Privacy policy

Privacy Policy

Premise

This notice, provided pursuant to and for the purposes of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 (Privacy Code), is intended for all individuals who visit and interact with this website called www.fondazioneumbertoeco.org (Site).

This page describes the methods for managing the Site with reference to the processing of personal data of users who consult it and the use of cookies employed by the Site.

This notice applies exclusively to the Site and not to other web sites owned by the Foundation or by third parties that Users may access through any links contained within the Site.

1. Data Controller

Following consultation of this site, data relating to identified or identifiable persons may be processed.

The "controller" of such processing is the Fondazione Umberto Eco ETS (Tax Code 97967830155; PEC fondazioneumbertoecoets@legalmail.it; Foundation), with registered office in Milan, Piazza Castello no. 13, registered in the RUNTS under decree RG no. 2757/2024, represented by the acting vice-president pro tempore Dr. Carlotta Eco, in her capacity as data controller, who informs the users of the Site (Users) that their personal data, collected through the Site, will be processed according to the methods and for the purposes described below.

2. Types of processed data

The IT systems, cookie technology, and software procedures responsible for the functioning of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols and, consequently, the Foundation will process the following categories of personal data of Users who browse and interact with the Site's web services.

This information is not collected to be associated with identified individuals, but by its nature could, through processing and association with data held by third parties, allow Users to be identified.

This category of data includes, for example, IP addresses or domain names of the computers used by Users, domain names and addresses of web sites from which the User accessed the Site, browser type, date and time of the visit, visited pages, the operating system used by Users, and the Users' IT environment.

Among the processed data are also those collected through the Google Analytics service (such as, by way of example: number of visits, session duration, pages viewed, geographic area of origin) and data resulting from the interaction with video content embedded through the YouTube platform.

Such data is collected also in anonymous form and used only for statistical and security purposes. It is also collected using cookie technology, that is, text files and numbers installed during navigation on the Site in the memory of the device (PC, smartphone, or tablet) connected to the Internet.

For further information on the cookies used on the Site (including third-party cookies from Google and YouTube), Users are invited to consult the Cookie Notice.

The optional, explicit, and voluntary sending of emails to the addresses indicated on this site results in the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Summarised information notices will progressively be provided or displayed on the Site pages prepared for specific services upon request.

3. Legal basis and purpose of data processing

The data collected during browsing will be processed, without requiring the User's prior consent, for the purposes set out in points (a), (b), (c), (d). The processing of data for the purposes of statistical analysis and traffic optimisation through Google Analytics, as well as for the fruition of multimedia content (YouTube), takes place subject to the User's consent expressed through the cookie banner, pursuant to Art. 6, par. 1, letter a) of the GDPR.

The data will be processed for:

1. to allow Users to navigate the Site. The legal basis for this processing is the legitimate interest of the Foundation to: (i) inform the user, through the site content, about the Foundation's activities; (ii) improve the quality and structure of the site; (iii) create new services, functionalities, and/or features (Art. 6, par. 1, letter f GDPR). The processing is also lawful under Art. 122, para. 1, of the Privacy Code;
2. to carry out the maintenance and technical support necessary to ensure the proper functioning of the Site and the services connected to it. The legal basis is the legitimate interest of the Foundation to maintain efficient operation of the website (Art. 6, par. 1, letter f GDPR);
3. to allow the Foundation to exercise its rights in court and suppress unlawful conduct. The legal basis is the legitimate interest of the Foundation to defend or exercise its own right or that of a third party (Art. 6, par. 1, letter f GDPR);
4. to ensure the security of the Site and prevent fraud or other offences committed through its use;
5. to analyse traffic and the ways in which Users use the Site, through the Google Analytics service, in order to improve the performance and content thereof;
6. to enable the display of video content hosted on external platforms (YouTube) directly within the pages of the Site.

4. Nature of data provision

The provision of data occurs implicitly through the mere navigation of the Site by Users. The provision of data for statistical purposes (Google Analytics) and for video viewing (YouTube) is optional and based on the User's consent, which may be revoked at any time through the Cookie Notice settings.

5. Methods of data processing

User data will be processed in compliance with the principles of lawfulness, correctness, and transparency; collected for the legitimate purposes described above; adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

User data is processed using automated, IT, or telematic tools, following organisational procedures and logic strictly related to the indicated purposes.

6. Data disclosure

Even without the express consent of the User, the Foundation may disclose User data for the purposes set out in § 2 above to supervisory and/or control bodies of the Foundation, judicial authorities, and all other parties for whom disclosure is required by law to carry out said purposes, acting as autonomous data controllers.

Furthermore, the Foundation may entrust certain data processing operations relating to the purposes set out in § 2 to third parties (including: Google Ireland Limited, as provider of Google Analytics and YouTube services), specifically appointed, where necessary, as data processors, including but not limited to: technical service providers for the Site; hosting providers offering hosting services for the Site; entities involved in the maintenance and management of the Site; communication agencies involved in market research activities potentially requested by the Foundation using Users' browsing data in anonymous form. User data will not be transferred to third parties other than those indicated in this notice, nor will it be disseminated to the public.

The Site also contains links redirecting to other web sites over which the Foundation has no control and is therefore not responsible for the processing of personal data or the privacy practices of such web sites, nor does it have access to personal data of visitors to those sites.

Users are therefore invited to consult the privacy notices of those sites, whose owners are the sole data controllers responsible for processing the personal data of their users, with the Foundation remaining unrelated to such activities.

