Information on the processing of personal data for website users pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

This information, provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), describes the methods and purposes of processing the personal data of users who visit the website.

The information provided on this page does not concern other sites, pages, or online services that may be accessible via hyperlinks published on this website.

Data Controller

The Data Controller is the ACCADEMIA delle BELLE ARTI di PALERMO, registered office at Palazzo Fernandez, Via Papireto 20, Palermo, VAT No.: 06713680822

Contacts

Switchboard: 091 580876

Email: ufficio.protocollo@abapa.education

PEC: direzioneaccademiapalermo@pec.it; accademiadipalermo@pec.it

Data Protection Officer (DPO)

Designation of the Data Protection Officer (DPO) (Article 37 of the GDPR).

The Data Protection Officer (DPO) can be reached at the following email address: dpo@abapa.education.

Types of personal data processed

"Personal data" means any information that could allow, directly or indirectly, the identification of the user. Following your visit to this website, the following personal data will be processed:

- BROWSING DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data that is then implicitly transmitted using internet communication protocols.

This category of data includes IP addresses, the domain names of the computers or devices used by users to connect to the site, the URI (Uniform Resource Identifier) ​​or URL (Uniform Resource Locator) addresses of the requested resources, the date and time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response, and other parameters relating to the user's operating system and IT environment. (See cookies policy.)

This data is collected automatically and exclusively for the purpose of enabling navigation on the website and may also be used anonymously for statistical purposes. The same data may also be acquired and used by judicial authorities to investigate crimes.

- DATA PROVIDED VOLUNTARILY BY THE USER
The user is free to provide their personal data by completing the appropriate forms on the site to send requests for information or other communications. Sending such messages involves the acquisition of the sender's contact information, which is necessary to respond, as well as all personal data included in the communications. Providing such data is therefore optional and voluntary. Failure to provide such data will make it impossible for the recipient to send the communication or respond to the user's communication.

Purpose of processing

The personal data described will be processed for the following purposes:
- Performance of institutional tasks;
- Compliance with legal obligations;
- Performance of services requested by the user.

The data collected will not be used in any way to profile users or track them.

Legal Basis for Processing

The processing of personal data is based on the following legal bases:
- the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller – Article 6, paragraph 1, letter e) of Regulation (EU) 2016/679;
- the fulfillment of legal obligations to which the Data Controller is subject – Article 6, paragraph 1, letter c) of Regulation (EU) 2016/679.

Processing Methods and Retention Period

Personal data will be processed using both automated methods, on electronic or magnetic media, and non-automated methods, on paper, in compliance with the principles and security of processing established by current legislation.

Personal data will be processed only for the time strictly necessary to achieve the indicated purposes, except for further retention for any need to investigate criminal offenses by judicial authorities.

Recipients of Data Communication

Personal data will be accessed only by internal personnel of the Data Controller's organization, specifically trained and authorized to process it. Personal data may be disclosed exclusively to companies/individuals responsible for website maintenance and management, designated, in accordance with Article 28 of Regulation (EU) 2016/679, as Data Processors.

Data Subject Rights

Data subjects have the right to obtain from the Data Controller, in the cases provided for and according to the methods indicated, access to their personal data and the rectification or erasure of such data, restriction of processing concerning them, or to object to such processing (Articles 15 et seq. of the Regulation).

Requests to exercise these rights may be sent to the Data Controller at the contact details above, specifying the subject of the request and the right being exercised.

Complaint

Data subjects who believe that the processing of their personal data through this website violates the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority, in accordance with Article 77 of the Regulation, which can be contacted at: www.garanteprivacy.it.

Cookies Policy – ​​Information on the Processing of Personal Data pursuant to Articles 15 et seq. 13-14 EU Regulation 2016/679

Data Subjects: Website visitors.

ACCADEMIA di FELLE ARTI di PALERMO, as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter "GDPR"), hereby informs you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set forth therein.

Purpose and legal basis of the processing: In particular, your data will be used for the following purposes related to the execution of measures related to contractual or pre-contractual obligations:
- Technical and functional access to the Site; no data is retained after the browser is closed;
- Advanced navigation purposes or personalized content management;
- Statistics and navigation and user analysis purposes.

Processing methods. Your personal data may be processed in the following ways:
- by means of electronic calculators using software systems managed by third parties;
- by means of electronic calculators using software systems managed or programmed directly;
- temporary processing in anonymous form.

All processing is carried out in compliance with the procedures set forth in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures required.

Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:
- IT service operators.

Dissemination: Your personal data will not be disseminated in any way.

Your personal data may also be transferred, limited to the purposes indicated above, to the following countries:
- EU countries.

Retention Period. We inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 13 of the GDPR, the processing of your personal data will be carried out in accordance with the principles of lawfulness, purpose limitation, and data minimization. 5 of the GDPR, the retention period for your personal data is:
- established for a period of time no longer than is necessary to complete the services provided/used;
- for a period of time no longer than is necessary to achieve the purposes for which they were collected and processed, and in any case in compliance with the timeframes established by law for the remaining categories of data.

Cookie management: If you have any doubts or concerns regarding the use of cookies, you can always prevent them from being set and read, for example by changing your browser's privacy settings to block certain types of cookies.

Since each browser—and often different versions of the same browser—is significantly different, if you prefer to manage your browser preferences yourself, you can find detailed information on the necessary procedure in your browser's help section. For an overview of the most common browser settings, you can visit www.cookiepedia.co.uk.

Advertising companies also allow you to opt out of receiving targeted ads if you wish. This does not prevent the setting of cookies, but it does interrupt the use and collection of certain data by these companies.

Data Controller

The Data Controller is the ACCADEMIA delle BELLE ARTI di PALERMO, registered office at Palazzo Fernandez, Via Papireto 20, Palermo, VAT No.: 06713680822

Data Protection Officer (DPO)

The Data Protection Officer (DPO) can be reached at the following email address: dpo@abapa.education.

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, regardless of their being already recorded, communication of such data in an intelligible form, and the right to lodge a complaint with the Data Controller.

2. The data subject has the right to obtain information on:
- the source of the personal data;
- the purposes and methods of the processing;
- the logic applied in the event of processing carried out with the aid of electronic means;
- the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2;
- the persons or categories of persons to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing.

3. The interested party has the right to obtain:
- updating, rectification, or, where interested therein, integration of data;
- the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
- certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such disclosure proves impossible or involves a manifestly disproportionate effort compared with the right being protected;
- data portability.

4. The interested party has the right to object, in whole or in part:
- for legitimate reasons, to the processing of personal data concerning him or her, even if pertinent to the purpose of collection;
- to the processing of personal data concerning him or her for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications.

Update date 11/05/2026