies may be:

  • first-party cookies, when installed and managed directly by the Website;
  • third-party cookies, when installed or managed by parties other than the Data Controller through services available on the Website;
  • session cookies, when deleted after the browser is closed;
  • persistent cookies, when stored for a specified period.

3. Categories of cookies used

Necessary cookies

Necessary cookies enable the technical operation of the Website and the provision of services requested by the user.

They may be used, for example, to:

  • allow browsing and the correct loading of pages;
  • maintain the user’s session;
  • store the preferences expressed through the cookie management panel;
  • protect the Website, forms and transactions against fraud, spam or automated use;
  • provide booking, payment or security functions expressly requested by the user.

The use of strictly necessary cookies does not require the user’s consent, within the limits established by Article 122 of the Italian Privacy Code. Disabling these cookies through the browser settings may affect the operation of the Website or certain services.

Preference cookies

Preference cookies allow the Website to remember information that changes the behaviour or appearance of pages, such as language, display settings or other preferences selected by the user.

These cookies are used only after consent has been given, unless they are strictly necessary to provide a function expressly requested by the user.

Statistical cookies

Statistical cookies help us understand how users interact with the Website by collecting information such as pages visited, duration of visits, browsing paths, devices used and possible errors.

The information collected is used to measure the use of the Website and improve its content, performance and functionality.

Statistical cookies are used on the basis of the user’s consent. Consent is not required only where they are configured and used under conditions that allow them to be treated as technical cookies in accordance with the requirements of the Italian Data Protection Authority.

Marketing cookies

Marketing cookies and other profiling technologies may be used to:

  • recognise a user or device during browsing;
  • create profiles relating to interests and behaviour;
  • personalise content and advertising messages;
  • measure the effectiveness of promotional campaigns;
  • limit the repetition of advertisements;
  • link browsing activities on the Website with activities carried out on third-party websites, social networks or services.

These technologies may involve the communication of data to advertising service providers, social networks, video platforms and other technology partners.

Marketing cookies are used exclusively on the basis of the user’s consent.

4. How consent is obtained

When users first access the Website, a banner is displayed through which they may:

  • reject non-necessary cookies;
  • accept only selected categories;
  • accept all cookies;
  • review details regarding categories, cookies and providers;
  • close the banner while maintaining the default settings, which do not allow the use of cookies other than necessary cookies.

Merely continuing to browse, scrolling through a page or interacting with content does not constitute consent.

The preferences expressed by the user are stored through a technical cookie called “CookieConsent”, solely for the purpose of recording and respecting the user’s choice.

The banner may be displayed again when:

  • the processing conditions or providers used change significantly;
  • it is not possible to determine whether a choice has already been stored on the device;
  • the user deletes cookies from their browser;
  • at least six months have passed since the banner was last displayed.

5. Changing and withdrawing consent

Users may change or withdraw their consent at any time using the cookie settings icon available on the Website.

Withdrawing consent is simple and accessible through methods similar to those used to provide it.

Withdrawal does not affect the lawfulness of any processing carried out before consent was withdrawn. After preferences have been changed, the Website will apply the new choices to subsequent processing activities.

Users may also delete cookies already stored on their device through their browser settings. Deleting cookies may cause the banner to be displayed again on the next visit.

6. Third-party cookies and services

The Website may use services provided by third parties for purposes including:

  • consent management;
  • security, spam prevention and form protection;
  • statistical analysis and visitor measurement;
  • management of video, social and multimedia content;
  • booking and ticket purchasing;
  • payment management;
  • advertising campaign measurement;
  • personalisation of content and commercial communications;
  • newsletter and communication management;
  • technical and functional improvement of the Website.

When the user gives consent, certain third-party providers may combine the information collected through the Website with other data already available to them, provided through their services or collected while the user browses other websites.

Depending on the service, third parties may act as data processors on behalf of the Data Controller or as independent data controllers.

Detailed information about individual providers and links to their respective privacy notices are included in the dynamic Cookie Declaration available on this page.

7. Recipients of personal data

Data collected through cookies and tracking technologies may be processed by:

  • personnel authorised by the Data Controller;
  • information technology, hosting and maintenance providers;
  • consent management platform providers;
  • security and fraud prevention service providers;
  • statistical and analytics service providers;
  • social media, video and advertising platforms;
  • booking, ticketing and payment service providers;
  • communication and newsletter service providers;
  • consultants and other parties assisting the Data Controller in complying with legal obligations;
  • public authorities where disclosure is required by law.

Where required, parties processing personal data on behalf of the Data Controller are appointed as data processors pursuant to Article 28 of the GDPR.

8. Transfers of personal data outside the European Economic Area

Certain providers may process personal data in countries outside the European Economic Area or allow access to personal data from such countries.

Where an international transfer of personal data takes place, it must be carried out on the basis of one of the safeguards provided for by Articles 44 and following of the GDPR, including:

  • an adequacy decision adopted by the European Commission;
  • the EU–US Data Privacy Framework, limited to US recipients holding a valid certification;
  • the Standard Contractual Clauses approved by the European Commission;
  • other appropriate safeguards permitted by applicable legislation.

Information regarding the places where data is processed and the safeguards adopted by individual providers is available in their respective privacy notices, which can be accessed through the dynamic Cookie Declaration.

Further information may be requested from the Data Controller by writing to privacy@museonicolis.com.

9. Retention periods

The duration of cookies varies according to their purpose and may correspond to:

  • the individual browsing session;
  • a specified number of days or months;
  • a longer period where necessary to store preferences or provide a particular service.

The maximum storage period of each cookie or tracking technology is indicated in the dynamic Cookie Declaration available on this page.

The stated expiry period represents the maximum period for which a cookie may remain on the user’s device. Users may delete cookies at any time through their browser settings.

10. Data subject rights

In the circumstances provided for by the GDPR, users may exercise the following rights:

  • obtain confirmation as to whether personal data concerning them is being processed;
  • access their personal data;
  • request the rectification or updating of personal data;
  • request the erasure of personal data;
  • request the restriction of processing;
  • object to processing;
  • receive personal data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller;
  • withdraw consent previously given at any time;
  • lodge a complaint with the competent data protection authority.

Requests may be sent to:

Associazione Museo Nicolis
Email: privacy@museonicolis.com

Users may lodge a complaint with the Italian Data Protection Authority through its website: www.garanteprivacy.it.

11. Detailed list of cookies

The declaration below is generated and updated through the Cookiebot consent management platform.

For each cookie or tracking technology, the following information is provided where available:

  • name;
  • provider;
  • purpose;
  • category;
  • storage duration;
  • technical type;
  • link to the provider’s privacy notice.

Dynamic Cookie Declaration provided by Cookiebot

12. Changes to this Cookie Policy

The Data Controller may amend this Cookie Policy to reflect legal, technical or organisational changes or the introduction, modification or removal of services and providers.

Where significant changes affect the purposes of processing, the categories of cookies used or the third parties involved, the banner may be displayed again to provide updated information and, where necessary, obtain new consent.

The date of the latest update is indicated at the beginning of this page.