pursuant to Article 13 / EU Regulation 2016/679


Pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the methods for processing the personal data of users who consult the websites of the Destination Florence Convention and Visitors Bureau Scrl accessible electronically at the following addresses:

This information does not concern other sites, pages or online services accessible via hypertext links that may be published on the sites that refer to resources outside the domain of the Data Controller.
This Policy also applies as information about the use and processing of cookies in compliance with the Provision issued by the Italian Data Protection Authority (Garante) no.229, 08/05/2015


Following consultation of the sites listed above, data relating to identified or identifiable persons may be processed. In this regard, we inform you that the Data Controller is Destination Florence Convention and Visitors Bureau Scrl with headquarters in Via del Tiratoio, 1 - 50124 Florence, and can be contacted at the following addresses: Telephone +39 055 298813 email


The Data Controller has appointed Mr. Alessandro Corti as Data Protection Officer, to whom you can contact for information and requests regarding your data or to report inefficiencies or any problem that may be encountered at the following addresses:
Telephone: +39 0577 043092 Email:


The Data Controller, in accordance with Art. 5.1 e) of the GDPR, will process the data you have provided for the entire duration of the requested services and will keep them for the following 12 months for the purpose of completing administrative activities, in addition to the terms necessary to fulfill legal obligations.


The processing carried out by the owner using the data collected from this site through the forms prepared or sent voluntarily takes place at the aforementioned headquarters of the owner and are only handled by personnel appointed for this purpose or by persons in charge of occasional maintenance operations. Your personal data will also be processed within the territory of the European Union. If for technical and / or operational reasons it becomes necessary to make use of subjects located outside the European Union, or it becomes necessary to transfer some of the data collected to technical systems and services managed in the cloud and located outside the area of the European Union, the processing will be regulated in accordance with the provisions of Chapter V of the Regulation and authorized on the basis of specific decisions of the European Union. All necessary precautions will therefore be taken in order to guarantee the most complete protection of personal data by basing this transfer: a) on adequacy decisions of the third country recipients expressed by the European Commission; b) on adequate guarantees expressed by the third-party recipient pursuant to art. 46 of the Regulation; c) on the adoption of binding corporate rules, so-called Corporate binding rules.


The collection of information through the site can be done in one of the following ways:
a) Explicit mode
b) Implicit mode
c) Information sent voluntarily by the interested party


6.1.1. Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols and which are in no way used or managed by the Data Controller. This is information that is not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user's computer environment. Other information collected in this way may concern: the "Uniform Resource Locator" (URL) of the site from which the user comes, which pages of the Site have been visited, which is the next URL to which the user is connected, which browser was used to reach the site. This data, necessary for the use of web services, is also processed, in aggregate form, for the purpose of:

  • obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
  • check the correct functioning of the services offered.
6.1.2. COOKIES

What are cookies Cookies are information entered on your browser when you visit a website or use a social network with your PC, smartphone or tablet. Each cookie contains various data such as, for example, the name of the server it comes from, a numerical identifier, etc. Cookies can remain in the system for the duration of a session (i.e. until the browser used for web browsing is closed) or for long periods and may contain a unique identification code.
What's their purpose
Cookies are used to perform computer authentication, session monitoring and storage of specific information about users who access a web page. They are often useful, because they can make browsing and use of the web faster, because, for example, they intervene to facilitate certain procedures when shopping online, when authenticating to restricted access areas or when a website automatically recognizes the language you usually use.
How are cookies classified
Cookies are classified into:

  • Technical: these are cookies that are used to browse or provide a service requested by the user. They are not used for other purposes and are normally installed directly by the website owner. Without the use of these cookies, some operations could not be carried out or would be more complex and / or less secure, such as home banking activities (viewing the account statement, wire transfers, bill payment, etc.), in this case the cookies, which allow the identification of the user to be made and maintained during the session, are indispensable. The use of these cookies does not require the user's prior consent;
  • Profiling: These are the cookies used to track the user's navigation on the network and create profiles based on their tastes, habits, choices, etc. With these cookies, advertising messages can be transmitted to the user's terminal in line with the preferences already expressed by the same user while browsing online. The use of these cookies requires the prior acquisition of the user's free informed consent.
  • Third-party cookies: It may also happen that a web page contains cookies from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, maps or specific links to web pages of other domains that reside on servers other than the one on which the requested page is located. In other words, these cookies are set directly by website managers or servers other than this website. In these cases, we are talking about so-called third-party cookies, which are usually used for profiling purposes. The use of these cookies requires the prior acquisition of the user's free and informed consent. Cookies and other tracking systems present

