Privacy statement

1. Introduction to the website of Veneranda Fabbrica del Duomo di Milano

Welcome to the website of Veneranda Fabbrica del Duomo di Milano (hereinafter referred to as “Agency” or “VFD”).
This Privacy Policy (hereinafter referred to as “Privacy Policy”) applies to the data of each user (hereinafter referred to as the “User”), understood as any information that allows to identify the User, processed by Veneranda Fabbrica del Duomo di Milano after a dedicated login to the various sections of this website (hereinafter referred to as “Website”).
The Informative Notice is only provided for the Website and in no way shall it refer to the various websites the User can be redirected to through links contained on the Website that might forward the User to portals and IT systems managed by third parties. Veneranda Fabbrica del Duomo di Milano is entirely foreign to their ownership, method and scope.
The Privacy Policy is regulated by Italian law and by EU Regulation 2016/679 (GDPR) that disciplines personal data processing (hereinafter referred to as “Data”) performed by whoever is a resident or is based in the European Union, and guarantees that data processing will be carried out in compliance with the law and basic freedom rights, and dignity of the party concerned, with special reference to confidentiality, personal identity and data protection rights.

2. Date of Admission

By visiting the Website, using its services or interacting with Veneranda Fabbrica del Duomo di Milano, the User confirms that he has read and understood this Privacy policy and that he accepts that the Agency will collect, use, store, transmit and disseminate personal data collected through the Website in compliance with the Privacy Policy.
The Privacy Policy can be amended or simply updated, either entirely on in part, in the light of any legislative changes; amendments and updates to the Privacy Policy shall be binding as soon as they are published on the Website.
Except for the case in which he is already registered, the Agency may request the User to provide his consent (e.g., by marking a box), if he decides to protect his rights or when it is established by the legislation in force. If he does not accept the terms of this Privacy Policy, the User is kindly requested not to visit this Website, not to create an account and not to use this Website otherwise or not to send it personal data, or not to provide his consent when this option is offered pursuant to the legislation in force.

3. Data Controller and Data Protection Managers

The Data Controller is Veneranda Fabbrica del Duomo di Milano, with registered office in 20122 Milan (MI), Via Carlo Maria Martini, 1, Register of Legal Entities of the Milan Prefecture no. 315, Tax Code and VAT no. 01989950157.
Veneranda Fabbrica del Duomo di Milano shall independently decide the scope and processing methods, and safety procedures to be applied to ensure confidentiality, integrity and availability of data.
The complete and updated list of Data Processing Managers can be consulted at Veneranda Fabbrica del Duomo di Milano.
For any further information, contact privacy@duomomilano.it

4. Subjects who can process User Data and Data Communication

Veneranda Fabbrica del Duomo di Milano shall also make use of third parties to process user data. Said parties shall be appropriately selected, possess experience, skills and reliability and guarantee total compliance with provisions in force on the subject of personal data processing, even regarding the personal data safety profile. These third parties shall be mentioned as required, based on the type of duties entrusted to them by Veneranda Fabbrica del Duomo di Milano, and they shall perform their activity according to the instructions imparted by Veneranda Fabbrica del Duomo di Milano and under its control.
If the User consents, in the dedicated sections of the Website and for the specific purposes listed below, Veneranda Fabbrica del Duomo di Milano shall share the User data with the subsidiary company or with third party companies appointed as required, who shall only receive the data required to carry out the Services and they shall not be authorised to use them for any other purpose.
The User Data might have to be shared with companies that handle payment management, which operate independently as data controllers to provide the User with online sales services.
The Agency may also disclose the User’s personal data to third parties: i) when established by a EU regulation or by the regulation of a member state; ii) in the event of legal proceedings; iii) in response to a request from the police based on legitimate grounds; or iv) to protect the rights, privacy, safety or property of the Agency or of the public.

5. Protection of Minors

This Website addresses a generic public; however, its Services are intended for people aged 18 years or more. Veneranda Fabbrica del Duomo di Milano shall not intentionally request, collect, use and disseminate, without the prior consent of parents or of guardians, the data provided online by subjects under 18 years of age. If the Agency comes to know that it has personally collected the data of a minor, it shall delete said data.
If the User is under the required age, he is kindly requested not to register or to use the Services and to ask an adult (or his parents or guardian) to perform the necessary procedures.

6. Scope of data processing

Browsing the Website is free and does not require any authentication credentials.

