TUSCANY

With this document, the Destination Florence Convention and Visitors Bureau S.C.R.L. company with its registered office located in Piazza Madonna degli Aldobrandini 8, Firenze (50123), owner of the  www.tuscanymice.com, wishes to disclose the website management method for the handling and protection of the personal information of users browsing the website, with direct access from the home page or pages within the site.

This document provides information in conformity with the provisions of Article 13, Legislative Decree no. 196 of 30 June 2003 (Law on the protection of personal information). This applies solely and exclusively to the www.tuscanymice.com website owned by the company and not to other sites consulted by the user through links that may be activated on the website pages. By browsing the website it is possible to gather data referring to identified or identifiable persons.

OWNER, CONTROLLERS AND PRIVACY COMMUNICATION
The owner of the Destination Florence Convention and Visitors Bureau S.C.R.L. company with its registered office located in Piazza Madonna degli Aldobrandini 8, Firenze (50123). An updated list of controllers, appointed by the owner under Art. 29 of Legislative Decree 196/2003 is available at the owner’s registered office. For every communication ex Art. 7 and subsequent articles of Legislative Decree no. 196/2003 and subsequent amendments and additions, the owner makes available the email address info@conventionbureau.it.

DATA PROCESSING
Browsing data:
During their normal use, the IT systems and software procedures for the functioning of the website acquire personal data, the transfer of which is implicit in the use of Internet communication protocols.

These data are not collected to be associated with identified interests, but by their very nature, via processing and associations with data held by third parties, may make it possible to identify the users.

This category of data includes the IP addresses or the domain names of the computers of users who connect to the website, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the state of the reply given by the server (successful, error, etc.) and other parameters regarding the operating system and the user’s IT environment.

The data thus collected may be used to ascertain liability in the event of cybercrime to the detriment of the website.
Data provided directly by the user:
The optional, explicit and voluntary submission of data, as requested by various sections of the above website, is used to follow up the user’s requests (a merely indicative and non-exhaustive example is when information or clarification is requested by writing to the email addresses on the website on the homepage or inner pages or when curriculum vitae are sent spontaneously for the purpose of applying as a candidate, or when direct calls are made or faxes sent to the numbers in the “contacts” section). In particular with regard to data entered by companies and professionals on the pages dedicated to the registration necessary for requests and applications as candidates for training.
On the website indicated above specific information is provided for particular services requested by the user.

PROVISION OF DATA
Browsing data are processed as necessary to follow IT and telematic protocols; submission of personal data by users is free and optional.

PROCESSING METHODS
The data collected via the above website are processed using IT and telematic procedures. Technical data are stored by the company server, which is assured all the security measures required by Legislative Decree 196/2003 and appendices.

COOKIES
The owner uses cookies as indicated in detail in the cookies disclosure section on the company website.

RIGHTS OF THE PARTY CONCERNED
The party concerned may assert their rights as expressed in Art. 7, 8, 9 and 10 of Legislative Decree no. 196 of 30 June 2003, by contacting the data controller. In particular according to Art. 7, the party concerned may obtain confirmation of the existence of personal data concerning them, even if not yet registered, and their communication in an intelligible form. The party concerned has the right to obtain information concerning: a) the origin of the personal data; b) the purpose and methods of processing; c) the logic applied in the case of processing using electronic means; d) the identification details of the owner, the controllers and appointed representative pursuant to Art. 5, para 2; e) the subjects or category of subjects to whom the personal data may be communicated or that may receive knowledge of them, as the appointed representative in the State territory, as data processors. The party concerned has the right to obtain: a) the updating, rectification or if interested, completion of the data; b) the cancellation, transformation into an anonymous form or blocking of the data processed in violation of the law, including those for which storage is not necessary in relation to the purpose for which the data have been collected or subsequently processed; c) the attestation that the operations under letters a) and b) have been brought to the attention also as regards their content, of those to whom the data have been communicated or disseminated , except in the event that this fulfilment proves impossible or involves the use of manifestly disproportionate means in relation to the protected right. The party concerned has the right to object in total or in part: a) for legitimate reasons to the processing of personal data concerning them, even if relevant to the purpose of the collection; b) to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for market research or commercial communication.

COMMUNICATION AND DISSEMINATION
The data collected will not be disseminated, sold or exchanged with third parties without the express consent of the party concerned, except in the event of notifications to authorised third parties – committed to confidentiality or if appointed as data controllers ex Art. 29, Legislative Decree no.196/2003- (such as computer assistance and hosting companies) where necessary for the purpose of this statement. Data may be communicated to the relevant authorities, in accordance with the law.

PLACE OF PERSONAL DATA PROCESSING
The personal data acquired via the web services provided by Destination Florence Convention and Visitors Bureau S.C.R.L.company are stored at the company’s registered office situated in Piazza Madonna degli Aldobrandini 8, (50123) Firenze. The data are stored only by technical staff in charge of data processing or by occasional maintenance operators.