INFORMATION ON THE PROCESSING OF PERSONAL DATA

We wish to provide you with the following information about the processing of your personal data (hereafter referred to as "Data") collected through your registration on the website https://biglietti.liturgiepontificie.va  (hereafter referred to as the "Portal").

1. DATA CONTROLLER

The Data Controller is the Office for the Liturgical Celebrations of the Supreme Pontiff, (hereinafter also referred to as the "Office") - Apostolic Palace, Vatican City

2. PERSONAL DATA SUBJECT TO PROCESSING

The Data subject to processing are those collected at the time of your registration on the Portal.

The following are processed: personal identification data of your person (name and surname, photograph, residence and domicile), contact data (telephone number and e-mail address), internet browsing and operations on internet systems.

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

The Data collected are those that you directly and voluntarily provide when registering on the Portal.

The legal basis that legitimizes the processing is the performance of tasks of public interest or related to the exercise of public authority, related to the provision of the requested service.

4. PURPOSES AND METHODS OF PROCESSING

The processing of your Data has the following purposes:

1. to allow navigation and consultation of the Portal and its contents;
2. to allow the provision of the requested service (booking for concelebration with the Holy Father);
3. to ensure the storage, security and safekeeping of the Data;
4. to comply with legal obligations;
5. to ensure security and prevent fraudulent conduct.

The Office will not process the information you provide for purposes other than those explicitly stated above.

The Data Controller will not process your Data for purposes other than those indicated above.

The processing of your Data will take place in electronic and/or paper form, with manual and/or telematic tools, for the time strictly necessary to achieve, exclusively, the purposes indicated in this information sheet and, in any case, in such a way as to guarantee the integrity, confidentiality and security of the same, through the adoption of appropriate technical and organizational measures.

The Owner will not make automated decisions based on the Data provided.

 

 

5. RECIPIENTS OF THE DATA

Your Data may be processed, within the limits of the purposes and in the manner indicated above, by subjects expressly authorized by the Data Controller (the Office staff or appointed third parties) to process your Data, where necessary, for the performance of activities strictly related to the provision of the services for which the Data are collected and indicated in this policy.

Your Data may be communicated by the Data Controller, within the limits and in the manner indicated above, to other public and/or private entities solely by virtue of legal provisions, regulations and/or related orders of the Judicial Authority, or in fulfillment of a contractual or pre-contractual obligation, in relation to a contractual relationship to which you are a party.

With reference to the subjects authorized to process the above, your Data may also be transferred to recipients based in foreign countries (within the limits of the purposes and in the manner described in this policy), who are bound, in any case, to guaranteeing the protection, integrity and confidentiality of your Data by adopting all appropriate technical and organizational measures.

6. RETENTION PERIOD

Your Data will be stored at the headquarters of the Data Controller and, if necessary, at the offices and/or offices of the other subjects indicated in the previous point.

Your Data may be stored for a period not exceeding the achievement of the purposes set out in this policy.

The Data Controller may be obliged to retain your Personal Data for a longer period, for archiving purposes in the public interest (by way of example but not limited to: legal obligation, order of the legal authorities), for scientific or historical research.

7. YOUR RIGHTS

If the conditions are met, you may exercise the following rights:

1. ask for confirmation as to whether or not your Data is being processed;
2. obtain information about the purposes of the processing, the categories of Data processed, the recipients or categories of recipients to whom your Data have been or will be communicated and, when possible, the retention period;
3. obtain the rectification of your Data;
4. obtain the deletion of your Data;
5. obtain the portability of your Data, i.e. receive them from the Data Controller in a structured, commonly used and readable format, by an automatic device, and transmit them to another Data Controller, without hindrance;
6. object, at any time, to the processing of your Data;
7. obtain, where the conditions are met, the limitation of the Processing of your Data.

You may exercise the aforementioned rights by means of a written request, on paper or electronically, addressed to the Data Controller, which can be reached at the following email address: biglietti@celebra.va.