In order to make your visit to our website as convenient as possible, we use cookies for the presentation of our service. These are small aggregates of text recorded locally in the temporary memory of your browser, and therefore in your computer, for variable periods of time depending on the need, generally between a few hours and a few years, with the exception of profiling cookies whose maximum duration is 365 calendar days while those for direct marketing are 24 months.
Using cookies, it is possible to semi-permanently record information relating to your preferences and other technical data that allows easier navigation and greater ease of use and effectiveness of the site itself. For example, cookies can be used to determine if a connection has already been made between your computer and our sites to highlight the latest changes or keep the "login" information. For your protection, only the cookie stored on your computer is identified.
Pursuant to the Provision of the Italian Data Protection Authority on 08/05/2015 Published in GU n.126 on 03/06/2014, cookies cannot be freely installed on users' terminals, but compliance with a series of requirements is necessary. In the table below, we inform you of the types of cookies used on our website:


In this table, we report the various types of cookies on our site and for each of them we indicate whether they are managed directly by us or by third parties. If the cookie is managed by third parties we not only do not see the stored data, but we have no possibility of intervention. For this reason, you will find a link to their information and their consent forms.









Third party


Session cookies





The use of the so-called session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site.

I c.d. Session cookies used on this site avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of user navigation and do not allow the acquisition of the user's personal identification data.

The aggregated information collected is anonymous and allows to analyze the type of traffic on the site. Over time, this can help improve the content and make it easier to use.

Most browsers automatically accept cookies, but it is also possible to reject them completely or selectively accept only some of them, by acting on the preferences of your browser.

If the user inhibits the loading of cookies, some components of the site may not be available and some pages may be incomplete.


Google Analytics





To improve the website and understand which parts or elements are most appreciated by users, third party cookies from Google Analytics are used as an anonymous and aggregate analysis tool. These cookies are not tools owned by us, for more information, therefore, you can consult the information provided by Google


Technical cookies essential for statistics and performance analysis





These cookies allow us to know how visitors use the site, in order to be able to evaluate and improve its functioning and to favor the production of content that best meets the information needs of our users. For example, they let you know which pages are the most and least visited. They consider, among other things, the number of visitors, the time spent on the site by the average number of users and how they arrive. In this way, we can know what works well and what to improve, as well as make sure that the pages load quickly and are displayed correctly. All information collected by these cookies is anonymous and not linked to the user's personal data. To perform these functions on our sites we use the services of third parties that anonymize the data making it not attributable to individuals (so-called "single-in"). Where there are services that are not completely anonymized, you will find them listed among the third party cookies for which it is possible to deny consent, to guarantee your privacy.


Social network






The site integrates the main Social Networks through scripts made available by them. These scripts may use cookies in order to facilitate the sharing of content on social networks or interaction with other subscribers.

These types of cookies are managed by the different companies that report to the individual Social Networks, each of which is responsible for its own cookies. Through the links below it is possible to learn more about the privacy policies published:

·       Google + / YouTube:

·       Twitter:

·       Facebook:

·       Pinterest:

·       Instagram:

·       Foursquare:


Data Log





The LOGs are archives on which traffic data or the activities carried out by users who connect to our site on the network are automatically recorded. These archives give the possibility to reconstruct all the events that occurred on our site. LOGs are an essential element for system management and allow you to solve many technical or organizational problems.

The information recorded by us on these archives is only that which is essential in order to detect the connection times and the identification of the connected IP address.


Concessionaires of advertising and research companies





On the site you can find advertisements from other companies. For this purpose, advertising networks permanently store a cookie on the user's computer. This allows the advertising network to recognize your computer every time an ad is sent to you online. In doing so, advertising networks can compile information about the sites or web pages where their ads were noticed. Thanks to this information, ad networks can send you the ads they think interest you the most. The cookies placed by these companies cannot collect information that allows personal identification or that allows users to be identified individually.

The data is therefore anonymous and is collected exclusively for marketing analysis purposes relating to the site. Our organization does not have access to and does not control the cookies that may be distributed by third party advertising networks.


Web Beacons





Some pages of the Site contain electronic images known as "beacons" of the network or as "single-pixel GIFs", placed by advertising agencies or research companies. The "beacons" of the network, which use the technology of cookies, allow the compilation of aggregate statistics regarding how users use the Site and evaluate the effectiveness of advertisements. We do not collect or share personal data by means of the "beacons" used on the Site, nor does the information collected allow us to identify users of the Site.

