Access to the Museum implies the signing of the following regulations:
visitors are reminded that it is not permitted to take photographs and video footage for commercial purposes without authorisation.

Please note that the Museum is open from Monday to Friday, from 9 a.m. to 6 p.m., last admission 5.30 p.m.

Pursuant to Articles 13 and 14 of EU Regulation no. 679/2016 of 27.04.2016 "General Data Protection Regulation" (hereinafter "Regulation") and Legislative Decree no. 196/2003 "Personal Data Protection Code", as amended by Legislative Decree no. 101 of 10.08.2018, containing provisions for the adaptation of the national system to the European Regulation.

DATA CONTROLLER:
University of Rome "La Sapienza"; in the person of the legal representative pro tempore
Contact details:
E-mail: rettoresapienza@uniroma1.it
PEC: protocollosapienza@cert.uniroma1.it

DATA PROTECTION OFFICER:
Contact details:
E -mail: responsabileprotezionedati@uniroma1.it
PEC: rpd@cert.uniroma1.it

LEGAL BASIS OF PROCESSING
Art. 6(e), of the European Regulation No. 679/2016: the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

PURPOSE AND DESCRIPTION OF PROCESSING:
The data is processed, in compliance with the current regulatory framework, by the Employers, the Security Office and the Occupational Medicine Centre in order to:
- protect the health and safety of workers in the work environment;
- keep the risk of spreading infectious diseases, and COVID-19 in particular, under control;
- collect the information needed to manage the COVID-19 risk in the workplace;
- transfer to the National Health Service, exclusively following a written request, all data relating to potential contacts at risk of contagion that have occurred at Sapienza.
The data shall be used exclusively for the institutional purposes envisaged, within the framework of the provisions of laws, regulations or contractual rules.

NATURE OF PERSONAL DATA STRICTLY NECESSARY TO PURSUE THE DESCRIBED PURPOSE
Common personal data: first name, surname
Special categories of personal data: health-related data (body temperature, presence of flu symptoms, in particular, cough, cold, sore throat, burning eyes, breathing difficulties).

ARCHIVING AND STORAGE
The data will be stored (in paper and digital format) for as long as necessary to achieve the above-mentioned purposes, in accordance with national and European legislation (General Data Protection Regulation (EU)).

NOTES ON THE RIGHTS OF THE INTERESTED PARTY
Please note that the data subject may request from the data controller, under the conditions, access to personal data pursuant to art. 15 of the Regulation, rectification of the same pursuant to art. 16 of the Regulation, cancellation of the same pursuant to art. 17 of the Regulations, the deletion of the data (where this does not conflict with current legislation on the storage of the data itself and with the need to protect, in the event of legal proceedings, the University and the professionals who have processed the data) or the limitation of processing pursuant to art. 18 of the Regulations, or you may object to their processing pursuant to art. 21 of the Regulations, in addition to being able to exercise the right to data portability pursuant to art. 20 of the Regulations.
In the event of a breach of the provisions of the Regulations, the data subject may lodge a complaint with the Garante for the protection of personal data, in accordance with current legislation.

CATEGORIES OF INTERESTED PARTIES
Suppliers, users and students.

CATEGORIES OF RECIPIENTS
The data may be communicated to third parties, in accordance with national and European legislation in force.
In particular to internal offices, always for the same purposes as those listed above, and possibly to the National Health Service, exclusively following a written request.

COMMUNICATION AND TRANSFER ABROAD
Data shall not be communicated abroad.