The website does not use profiling cookies, advertising cookies, analytics tools designed to track users, or any other technologies for which the data subject's prior consent is required. For this reason, no banner is displayed asking users to accept or reject cookies. Cookies used during normal browsing are exclusively technical cookies that are necessary or functional to the operation of the website and do not require the user's consent.
ComPart Multimedia places particular importance on confidentiality and the protection of personal data. The website is designed in accordance with data minimisation principles: only the data necessary for the operation of the service and the management of enquiries received are processed, without profiling, automated marketing or advertising tracking.
This Privacy Policy is provided pursuant to Articles 12 and 13 of Regulation (EU) 2016/679 (“GDPR”) to users who visit the corporate website of ComPart Multimedia S.r.l. and use the services made available through the website.
This Privacy Policy applies to www.compart-multimedia.com and www.museum-solutions.com, both operated by ComPart Multimedia S.r.l.
1. Data Controller
The Data Controller is:
ComPart Multimedia S.r.l.
Via delle Cave, 105
00181 Rome - Italy
Tax Code and VAT No. 05327951009
For enquiries concerning the processing of personal data or the exercise of rights under the GDPR, users may use the contact form available on the website, specifying in the message that the enquiry concerns personal data protection or the exercise of their data protection rights.
Requests may also be addressed to the Data Controller at the registered office indicated above.
2. Data processed when browsing the website
The IT systems and services required for the operation of the website acquire, as part of their normal operation, certain technical data whose transmission is inherent in the use of Internet communication protocols.
This information may include, by way of example, the IP address, date and time of the request, requested resource, request method, server response code, browser and device type, and other technical data required for communication and operation of the service.
This information is processed exclusively to:
- ensure the proper operation and delivery of the website;
- protect the security of systems and prevent misuse or cyber attacks;
- perform technical diagnostics and troubleshoot faults or anomalies;
- establish any liability in the event of security incidents or unlawful activities involving IT systems.
The legal basis for this processing is the legitimate interest of the Data Controller in ensuring the operation, integrity and security of its website and related systems, pursuant to Article 6(1)(f) GDPR.
Technical logs generated by the hosting service are retained for limited technical periods, generally between 30 and 90 days, unless longer retention is required for security purposes, incident management, investigation of unlawful activities or compliance with legal obligations.
3. Data provided through the contact form
The website provides a contact form intended for professional and business enquiries from companies, organisations and professionals.
The form requires the following information: first name, last name, company, email address, telephone number and the content of the enquiry.
Providing the required information is necessary to identify the sender, establish the professional nature of the enquiry and enable its appropriate handling. The telephone number may be used solely for any verification or communication strictly related to the enquiry.
Failure to provide information marked as mandatory will prevent the enquiry from being submitted and handled through the form.
The data are used exclusively to:
- receive, assess and respond to the enquiry;
- provide information concerning the requested services;
- prepare any requested quotations or proposals;
- manage communications and pre-contractual activities requested by the data subject;
- retain a record of professional and business correspondence in order to reconstruct previous enquiries, quotations or proposals in the event of subsequent communications from the data subject.
Data collected through the form are not used for newsletters, profiling, remarketing, advertising campaigns or subsequent unsolicited promotional communications.
As a general rule, the legal basis for processing is the legitimate interest of ComPart Multimedia in receiving, qualifying and managing professional and business enquiries addressed to the company and in retaining a limited history of the related correspondence, including for the purpose of reconstructing previous enquiries or proposals in the event of subsequent contact by the data subject, pursuant to Article 6(1)(f) GDPR.
Where an enquiry is submitted by a natural person acting on their own behalf and who is directly a party to the potential contractual relationship, the processing may also be necessary in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
Consent is not relied upon as the legal basis for handling the enquiry.
The form does not store enquiries in the website database or CMS. When the form is submitted, the data are converted into an email communication addressed exclusively to authorised internal personnel responsible for handling enquiries.
Users are requested not to include in the free-text field any special categories of personal data within the meaning of Article 9 GDPR or any other personal information that is not necessary for the purposes of the enquiry.
4. Retention of enquiries
Enquiries received through the contact form and the related correspondence may be retained for a maximum period of 5 years from the last interaction.
This period enables ComPart Multimedia to maintain a limited history of professional and business correspondence and, in the event of subsequent enquiries from the data subject, to reconstruct any previous communications, quotations or proposals.
Data retained for this purpose are not used for newsletters, profiling, advertising campaigns, telesales or any other unsolicited promotional activities.
Where an enquiry results in a contractual relationship, the data and related correspondence become part of the management of the business and contractual relationship and are retained for the periods applicable to that relationship and to any relevant administrative, accounting, tax or legal obligations.
