MUSEO CAPPELLA SANSEVERO s.r.l., Tax Code No. and VAT Registration No. 07055380633, with registered office in Naples at Via Francesco De Sanctis 19 (hereinafter, “DATA CONTROLLER”), in its capacity as Data Controller, informs you, pursuant to Art. 13 of European Regulation 2016/679 on data processing (hereinafter, “GDPR”), that your data will be processed in the manner and for the purposes set out below.

In order to protect personal data, Museo Cappella Sansevero s.r.l. provides its customers with information regarding the data subject, the reasons for the processing, how the data is processed, access to the data, the nature of the data processed, the Data Controller, the Data Supervisor, communicating and disseminating the data, and the rights of data subjects.

ART. 1 – Processing personal data

Pursuant to European Regulation 2016/679 on the protection of personal data, Museo Cappella Sansevero s.r.l. ensures compliance with the regulations on the protection of personal data, which are used solely for customer relations and will not be transferred to third parties.

ART. 2 – The Data Controller

The Data Controller of the collected data is MUSEO CAPPELLA SANSEVERO s.r.l., Tax Code No. and VAT Registration No. 07055380633, with registered office in Via Francesco De Sanctis 19 – 80134 Naples,
Telefono: +39.081.5524936 – e-mail:

ART. 3 – The Data Supervisor

The Data Supervisor is:

  • Maria Alessandra Masucci, born in Naples on 14/02/1975, President and legal representative of Museo Cappella Sansevero s.r.l., tel.: +39.0815524936, e-mail:;

ART. 4 – Use of the data

Personal data are used as follows:

  1. to ensure the provision of the services requested via the website, thus correctly and expeditiously fulfilling all obligations arising from the contractual relationship established, as well as any and all obligations arising from the law or regulations in force;
  2. for administrative and accounting purposes, including e-mailing invoices issued by Museo Cappella Sansevero s.r.l. and/or companies associated with it in order to provide services.
  3. Sending newsletters concerning the activities of the Cappella Sansevero Museum via email.

ART. 5 – The types of data processed and collected

The Data Controller will process the following personal data

– personal and contact data.

ART. 6 – The legal basis for processing

The consent given by the person concerned constitutes the legal basis for processing their personal information. Failure to provide such information means that no contract may be entered into.

Please note that granting consent for data processing for the purpose mentioned in Article 4.3 (newsletter service) is totally optional. Therefore, if you choose not to allow your data to be processed for this purpose, the data will only be used for the purposes outlined in Article 4.1. (proper fulfilment of the contractual relationship) and Article 4.2 (administrative and accounting activities).

ART. 7 – Access to personal data

Collected data collected may be made available, for the purposes set out in this notice, to the following:

  • – employees and those responsible for administration and accounting working with the Controller
  • – third-party companies or others (professional firms, consultants, etc.) outsourced on behalf of the Controller as external data controllers.

ART. 8 – Data disclosure

The personal data collected will not be disclosed to third parties which have not been authorised by the Data Controller and may only be shared at the request of the Judicial, Financial, and Guarantor Authorities, and any other parties to whom disclosure is required by law.

The above shall process the data in their capacity as autonomous data controllers.

ART. 9 – Data storage and transfer

Personal data are stored on servers located within the European Union. It is, however, understood that the Data Controller, if necessary, may move the data and/or servers outside the EU. In this case, the Data Controller affirms that the transfer of data outside the EU will be carried out in compliance with the applicable laws, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

ART. 10 – Conservation period

The data will be stored for as long as necessary to fulfil the requirements of the contract and, in compliance with statutory administrative and accounting requirements, for no longer than 10 years.

ART. 11 – The rights of data subjects

Users may exercise their rights relating to the Data Controller at any time, pursuant to, and for the purposes of, the European Data Protection Regulation 2016/679.

  • Users, as Data Subjects, enjoy the rights set out in Article 15 of European Regulation 2016/679 concerning the processing of personal data, namely the right to:
  • access
  • correction
  • cancellation
  • withdrawing consent
  • limitations on processing
  • opposing processing
  • portability

Data subjects may exercise their rights at any time via e-mail to:

Requests are filed free of charge and will be processed by the Controller as quickly as possible.