The data is therefore anonymous and is collected exclusively for marketing analysis purposes relating to the site.







Some cookies can also be used to show special offers consistent with the preferences expressed during navigation in order to improve the user's experience and purchasing conditions.

The cookies we use for profiling do not collect information that personally identifies the user who browses the pages of the site.

The site can use profiling cookies connected with the "remarketing" function of Google AdWords and Facebook Advertising, allowing you to publish personalized ads on the Google and Facebook content networks based on the pages visited by users on the site. Third party vendors, including Google, use cookies to serve ads based on previous visits made by users to your website.

The information obtained allows only the browser to be identified and it is not possible in any way to identify the user.

How it works: some pages of the site include a remarketing code that allows you to read and configure browser cookies in order to determine the type of ad that the user will see based on the data relating to their visit to the site and, therefore, to their own interests.

The remarketing lists created are stored on Google's and Facebook's servers, where all the IDs of cookies associated with interests are stored.

More information on the remarketing tool can be found at this link:








Facebook Remarketing Cookies

Our site uses Facebook remarketing with the Pixel Code.

The Facebook Pixels are used to anonymously collect information about users who see and interact with ads and visit our websites. More information on how Facebook cookies are managed can be found here.








The site uses AdWords remarketing; this profiling cookie favors the search on the Google networks of the services offered without collecting or monitoring information capable of personally identifying a user. Read the information here


Functional and third party profiling cookies





This category includes both cookies provided by partner parties of the Owner and known to it, and cookies provided by third parties not directly controlled or controllable by the Owner. Cookies from our partners allow us to offer advanced features, as well as more information and personal functions. This includes the ability to share content through social networks, access video-streaming services and the CDN networks on which we host our content. These services are mainly provided by external operators engaged or knowingly integrated by the Data Controller. If you have an account or if you use the services of these parties on other websites, they may be able to know that you have visited our sites. The use of data collected by these external operators through cookies is subject to their respective privacy policies and therefore these cookies are identified with the names of the respective subjects listed in the cookie management tool available in the appropriate section of this Policy. These include the cookies registered by the main social networks that allow you to share the articles on our sites and to publicly express your approval for our work.

You also have other options to browse without cookies by acting directly on your browser.

Block third party cookies

Third party cookies are generally not essential for browsing, so you can reject them by default, through specific functions of your browser.

Activate the Do Not Track option

The Do Not Track option is present in most of the latest generation browsers. Websites designed to respect this option, when activated, should automatically stop collecting some of your browsing data. As mentioned, however, not all websites are set up to respect this option (discretionary).

Activate the "anonymous browsing" mode

Using this function, you can browse without leaving a trace of the browsing data in the browser. The sites will not remember you, the pages you visit will not be stored in the history and the new cookies will be deleted.

However, the anonymous browsing function does not guarantee anonymity on the Internet, because it only serves not to keep browsing data in the browser, while your browsing data will continue to remain available to website managers and connectivity providers.

Delete cookies directly

There are special functions to do this in all browsers. However, remember that new cookies are downloaded every time you connect to the Internet, so the deletion operation should be performed periodically. If desired, some browsers offer automated systems for the periodic deletion of cookies.

Configure the management of cookies in the browser
The main browsers allow you to change the settings for managing cookies. It is possible to decide to: allow websites to be saved, completely deny the saving of cookies, decide which cookies to accept each time. These settings vary depending on the browser used to navigate, below are the links to the information pages of the most popular:


For further information on the use of cookies by third party services and further instructions on managing cookies in the browser, see the following address:

If you decide to set your browser to refuse cookies from this site, we remind you that some features may not be available and access to some sections may be limited.


The optional, explicit and voluntary sending of messages to the contact addresses of the Data Controller, as well as the compilation and forwarding of the forms on the sites, involve the acquisition of the sender's contact data that is necessary to reply, as well as all personal data included in communications.
Specific information will be published on the pages of the sites of the Data Controller prepared for the provision of certain services.


There is a possibility that the site contains links to third party sites. When the user uses these links, they are forwarded to environments not controlled by our organization, which is not responsible for the related content that the user may encounter, nor for the privacy procedures adopted therein. This information does not extend to the privacy procedures adopted by the linked sites. It is advisable to carefully examine the procedures of each site that is visited. Furthermore, those sites, in a completely independent way, can send their cookies to users, collect data or request personal information.


