toscanaovunquebella.it is the official portal of "Toscana, Ovunque Bella” (“Tuscany, Beautiful Everywhere”), a crowd (sourced) storytelling project aiming to showcase Tuscany in a new, shared way, offering municipalities the chance to write their own stories, they’ll all combine to illustrate the boundless beauty of Tuscany.
toscanaovunquebella.it was created and is managed by the Fondazione Sistema Toscana (hereafter also “FST”), a legally recognized private entity and in-house provider of the Region of Tuscany, and a tool for carrying out the following institutional aims:
a) development of digital communication for the valorization and promotion of cultural heritage and activities, research and innovation, information society and knowledge;
b) promotion of the integration between cultural offerings and tourism offerings;
c) promotion and diffusion of film and audiovisuals and educational initiatives;
d) film commission activities;
e) promotion and valorization of Tuscan identity and development of youthful policies and rights.
In compliance with national legislation (Legislative Decree 30 June 2003 n.196, Code regarding the protection of personal data) and community law (European regulation for the protection of personal data n. 679/2016, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe upon the rights of users.
The Data Controller pursuant to the laws in force is:
Regione Toscana - Giunta regionale
Piazza Duomo, 10
The Data Processor, responsible for the processing of the data, by appointment of the Data Controller, pursuant to the laws in force is:
Fondazione Sistema Toscana
Via Duca d’Aosta, 9
The Data Protection Officers (DPOs) of the Data Controller and of the Data Processor can be reached at the following e-mail addresses:
Data Protection Officer of the Regione Toscana - Giunta regionale (regional council): firstname.lastname@example.org
Data Protection Officer of Fondazione Sistema Toscana: email@example.com
This site (hereafter also “Application”) processes data based on consent.
The provision of data and therefore consent to the collection and processing of data is optional, the user can deny consent, and can revoke a consent already provided at any time. However, denying consent may make it impossible to provide some services and the browsing experience on the website may be compromised. Starting from 25 May 2018 (date of entry into law of the GDPR), this website can process data based on the legitimate interests of the Data Controller.
Through the creation/authentication of their own account on toscanaovunquebella.it authorized users (municipalities referents) provide FST with their common personal identification data (name and surname, e-mail, telephone number, role, office, municipality).
Creating/authenticating his own account on Toscana Ovunque Bella the authorized user (municipality referent) irrevocably accepts the conditions set out in this policy, providing explicit consent to the use of the content and data supplied for the purposes and in the manner laid down, as required by this policy.
Not assuming, FST, any responsibility for the content provided, the user by registering/authenticating at Toscana Ovunque Bella guarantees FST to have obtained the consent of the subjects to whom the data and/or images refer for the aforementioned purposes, holding FST harmless and indemnified from any consequences, damages and claims in this regard.
toscanaovunquebella.it brings together texts and multimedia (texts, images, sounds, video clips, graphics, logos, audiovisuals, etc., henceforth known as “content”) for aforementioned purposes.
The content is produced by:
All content (texts, photos, graphics, audio and video materials, logos, images, links, etc.) provided by registered / authenticated users of Toscana Ovunque Bella (municipalities referents) are submitted by registered / authenticated users in a completely autonomous way and under their full and exclusive responsibility (it is forbidden in any case to submit sensitive / particular data, i.e. data relating to health, race, ethnicity etc. as well as to submit / publish photos / images of minors). The inclusion of such contents does not imply the approval or endorsement by FST, which does not carry out any type of control on the origin, authorship or legitimacy of the contents but a mere subsequent check of lawfulness with respect to contents that clearly concretize offences to human dignity and freedom, as well as to inherence with the aims and objectives set.
FST, therefore, is not responsible, by way of example and not limited to, for the legality, truthfulness and / or correctness of such contents, nor for the legitimacy of origin in compliance with industrial and / or intellectual property rights or privacy regulations. nor is he liable for their possible opposition to other principles that go beyond the obvious opposition to human dignity and freedom.
All content providers, participating in initiatives of Toscana Ovunque Bella, expressly accept the following legal conditions:
1. They declare and guarantee that they are the sole owners of the authors’ rights to the content (either because they themselves are the authors of the content or because they purchased the rights to use and reproduce it from its legitimate owners); they therefore guarantee FST the content provided, as concerns the legitimacy, veracity, accuracy and legitimate provenance regarding the rights of industrial and/or intellectual property or the laws related to privacy.
