Info & Tickets

PRIVACY POLICY

(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)

1. Data Controller

The Data Controller is:

Museo del Giocattolo e di Pinocchio
Via dell’Oriuolo 47/r
50122 Florence (Italy)
Email: info@museodelgiocattolo.it
Phone: +39 3290647706

The Data Controller is responsible for the protection and processing of personal data collected through this website.

2. Types of Data Collected

The website may collect the following categories of personal data:

Data voluntarily provided by the user

  • First and last name

  • Email address

  • Phone number

  • Messages sent via contact forms

  • Information provided for school visits or group requests

Browsing data

The website’s IT systems automatically collect certain technical data, including:

  • IP address

  • Browser type

  • Operating system

  • Access time

  • Pages visited

Such data are used exclusively for statistical and security purposes.

3. Purpose of Processing

Personal data are processed for the following purposes:

  • Responding to information requests

  • Managing school visit or group requests

  • Providing assistance via email or phone

  • Ensuring proper website operation

  • Complying with legal obligations

Data are processed in accordance with the principles of lawfulness, fairness and transparency.

4. Legal Basis for Processing

Processing is based on:

  • The data subject’s consent (for requests submitted via contact forms or email)

  • Pre-contractual measures requested by the user

  • Compliance with legal obligations

5. Methods of Processing

Data are processed using electronic and/or paper-based tools, with appropriate security measures in place to prevent unauthorized access, disclosure or misuse.

6. Data Retention

Personal data will be retained:

  • For the time necessary to respond to the request

  • For any legal obligations

  • For a maximum period of 24 months for internal organizational purposes, unless deletion is requested

7. Disclosure to Third Parties

Data may be shared with:

  • Technical service providers (hosting, website maintenance)

  • Email service providers

  • Analytics services (e.g., Google Analytics, if active)

Such parties act as Data Processors.

Personal data will not be sold or publicly disclosed.

8. Google Maps

The website may embed interactive maps via Google Maps.
Use of this service may involve data processing by Google in accordance with its own privacy policy.

9. WhatsApp

If users contact the Museum via WhatsApp, data processing will occur in accordance with WhatsApp’s privacy policy and terms of service.

10. Data Subject Rights

Data subjects may exercise their rights under Articles 15–22 of the GDPR at any time, including:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to object

  • Right to data portability

Requests may be sent to:
info@museodelgiocattolo.it

11. Changes to this Policy

This Privacy Policy may be updated from time to time.
Users are encouraged to review this page periodically.

Last updated: 26/02/2026