1. Data Controller
The Data Controller of personal data is:
Municipality of Vaglia (FI)
VAT No.: 00864490487
Registered office: P.zza Corsini n. 3, 50036 Vaglia (FI), Italy
Email: affarigenerali@comune.vaglia.firenze.it
PEC: comune.vaglia@postacert.toscana.it
For matters relating to personal data protection:
📧 privacy@comune.vaglia.firenze.it
2. Principles applicable to processing
The processing of personal data is carried out in compliance with the principles set out in Art. 5 of the GDPR: lawfulness, fairness, transparency, data minimization, integrity, and confidentiality.
3. Types of data processed
3.1 Browsing data
Computer systems automatically acquire certain personal data, including:
- anonymized IP address
- date and time of the request
- requested URL
- HTTP status code
- browser type and operating system
- pages visited and time spent on the site
3.2 Absence of voluntary provision of data
The website:
- does not provide user registration
- does not include contact forms
- does not allow users to enter data
Therefore, no identifying data (e.g. name, email, telephone number) are collected.
3.3 Data collected through analytics tools
The website uses Matomo Analytics configured in privacy mode:
- anonymized IP
- no profiling
- no sharing with third parties
- data processed exclusively in aggregated form
3.4 Geolocation features
The website uses interactive maps through the Leaflet library with OpenStreetMap data.
Any geolocation:
- is managed by the user’s browser
- is not stored by the Data Controller
- is not transmitted to the Data Controller’s servers
4. Purpose and legal basis of processing
Data are processed for:
| Purpose | Legal basis |
|---|---|
| Technical functioning of the website | Art. 6(1)(e) GDPR – task carried out in the public interest |
| Anonymous statistical analysis | Art. 6(1)(e) GDPR |
| IT security and abuse prevention | Art. 6(1)(e) e 6(1)(c) GDPR |
Processing is carried out within the institutional functions of the Authority, in compliance with the Digital Administration Code and AgID Guidelines.
5. Methods of processing
Processing is carried out using IT tools, with logic strictly related to the stated purposes and by adopting appropriate technical and organizational measures.
6. Data recipients
Data may be processed by:
- authorized municipal staff
- technical service providers (hosting, maintenance), appointed as Processors pursuant to Art. 28 GDPR
For mapping services:
- OpenStreetMap
- Waymarked Trails
7. Data transfer
- Data processed through Matomo are not transferred outside the EU.
- For external mapping services, any transfers depend on the respective providers.
8. Data retention
- Analytics data (Matomo): 365 days
- Technical security logs: up to 180 days, unless required for investigations
9. Security of processing
The Data Controller adopts measures pursuant to Art. 32 GDPR, including:
- HTTPS protocol
- server protection systems
- access monitoring
- software updates
- caching and optimization systems (LiteSpeed Cache)
10. Rights of data subjects
Data subjects may exercise the rights provided for in Arts. 15–22 GDPR:
- access
- rectification
- erasure
- restriction
- objection
A complaint may also be lodged with the Italian Data Protection Authority.
11. How to exercise rights
Requests should be sent to:
📧 privacy@comune.vaglia.firenze.it
📧 PEC: comune.vaglia@postacert.toscana.it
12. External links
The website may contain links to external websites. The Data Controller is not responsible for the related processing activities.
13. Updates
This privacy notice may be subject to changes. The updated version is always published on this page.