Last updated: September 2026
This document is also available in Italian, French, German, Spanish, Chinese and Russian. In case of any discrepancy, the Italian version prevails.
This notice is provided under art. 13 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, to users visiting the website bozzeweb.zapto.org ("the Site").
1. Data controller
Valle del Diaterna
Mugello, Florence — Tuscany, Italy
The Site is a non-commercial informational project dedicated to promoting the Valle del Diaterna, in the Mugello area of Florence, for tourism and culture.
No Data Protection Officer (DPO) has been appointed: none of the cases set out in art. 37 GDPR applies, as the Site is not a public authority, carries out no large-scale systematic monitoring and processes no special categories of data.
2. Types of data processed
2.1 Browsing data
In the course of their normal operation, the computer systems and software procedures that run the Site acquire certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be linked to identified individuals, but by its very nature it could, through processing and association with data held by third parties, make it possible to identify users. This category includes the IP addresses or domain names of the computers used by visitors, the URI addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file returned, the numerical code indicating the status of the server's response, and other parameters relating to the user's operating system and computing environment. This data is used only to obtain anonymous statistics on use of the Site and to check that it is working correctly, and is deleted immediately after processing. The data could be used to establish liability in the event of hypothetical computer offences against the Site.
2.2 Content loaded from external servers (webcams)
The Webcam section shows images that the user's browser downloads directly from the servers of www.meteosestola.it and stazioni.meteoproject.it, which operate the valley's cameras. Those servers therefore receive the user's IP address and the technical data of the request, exactly as happens when visiting any website.
Checked on 8 September 2026: those domains do not set any cookie, and these are plain images, not iframes, so they cannot run code inside the Site. The controller has no control over the processing carried out by those providers: to learn about it, consult their respective privacy notices.
The numerical weather data, by contrast, is requested by the Site's server and not by the browser: in that case what leaves the Site is the server's IP address, not the visitor's.
2.3 Data provided voluntarily
The Site has no contact forms, registration forms or restricted areas. No personal data voluntarily provided by users is therefore collected.
2.4 User preferences
The Site stores in the browser's localStorage the language chosen by the user (diaterna_lang) and the cookie preferences (cookie_consent). This data stays entirely on the user's device and is not transmitted to the server or to third parties.
3. Purposes and legal basis of the processing
- Delivering the service — legitimate interest (art. 6.1.f GDPR): allowing correct browsing and use of the Site's content. Contractual necessity (art. 6.1.b) is not invoked, because no contract is concluded between the Site and the visitor.
- Security — legitimate interest (art. 6.1.f GDPR): to detect and prevent fraudulent or unlawful activity
No automated decision-making. The Site carries out no profiling and no automated decision-making within the meaning of art. 22 GDPR.
4. Recipients of the data and transfers to third countries
Recipients. Browsing data are processed by the hosting provider that hosts the Site, as a processor appointed under art. 28 GDPR, solely for the technical operation of the server. There are no other recipients: data are not communicated, transferred or sold to third parties, nor disseminated. The two webcam providers mentioned in 2.2 do not receive data from the Site: it is the user's browser that contacts them directly, and for that processing they act as independent controllers.
The Site does not deliberately transfer personal data to third countries. Its typefaces and images are hosted directly on its own server, and the map is reachable only through an external link. The exception is the webcam images described in section 2.2, which the browser downloads from two Italian servers (www.meteosestola.it and stazioni.meteoproject.it): even in that case the data does not leave the European Union.
5. Retention period
- Browsing data: deleted immediately after anonymous statistical processing
- localStorage preferences:
diaterna_lang(language) andcookie_consent(banner) are kept in the user's browser until manually cleared; maximum 12 months
6. Rights of the data subject
Under arts. 15-22 GDPR, the user has the right to:
- Access their personal data (art. 15)
- Obtain rectification of inaccurate data (art. 16)
- Obtain erasure of the data (art. 17)
- Object to the processing (art. 21)
- Obtain restriction of the processing (art. 18)
- Withdraw consent at any time (art. 7.3), without affecting the lawfulness of processing based on consent given before the withdrawal
- Lodge a complaint with the Italian Data Protection Authority, the Garante (www.garanteprivacy.it)
To exercise their rights, users may write to the Controller at privacy@example.com. The Controller replies within one month of receiving the request, as provided by art. 12.3 GDPR.
7. Cookies and tracking
For detailed information on the cookies used by the Site, see the Cookie policy.
8. Changes to this notice
The controller reserves the right to amend this notice at any time. Changes will be published on this page together with the date of the update. Users are therefore invited to check this page regularly.