The purpose of the processing is the reason, the purpose for which the data is collected. Depending on these purposes, in certain cases it is necessary to obtain your prior consent in order to proceed with their collection and subsequent processing. In the case of its necessity, it will be explicitly requested so that you can grant it for all or only for some uses.

7.1. Purposes for which consent is not required

  1. Navigation data
    This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
  2. Personal data provided voluntarily by users processed following requests for a service or other kind
    This data will be used for the sole purpose and for the time strictly necessary to perform the service or provision requested and may, for this reason, be disclosed to third parties (e.g. couriers for the shipment of the requested products, other consultants necessary to respond to your requests, etc.) or to persons belonging to our organization (e.g. office employees, production workers, etc.).
  3. Processing of traffic information (which does not allow personal identification)
    They are used on an aggregate and never personalized basis, to analyze user behavior in order to understand how visitors use the site and to measure the interest found in the various pages. This permits the improvement of the content of the site, to simplify its consultation;

7.2. Purposes for which consent is required

  1. Purpose of profiling
    Data processing for profiling purposes conducted automatically by collecting information on navigation during access and use of the services. Using statistical correlation algorithms, this information can be linked to other information of the same kind from other users to identify common traits and to group similar ones within interest classes. By assigning your browser to an interest class, our systems will subsequently be able to offer you content that is closer to your tastes and will present advertising contributions that best meet your needs and better target the interests of advertisers by reducing the level of user disturbance. On the date you read this Notice, the Data Controller uses the profiling data to aggregate marketing profiles, to manage the relationship with advertising investors and improve their campaigns, to infer patterns of use of our products and services and to assist the commercial managers in the development of digital strategies
  2. Direct Marketing Purposes
    The data collected may be used to carry out statistical analysis, market surveys, promotional activities through social media and to send commercial information on the products and promotional initiatives of the Data Controller.
  3. Marketing purposes by third parties
    The data collected may be provided to other companies operating in the fields of publishing, financial, automotive insurance, energy, consumer goods, humanitarian and charitable organizations which may contact you as owners of autonomous initiatives - the updated list is at your disposal and can be requested to the Data Processor at the address below - for statistical analysis, market surveys and sending commercial information on products and promotional initiatives.

Communications for market surveys or commercial information on products and promotional initiatives may be made by postal mail, e-mail, telemarketing, SMS, mms.


Personal data will not be disclosed, but may be disclosed where necessary for the provision of the service to third parties (such as third party technical service providers, postal couriers, hosting providers, IT companies) appointed, if necessary, as Data Processors by of the Data Controller for technical or organizational tasks instrumental to the provision of services. Access to data is also allowed to categories of the Data Controller's employees involved in the data processing organization (administrative, commercial, marketing, customer service, system administrators). The updated list of Managers can always be requested from the Data Controller. Without prejudice to the right of communication to third parties with specific and optional consent.


The Data Controller guarantees you can exercise the rights provided for in art. 12 of the GDPR. In particular, you have the right:

  • to know if the Data Controller holds and / or processes personal data relating to your person and to access it in full, also by obtaining a copy (Article 15 Right to access),
  • the correction of inaccurate personal data or the integration of incomplete personal data (Article 16 Right of rectification);
  • to the cancellation of personal data held by the Data Controller if one of the reasons provided for by the GDPR exists (Right to Cancellation, Article 17);
  • to ask the Data Controller to limit the processing to only some personal data, if one of the reasons provided for by the Regulation exists (Article 18 Right to limit the processing);
  • to request and receive all your personal data processed by the owner, in a structured format, commonly used and readable by an automatic device or to request transmission to another owner without hindrance (Article 20, Right to Portability);
  • to object in whole or in part to the processing of data for the purpose of sending advertising material and market research (so-called Consent) (Article 21 Right to object)
  • to object in whole or in part to the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent)
The exercise of these rights can be carried out by communicating to the Data Controller and to the Data Protection Officer whose contact details are indicated in the appropriate section of this information.


Interested parties who believe that the processing of personal data referring to them carried out through this site is in violation of the provisions of the Regulations have the right to lodge a complaint with the Italian Data Protection Authority, as required by art. 77 of the Regulation itself, or to take it to the appropriate judicial offices (Article 79 of the Regulation) which can be contacted at or via the website