2. They declare and guarantee that the content does not contain images that are offensive, disrespectful or harmful to human dignity and a common sense of decency or that they bear prejudice towards someone or something (including in the form of suspicion or threat). The content must not be discriminatory or incite among the public illegal acts, violence or hate based on religion, skin colour or national or ethnic origin. FST is held harmless of any adverse consequence connected to a violation of this ban.
3. They declare and guarantee that the content does not include specific information regarding health, race, ethnicity, etc. and that they are submitted with the full responsibility of the providers, with FST limited – for content not produced by its own staff – to simply checking the legitimacy in protection of personal dignity and freedom.
All the content is protected by current laws regarding authors’ rights and intellectual property, and, therefore, unauthorized reproductions, use of content and/or making the content available to the public (even through file-sharing) is not allowed. Anyone who violates this ban is subject to civil and criminal penalties in accordance with the law.
This type of service allows you to view and interact with content hosted on external platforms directly from the pages of this site.
In the event that a service of this type is installed, it is possible that, even if users do not use the service, it collects traffic data relating to the pages in which it is installed.
Google Fonts (Google, Inc.)
Google Fonts is a font style visualization service managed by Google, Inc. that allows this site to integrate such content within its pages.
Font Awesome (Fonticons, Inc.)
Font Awesome is a font style visualization service managed by Fonticons, Inc. that allows this site to integrate such content within its pages.
Widget Google Maps (Google, Inc.)
Google Maps is a map display service managed by Google, Inc. that allows this site to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
toscanaovunquebella.it may contain links to other websites or social media that are not necessarily under the control of the Data Controller and of the Data Processor.
The user is encouraged to carefully read the conditions and terms of operation and use of these sites. The Data Controller and the Data Processor do not assume responsibility either for the unauthorized use of user's data or for any further monitoring or profiling that may be carried out by the aforementioned sites.
toscanaovunquebella.it uses log files which conserve data collected automatically during a visit to the website. The data collected could be the following:
To ensure security (antispam filters, firewall, survey of viruses), the data registered automatically could be used, in accordance with the relevant current laws, to block attempts to damage the website or other users, as well as damaging or criminal activities. Such data are never used for identifying and profiling the user, but are only intended to safeguard the website and its users (since May 25, 2018, data may be processed on the basis of the legitimate interests of the Data Controller pursuant to current regulations).
The data collected from the website during its operation are used exclusively for the aims indicated and are conserved for the time necessary for carrying out precise activities or, if applicable, until there is a cancellation request for accounts registered to the website. The data collected from the website will never be passed to third parties for any reason, unless there is a legitimate request from judicial authorities and only in cases allowed by law.
By accessing and navigating the website, users accept that the aforementioned data are processed for the previously-mentioned purposes of IT security and preventing illegal activities. The user can request that their data be cancelled and/or exercise their rights as protected by current laws.
The data can be processed at the Data Center ex TIX (Tuscany Internet Exchange), Via San Piero a Quaracchi n. 250 - Florence, now part of the Sistema Cloud della Toscana (SCT - Tuscany Cloud System) and at Hetzner Online GmbH, Industriestr. 25 - 91710, Gunzenhausen, Germany. In compliance with community law (European Regulation for the protection of personal data 2016/679, Art. 28, par. 3), organizations who process personal data on behalf of Data Controller or Data Processor have been appointed as Data (Sub-)Processors, to ensure compliance with the requirements of the Regulation.
Session cookies are essential for distinguishing connected users, and are useful for ensuring that a requested function not be provided to the wrong user, as well as for security purposes so as to avoid damaging attacks on the website. Session cookies do not contain personal data and last only as long as the session does, that is, until the browser is closed. Consent is not needed for them.
Functionality cookies used by the website are strictly necessary for operating the site; they are those connected to a user’s request for a specific function (like login), for which consent is not needed).
Deleting cookies does not preclude use of the site.
Users / visitors can set the computer browser to accept / reject all cookies or display a warning every time a cookie is proposed, in order to evaluate whether to accept it or not.
By default, almost all web browsers are set to automatically accept cookies.
