Information on the processing of personal data

(pursuant to Art. 13 of Regulation (EU) 2016/679)

As required by Regulation (EU) 2016/679, this information notice describes how personal data provided to the portal Ancestors Portal – The Archives for the Genealogical Research for registration in the User Area will be processed.

1. Data controller

The data controller is the Ministry of Culture, via del Collegio Romano 27, 00186 – Rome, Public Relations Office Telephone: 06 67235338 – 06 67235339 – 06 67235340

PEO: urp@cultura.gov.it.

by Ministerial Decree 147/2019, including the General Directorate of Archives tel. 06 672361.

PEO: dg-a@cultura.gov.it PEC:dg-a@pec.cultura.gov.it

and the Central Institute for Archives (ICAR) tel. 06 5190976

PEO: ic-a@cultura.gov.it PEC: ic-a@pec.cultura.gov.it

2. Data Protection Officers

The Data Protection Officer for the Ministry of Culture can be contacted at the following numbers:

tel. 06 67232494

PEO: rpd@cultura.gov.it PEC: rpd@pec.cultura.gov.it

3. Purpose of processing

The General Directorate for Archives and the Central Institute for Archives, which jointly manage the Ancestors Portal – The Archives for the Genealogical Research – within the user area of the Portal, use personal data (personal and contact details: first name, surname, date and place of birth, nationality, gender, profession, Institute of origin, email) for the purpose of

  • identify registered users;
  • track the activities of registered users, within the User Area.

It should be noted that gender identification is necessary in order to construct the Italian tax code.

4. Methods of processing

Pursuant to Art. 5 of G.D.P.R. 2016/679, subject to your free and informed consent, your personal data will be retained for three years and in any case no longer than is strictly necessary to achieve the purposes for which they are collected and processed within the Ancestors Portal – The Archives for the Genealogical Research. The personal profile created within the User Area, if not used, will be deactivated after one year: the relevant personal data will be retained for three years.

The processing of personal data will in any case be governed by the principles of proportionality and necessity, whereby no personal data will be processed or collected that is not necessary for the principle of fairness and transparency, whereby the data subjects will always be informed of the processing carried out, and will take place in compliance with adequate security measures.

5. Scope of communication and dissemination

The personal data collected, including those falling within the category of sensitive data, will not be disseminated or communicated and will be available only to the staff of the General Directorate for Archives and the Central Institute for Archives, as well as to consultants or collaborators involved in the management of the Portal, who, like internal staff, are bound by confidentiality obligations. Personal data will not be provided to third parties.

6. Rights of the data subject

In relation to the data subject to processing as set out in this information notice, the data subject has the right at any time to:

  • Access (Art. 15 EU Regulation No. 2016/679);
  • Corrigendum (Art. 16 EU Regulation No. 2016/679);
  • Cancellation (Art. 17 EU Regulation No. 2016/679);
  • Limitation (Art. 18 EU Regulation No. 2016/679);
  • Objection to processing (Art. 21 EU Regulation No. 2016/679);
  • Withdrawal of consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal (Art. 7(3) EU Regulation 2016/679).

In order to exercise these rights, you may contact the data controller under Art. 1.

7. Right to lodge a complaint

Data subjects who consider that the General Directorate for Archives and the Central Institute for Archives are processing personal data concerning them in breach of the provisions of Regulation (EU) 2016/679 have the right to lodge a complaint with the Garante per la protezione dei dati personali, as provided for in Art. 77 of the Regulation, or to bring an action before the courts (Art. 79). Garante per la protezione dei dati personali, Ufficio relazioni con il pubblico (URP) Piazza Venezia n. 11 – 00187 Roma, Tel: 06 696772917 PEO: urp@gpdp.it