The Site also contains third-party services (Google Analytics and YouTube). For further information, Users are invited to consult the privacy notices of the respective sites:

• Google/YouTube: https://policies.google.com/privacy

7. User rights

Users may exercise the rights provided for in Articles 15–22 of the GDPR, including: access to personal data, rectification or deletion, restriction or objection to processing, and filing a complaint with the Data Protection Authority. To exercise these rights, Users may contact the Foundation at the following addresses: PEO info@fondazioneumbertoeco.org; PEC fondazioneumbertoecoets@legalmail.it.

8. Transfer of data outside the EU

The use of Google Analytics and YouTube services may involve the transfer of Users' personal data to the United States. Such transfer will take place in accordance with the "Data Privacy Framework" (or other adequate guarantees pursuant to Articles 44 et seq. of the GDPR), Google being a certified company that guarantees a level of data protection equivalent to that of the European Union. Any transfer of the User's personal data to non-EU countries may take place only under the terms and guarantees provided by the GDPR and/or the Privacy Code.

9. Data retention period

Personal data will be retained and processed for the entire duration of browsing and, after its termination for any reason, for no longer than 6 months, except where the law provides for a different retention period.

At the end of this 6-month period, personal data will be deleted unless there are further legitimate interests of the Foundation and/or legal obligations that require their further retention, after minimisation.

10. Data Controller and Data Protection Officer

The Data Controller for the personal data collected through this Site is Dr. Carlotta Eco, who may be contacted:

• via email: info@fondazioneumbertoeco.org;
• or by post, at the following address: Fondazione Umberto Eco ETS, 20121 Milan, Piazza Castello no. 13.

11. Updates to this notice

This privacy notice may be updated in the event of regulatory or technical changes.

* * *

Extended Cookie Notice

Premise

This notice is provided, with reference to the site https://fondazioneumbertoeco.org/ (Site), by the Fondazione Umberto Eco ETS (Tax Code: 97967830155), registered in the RUNTS under decree RG no. 2757/2024, represented by the acting vice-president pro tempore Dr. Carlotta Eco, with registered office in Milan (Italy), Piazza Castello, 13 (20121), email: info@fondazioneumbertoeco.org, PEC: fondazioneumbertoecoets@legalmail.it.

What cookies are and what they are used for

A cookie is a text file that a web site visited by the user sends to their terminal (computer, mobile device such as a smartphone or tablet), where it is stored so that it can then be sent back to that site on the occasion of a subsequent visit.

Cookies are distinguished from each other:

• Based on the party that installs them: depending on whether they are installed by the same operator of the visited site (so-called "first-party cookies") or by a different party (so-called "third-party cookies").
• Based on their purpose: Technical cookies: enable better navigation or provide a service requested by the user. They do not require prior consent; Analytical cookies: used to collect aggregate information on the number of users and how they visit the site; Profiling cookies: enable monitoring of the user's browsing, including for the purpose of sending advertising and/or offering services in line with their preferences. They require prior consent.

The Site uses first-party technical cookies, as well as third-party analytical and profiling cookies (Google Analytics and YouTube) which require consent for their use.

1. Methods for expressing consent to cookies

1.1. On your first visit to the Site, you may accept all cookies by clicking "Accept all" on the banner, or reject them by clicking the "X" or "Reject" (keeping only the technical ones active), or customise your choices through the dedicated area.

1.2. If you access this notice from the banner without having made a choice, you may give or deny consent through the links indicated in the list at point 2.

1.3. You may revoke or modify your consent at any time through the "Cookie Settings" link in the footer of the Site.

1.4. In any case, cookies can be managed through browser settings:

• Google Chrome
• Mozilla Firefox
• Internet Explorer / Edge
• Safari

2. Cookies used by the Site

• Technical cookies — Provider: Fondazione Umberto Eco — Purpose: Saving cookie consent preferences — Expiry: 6/12 months — Consent: Not required (necessary cookie)
• Analytical cookies — Provider: Google Analytics (Google Ireland Ltd.) — Purpose: Traffic tracking and navigation statistics (anonymised IP) — Expiry: Up to 2 years — Notice: Google Privacy Policy
• Profiling cookies — Provider: YouTube (Google Ireland Ltd.) — Purpose: Display of embedded videos and tracking of video preferences — Expiry: Variable — Notice: Google Privacy Policy

3. Information provided by Fondazione Umberto Eco pursuant to Art. 13 of the GDPR

Fondazione Umberto Eco, in its capacity as data controller, specifies the following:

• Data is collected only for the purposes and for the duration indicated in the list above and is processed electronically.
• The use of technical cookies does not require consent as they are necessary for the functioning of the Site. Disabling them could compromise browsing.
• The installation of Google Analytics and YouTube content takes place only with the user's prior consent expressed through the banner.
• Data collected through first-party cookies may be disclosed to parties acting on behalf of Fondazione Umberto Eco in their capacity as processors or persons authorised to process data.
• Data subject rights: At any time you may exercise the rights provided for in Art. 7 of Regulation (EU) 2016/679 (access, rectification, erasure, restriction, objection) by writing to info@fondazioneumbertoeco.org.

With regard to third-party cookies (Google, YouTube), the purposes and processing logic are determined by the respective providers. Fondazione Umberto Eco is committed to supporting the user in exercising the right to deny or delete such cookies from the browser.

Last updated: February 2026