Once the applicable retention period has expired, the data are deleted in accordance with the organisational and technical procedures adopted by the Data Controller. Any residual copies contained in backup systems are subject to the normal technical retention and overwrite cycles applicable to backups and are not used for any further purposes.
5. Recipients and service providers
Data submitted through the contact form are accessible exclusively to authorised ComPart Multimedia personnel who need to handle and respond to the relevant enquiries.
The website and the email service used to receive communications are hosted by hosting.com, operated by A2 Hosting LLC, which, in relation to processing carried out on behalf of ComPart Multimedia, acts as a Data Processor pursuant to Article 28 GDPR, within the limits necessary for the provision of the relevant technical services.
Where the provision of these services involves transfers of personal data to the United States, hosting.com states that it participates in the EU-U.S. Data Privacy Framework. Any international transfers of personal data are carried out in compliance with Chapter V of the GDPR and on the basis of applicable adequacy decisions or other safeguards provided for by data protection legislation.
Personal data are not sold, disclosed or communicated to third parties for advertising, profiling or marketing purposes.
6. External services and content
6.1 OpenStreetMap
The “Our Location” page uses map data provided through OpenStreetMap to display the location of the company's premises.
Loading the map necessarily involves communication between the user's browser and the servers used to provide the map resources and may therefore result in the transmission of technical data such as, by way of example, the IP address, browser information, date and time of the request, and the resources requested.
The map is used exclusively to enable users visiting the location page to view the position of the company's premises. ComPart Multimedia does not use this information for profiling, advertising or monitoring users' behaviour.
OpenStreetMap Foundation operates independently in relation to the processing carried out through its mapping services.
6.2 YouTube
Some pages of the website may contain videos hosted on the YouTube platform.
Videos are not loaded automatically when the page is opened. A locally hosted element is initially displayed, and a connection to YouTube is established only following a voluntary action by the user choosing to view the video.
Videos are embedded using the enhanced privacy mode made available by YouTube.
Once a video has been activated, the user's browser may nevertheless communicate technical data to YouTube/Google, and the processing practices of the relevant provider may apply.
7. Cookies and similar technologies
During normal browsing, and before the voluntary activation of any external content, the website uses exclusively first-party technical cookies required for the proper operation of its functions.
Joomla session cookie
The CMS may use a technical session cookie required for the technical management of browsing and website functionality. The cookie is not used for profiling or advertising purposes and is normally deleted when the browser session ends.
Technical session storage for the map
On certain devices, the website uses sessionStorage exclusively to record, for the duration of the browser session, that the map displayed on the location page has already been loaded. The information stored does not contain user identifiers, is not used for profiling or behavioural analytics, and is not transmitted to the server.
As no cookies or other tracking technologies requiring prior consent are used during normal browsing, users are not asked to provide consent through a cookie banner.
The voluntary activation of external content, such as YouTube videos, may result in subsequent processing or use of technologies by the relevant third-party provider.
8. Rights of the data subject
Where applicable under the GDPR, data subjects may exercise the rights provided for under Articles 15 et seq. of the Regulation, including the right to:
- obtain confirmation as to whether or not personal data concerning them are being processed and, where applicable, access those data;
- obtain the rectification of inaccurate data or the completion of incomplete data;
- request the erasure of personal data where the applicable conditions are met;
- request restriction of processing in the circumstances provided for by law;
- object to processing based on legitimate interests where the applicable conditions are met;
- obtain data portability where applicable.
To exercise these rights, data subjects may use the same contact form available on the website, clearly specifying in the enquiry that the request concerns privacy or the exercise of rights under the GDPR.
Where the request concerns previous business correspondence, the identification details provided through the form, including the company and contact details indicated, enable the Data Controller to correctly identify the correspondence and personal data concerned by the request.
Where there are reasonable doubts concerning the identity of the person making the request, the Data Controller may request only such additional information as is necessary to confirm their identity.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) pursuant to Article 77 GDPR.
9. Data security
ComPart Multimedia implements technical and organisational measures that are appropriate and proportionate to the relevant risks in order to protect personal data against unauthorised access, loss, alteration, disclosure or unlawful processing.
Access to enquiries received through the website is restricted to authorised personnel and takes place through the company's systems designated for the management of email communications.
10. Automated decision-making and profiling
ComPart Multimedia does not carry out profiling through the website within the meaning of Article 4(4) GDPR, nor does it make decisions based solely on automated processing within the meaning of Article 22 GDPR.
11. Updates to this Privacy Policy
This Privacy Policy is reviewed and, where necessary, updated in the event of changes to applicable legislation, technical or organisational arrangements, or where new website functions involving additional processing of personal data are introduced.
Last updated: 31 August 2026.