Skip to main content

Privacy

Personal data processing notice

How we process data when you visit a museum with the Atena guide, browse the website and write to us through the Contact form.

No visitor accountMinimised and pseudonymised dataNo advertising cookies

Controller and contact

  • The data controller is Atena Heritage.
  • For privacy questions or to exercise your rights, write to info@atenaheritage.com.

Data processed during the visit

  • The choices you make at the start of the visit: language, age range, level of knowledge, available time and type of visit.
  • Usage events, such as entry, personalisation, chat and the optional final rating, linked to a pseudonymous session identifier and used for aggregate statistics for the museum.
  • Chat questions and answers: they are used to continue the conversation and are deleted when the visit ends, unless the museum has enabled retention for a defined period. Statistics describe chat use without the full text; recognisable email addresses, links and phone numbers are removed.
  • To answer, your question, the latest turns of the conversation and the relevant museum sources are processed by an open-source artificial intelligence model through the provider DeepInfra.
  • If you use artwork recognition, the photo is used only to search the museum’s catalogue: it is not stored, its metadata is removed and we do not use facial recognition.
  • Your IP address is used only to temporarily limit misuse of the service and is not linked to your visit.

Data we do not ask for

  • The visit does not require your name, email address or phone number.
  • We do not detect your precise location.
  • You do not need to create an account.

Cookies and browser storage

  • We use only technical cookies: one keeps the visit open and expires with it, one remembers your chosen language for a year, and one keeps museum staff signed in to the private area.
  • Your browser stores the ongoing conversation, deleted after the visit expires, and preferences such as theme and voice speed.
  • It also stores a random device identifier that links the ticket to your phone: it is different for each museum and is deleted after 24 hours without use.
  • The session identifier for statistics stays in the browser tab and expires after 8 hours at most.
  • We do not use advertising, profiling or third-party cookies.

Enquiries from the Contact form

  • The form collects your name, work email, institution, request type and message; role and phone are optional.
  • We use this data only to reply to your enquiry and keep it for as long as needed to handle it. We do not use it for marketing.
  • Public website statistics, when enabled, record only the pages visited and the main clicks, never the data entered in the form.
  • We use the provider Resend to forward your request by email and share the form data with it.

Retention and security

  • An automatic procedure deletes the text of finished conversations and unlinks devices from expired tickets.
  • Staff at each museum can access only their own museum’s data, in aggregate form and without identifying visitors.
  • Data is stored in a database managed by the provider Supabase, and access is restricted to authorised staff.

Your rights

  • You can request access to your data, rectification, erasure, restriction of processing or portability, or object to processing, by writing to info@atenaheritage.com.
  • The identifiers used during the visit are pseudonyms: they do not contain your identity, but they are not the same as full anonymity.
  • You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the supervisory authority in your country.