Data Controller
Accademia di Belle Arti di Brera – Via Brera 28, 20121 Milan, Italy
Data Protection Officer (DPO): Bruno Aliprandi – dpo@pec.accademiadibrera.milano.it
Data We Process
- Technical browsing data (IP, logs, browser information).
- Data submitted via forms (name, email, institution).
- Metadata and digital cultural/research materials provided by partner institutions.
- Technical cookies and third-party cookies for embedded content (e.g., video services).
Purposes & Legal Bases
- Website operation, security, and performance (legitimate interest).
- Management and dissemination of cultural and research content (public interest).
- Responding to user requests (pre-contractual measures).
- Anonymous statistics (legitimate interest).
- Consent only when required for optional features.
Data Retention
- Technical logs: up to 12 months.
- Contact data: retained only as needed to respond.
- Cultural/research materials: preserved permanently for archival and public-interest purposes.
Data Sharing
- IARTNET partner institutions.
- Technical service providers and public authorities when required by law.
- No sale of personal data.
User Rights
Access, rectification, erasure (when allowed), restriction, objection.
Requests: dpo@pec.accademiadibrera.milano.it
Transfers Outside the EU
Possible only with adequate safeguards (SCCs, adequacy decisions).
Policy Updates
Any updates will be published on this page.