In compliance with the provisions of and by effect of Art. 13 of the Legislative Decree of 30 June 2003, the company Fondazione Destination Florence Convention & Visitors Bureau, with its registered office in Florence (50124), Via del Tiratoio 1, in its quality of Controller, informs those concerned as to the purposes and method of processing the personal data collected, their sphere of communication and dissemination, as well as the nature of their release.

PURPOSE

The personal, identification and computer data collected from the subjects of the processing, used directly to comply with their request for the newsletter and their registration on the mailing list regarding information messages and business and sales in relation to the Controller’s activity, in full compliance with the principles of lawfulness and fairness and the statutory provisions.

DATA PROCESSING METHOD

Data are processed using information technology procedures, telematic means and the remainder on paper by the personnel purposely engaged and also external professionals who may be appointed, also based on extant contractual agreements. The data are stored in computer archives, telematically and the remainder on paper, with full assurance of the safety and security measures required by law.

COMMUNICATION AND DISCLOSURE

Personal data will not be disclosed by the Controller. Communication to third parties, other than the Controller, by data processors, whether internal or external to the corporate structure, and by the persons in charge of data processing, identified and appointed respectively, pursuant to Art. 29 and 30 of Legislative decree no. 196/2003 and subsequent amendments and additions, is envisaged where necessary for pursuing the indicated purposes and in any case within the limits of the same, to third parties and companies, including legal or sector advisers, supply companies and technical and computer science companies, engaged in the correct and regular pursuit of the purposes described. In any case, processing by third parties must be performed correctly and in compliance with the current laws.

DATA SUBJECT'S RIGHTS

The data subject can assert their rights as expressed in Art. 7, 8, 9 and 10 of Legislative decree no.196 of 30 June 2003 . In particular, pursuant to Art. 7 the data subject can obtain confirmation of the existence or otherwise of the personal data concerning them, even if not yet registered, and their notification in an intelligible form. The data subject has the right to obtain the indication: a) of the origin of their personal data; b) of the purposes and method of processing; c) of the logic applied in case of processing with the aid of electronic instruments; d) of the identification details of the controller, the data processors and the designated representative according to para. 2 of article 5; e) of the subjects or the categories of subjects to whom the personal data can be communicated or who can acquire knowledge thereof as designated representative in the territory of the State, of data processors or persons appointed. The data subject has the right to obtain: a) the updating, the rectification or, when necessary, completion of the data; b) the cancellation, transformation into anonymous form or the blockage of the data processed in breach of the law, including those which do not need to be stored in relation to the purposes for which the data have been collected or subsequently processed; c) the certification that the operations as per letters a) and b) have been brought to the knowledge, also as regards their content, of those to whom the data have been communicated or disseminated, except for the case in which such implementation proves impossible or involves the use of means manifestly disproportionate to the protected right. The data subject has the right to object, totally or partially: a) for legitimate reasons, to the processing of their personal data, even if relevant to the purpose of collection; b) to the processing of personal data that regard them for the purpose of sending advertising material or direct sale or for the fulfilment of market research or marketing communications.

CONTROLLER AND DATA PROCESSORS

The Controller is the company Fondazione Destination Florence Convention & Visitors Bureau, with its registered office in (50124) Florence, Via del Tiratoio 1. An updated list of the data processors, appointed by the Controller, pursuant to Art. 29 of legislative decree 196/2003, is available at the Controller’s registered office. For any communication under Art. 7 and foll. of Legisl. decree no. 196/2003 and subsequent amendments and additions, the Controller provides the address: info@conventionbureau.it.

PERIOD OF PRESERVATION

The data will be stored in compliance with the law, as specified in the provision of 3 March of the antitrust authority for the protection of personal data, and however except for the data subject's opposition to the processing. Opposition to the processing can be espressed independently by the data subject for either method of submisssion.

NATURE OF THE RELEASE AND CONSEQUENCES OF THE REFUSAL TO RESPOND

The release of the data is optional. However, refusal to respond entails the impossibility for the Controller to respond to the request to send the newsletter.

CONSENT

According to Art. 23 of Legislative decree 196/2003, consent to the processing of the above data is necessary in that they are collected outside previous contractual agreements and for the sending of the newsletter with regard to business and sales communications. It is to be noted that the consent is considered to be freely given by ticking the box I give my consent . Failure to give consent means you will not be able to register for the newsletter.

GIVING CONSENT

In relation to the information supplied and specifically as regards the purposes of processing in relation to receipt of the newsletter relating to information messages and business and sales communications,

I GIVE MY CONSENT, consequently the Controller will send promotional and commercial messages, as specified above.