Users / visitors can still change the default setting, or disable cookies (i.e. block them permanently), by setting the highest level of protection in the browser, however, disabling them can compromise the use of site functions.
In any case, it remains possible to delete or remove cookies from your device, using the appropriate functions present in the browser. Deleting the cookies does not preclude the use of the site, but involves the repetition of the authentication procedure, or the re-submission of the access credentials.
There are also components (plugins) for the most popular browsers that allow:
toscanaovunquebella.it may include the tools Google Analytics and Tag Manager for monitoring access to the website (number of accesses, new users, number of sessions, visualizations of a page, type of device and browser, etc.) and receiving information regarding user behaviour on the website (referral, duration of sessions, bounce rate, etc.) for statistical and market study purposes. FST does not collect users’ personal data because the information related to accessing the website and user behaviour are provided by Google Analytics and Tag Manager in an aggregated and non-personalized/anonymous form. However, FST does not respond to the processing of data collected by Google Inc. through Analytics and Tag Manager. Google could use, unbeknownst to FST, personal data for contextualizing and personalizing advertisements on their marketing network. Information about the two Google tools used are as follows:
The collection and use of data obtained via the plugin are regulated according to the related privacy policies of the social networks, which users are advised to refer to.
toscanaovunquebella.it’s code may contain Facebook Pixel, a tool for collecting statistical data that allows website managers to measure the effectiveness of their advertising by understanding the actions people take on their websites.
Facebook installs cookies for analyzing and improving advertising through remarketing activities in order to send users messages in line with their interests. Remarketing helps reach users who have visited the websites.
With the aim of increasingly responding to the needs of those using the website, toscanaovunquebella.it uses HotJar, a monitoring tool that allows for the analysis of user behaviour, acquiring information about actions, such as clicks, taps, page scrolling, mouse movements, etc.. The data is collected in such a way that it is not traced to the user.
HotJar is a service provided by Hotjar Ltd.
Periodically, staff may use SEMrush and Sprout Social, digital marketing tools that allow for the processing of statistics regarding the performance of the website’s content on social media channels tied to the digital promotion of tourism in Tuscany.
Semrush is a service provided by Semrush Inc. and the subsidiary SEMrush CZ s.r.o.
Sprout Social is a service provided by Sprout Social, Inc.
Visitors / users filling out the forms available on toscanaovunquebella.it authorize FST to process their personal submitted data to respond to requests for information or anything else indicated by the subject of the form.
Personal data collected: common data and e-mail addresses
Communications are sent via e-mail to those who specifically fill out the dedicated form and authorize FST to process users’ personal data. Providing this data is optional, but by refusing to provide personal data, the user will be unable to send data via form.
First access: when accessing the website for the first time, users will see a message that gives them the option of accepting or refusing the use of technical and profiling cookies of third parties on the part of toscanaovunquebella.it. By providing their consent, users authorize Data Controller and Data Processor to use all the tools listed in this policy for the purposes described and for the type of personal data indicated.
Geolocation: when accessing some pages of the website for the first time, users will see a message that gives them the option of accepting or refusing the geolocation of their own device, via GPS, mobile network, or IP address, on the part of toscanaovunquebella.it. By providing their consent, users authorize Data Controller and Data Processor to use all the tools listed in this policy for the purposes described and for the type of personal data indicated.
Contact form: by filling in their personal data on contact forms accessible on toscanaovunquebella.it, users authorize their use for the purposes of responding to requests for information or anything else indicated in the form’s header. In all cases, the user fully accepts the policy of toscanaovunquebella.it and all the websites/subdomains attributable to toscanaovunquebella.it.
This site processes user data in compliance with legal requirements, taking appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. The data processing is carried out using IT and / or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller and Data Processor, in some cases, categories of employees (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) may have access to the data) appropriately appointed in compliance with current regulations.
In accordance with EU Regulation 679/2016 (GDPR) and national legislation, users can, within the procedures and limits provided by current law, exercise the following rights:
Requests can be addressed to the Data Controller and the Data Processor.
In cases in which data are processed based on legitimate interests, the rights of interested parties are nonetheless guaranteed (except the right of portability, which is not required by current laws), especially the right to oppose processing, which can be applied by sending a request to the Data Controller and the Data Processor.