The entry of User Data (such as, for example, anagraphic data and e-mail), and the entry of authentication credentials may be requested in the login area by Veneranda Fabbrica del Duomo di Milano to allow the User to access certain services (hereinafter referred to as “Services”), such as:

  • the possibility of making online donations, data entry in the online and hard copy register of donors, the addition of a photograph to the online register (in the section “Adopt a Spire”);
  • booking of admissions and of audio guide, video guide and radio guide systems with the Monumental Complex of Duomo di Milano (in the “Booking” section);
  • regular delivery of newsletters with information about activities performed by Veneranda Fabbrica del Duomo di Milano, project “Adopt a Spire. Carve your name in history”, cultural events such as concerts, exhibitions, conferences, meetings of the Cathedral School, laboratories for children and families, didactic programmes for schools and parishes, guided tours, special initiatives for companies, promotion of products and services related to the Duomo di Milano, events and other initiatives (in the “Newsletter” section).


During the login procedure, Veneranda Fabbrica del Duomo di Milano presents a complete Informative Notice that must be accepted by the User to access the above Services.

7. Data processing methods and duration

Data processing is performed mainly with electronic devices by Veneranda Fabbrica del Duomo di Milano and by other subjects who, appropriately selected for reliability and competence, perform operations that are instrumental to pursue the purposes strictly related to the use of the Website and its maintenance.
Data shall not be communicated to third parties, except for cases in which communication is mandatory by law or if it is necessary for purposes established by said law, the pursuit of which does not require the consent of the party.
The duration of data processing is indicated in the Informative Notice on Data processing entered in each specific section “Booking”, “Newsletter” and “Adopt a Spire”.

8. Data Safety

Appropriate safety measures are applied by Veneranda Fabbrica del Duomo di Milano, pursuant to EU Regulation 2016/679 to prevent, besides unauthorised access, also the loss of data and illegal or incorrect use of the same.
Veneranda Fabbrica del Duomo di Milano reserves the right to remove accounts and all related data, if illegal content is observed that damages the image of Veneranda Fabbrica del Duomo di Milano and/or of its products/services or of third parties, or if contents are deemed offensive or if contents promote illegal, slanderous or pornographic activities, encourage violence, and promote discrimination about race, sex, religion and sexual inclination.

9. User Rights

The User, at any time and free of charge, may access his data, receive his electronic data and transmit them to another data controller (data portability), and get them corrected, updated, modified or removed (save for any applicable exceptions). The User may update the data provided to the Agency by contacting the same at the address provided below. Requests to delete data are subordinated to the legal obligations in force and to obligations on document storage established by the Agency.
If it is deemed that there is a problem in the data management method, the User shall be entitled to contact the personal data protection authority.
To exercise said rights, the User may send a request by contacting Veneranda Fabbrica del Duomo di Milano, by sending an e-mail to privacy@duomomilano.it or an ordinary mail letter to the address: Via Carlo Maria Martini 1, 20122 Milan. When contacting the Agency, the User shall ensure that his name, e-mail address, postal address and/or telephone number are included to ensure that it may correctly manage his request.
To allow the Agency to offer Services to the User, the latter is invited to regularly verify and update his data. The User may access his personal data and edit them by contacting the Agency at the above addresses to receive assistance when updating the data.
If the User, who has previously authorised his personal data processing for the purpose of direct marketing and/or to send the newsletter, wishes to withdraw his consent or to manage his preferences, he may submit a simple request to the above Agency.

10. COOKIE POLICY

In compliance with the Provision of the Italian Data Protection Authority [Defining simplified methods for the Informative Notice and acquisition of consent to use cookies” of 8 May 2014, published in Official Gazette no. 126 of 3 June 2014], the banner on the home page of the Website refers to this document, which provides information about the methods of use of cookies on the part of Veneranda Fabbrica del Duomo di Milano or of any third parties, and about the methods the User might adopt to manage cookies.

Veneranda Fabbrica del Duomo di Milano shall not use either marketing or profiling cookies on its Website. Thus said, when the User browses the Website, Veneranda Fabbrica del Duomo di Milano might receive the so-called technical cookies, such as a) so-called “Web browsing or session” cookies, or technical text files that are useful for correct Website function, which allow the User to be recognised (if desired by the User through activation of the relative function) at the next access, b) so-called “analytical” cookies, which are used to collect information in anonymous and aggregate form for statistical purposes, and c) so-called “function” cookies, such as those required to use Services, such as the language setting.

Moreover, third parties or social networks might install cookies on the Website: given that, pursuant to the law, Veneranda Fabbrica del Duomo di Milano has no control on these cookies, and not even any obligation to provide information and consent in this regard, listed below are the updated links to Informative Notices and consent forms of the third parties:

Facebook ( for more information, click here )
Twitter ( for more information, clik here ) 
Google Analytics ( for more information, clik here )
YouTube: ( for more information, clik here )

Failure to disable cookies by continuing Website browsing or by selecting an element of the same (e.g., an image or a link) will imply consent to use the cookies. Finally, note that Veneranda Fabbrica del Duomo di Milano shall preserve the cookies for the time strictly required to provide the Service and, anyhow, for a period not in excess of seven days.