ERIAFF Privacy and Cookie Policy

Privacy and Cookie Policy

ERIAFF official website

ERIAFF is an informal network of regional authorities founded in 2012 in Florence, Italy. Today, it brings together member regions and observers from several European countries, fostering collaboration on shared priorities in agriculture, food and forestry innovation.

ERIAFF empowers its members to:

• drive innovation in agriculture, food and forestry by aligning with EU policies;
• enhance the European Innovation Partnership (EIP AGRI) by facilitating knowledge exchange and stakeholder connections across regions;
• develop interregional projects and EIP AGRI Operational Groups.

The Coordination Committee steers ERIAFF’s strategic direction, including:

• planning the network’s main activities, such as the Annual Conference meetings;
• establishing new working groups;
• organizing technical meetings;
• supporting working groups in their activities.

The website eriaff.com is created and managed by Fondazione Sistema Toscana (hereinafter also referred to as “FST”), an in-house providing body of Regione Toscana.

Privacy Notice

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation on the protection of personal data, this document describes the methods and purposes of the processing of personal data carried out through the ERIAFF official website.

This notice applies exclusively to the online activities of this website and does not apply to external websites accessible through links.

1. Data Controller and Data Processor

The Data Controller is:

Regione Toscana – Regional Government
Piazza Duomo n. 10
50122 Florence, Italy

The Data Processor, appointed pursuant to Article 28 GDPR, is:

Fondazione Sistema Toscana
Via Duca d’Aosta n. 9
50129 Florence, Italy

2. Data Protection Officers (DPO)

The Data Protection Officers (DPOs) may be contacted at the following email addresses:

• Regione Toscana – Regional Government: urp_dpo@regione.toscana.it
• Fondazione Sistema Toscana: dpo@fst.it

3. Legal Basis for Processing

Data are processed for institutional purposes and for the performance of tasks carried out in the public interest related to the activities of Regione Toscana and the ERIAFF network, pursuant to Article 6(1)(e) GDPR.

Where required by applicable law, any processing related to analytics cookies or similar non-technical tools is carried out subject to the user’s prior consent expressed through a dedicated banner.

4. Types of Data Processed

The website may process:

• browsing and technical data, such as IP addresses, access logs, online identifiers, browser information and device-related information;
• professional and contact data relating to ERIAFF network members and participants, published for institutional and informational purposes;
• data collected through cookies and analytics tools.

The website does not provide user registration features nor profiling activities.

5. Purposes of Processing

Data are processed in order to:

• ensure the proper functioning and security of the website;
• allow browsing and consultation of website content;
• produce aggregated statistics concerning website usage;
• promote the institutional and informational activities of the ERIAFF network;
• publish professional contact details and information concerning network members and participants.

6. Processing Methods

Personal data are processed using electronic and telematic tools in compliance with the principles of lawfulness, fairness, transparency, data minimisation and security established by the GDPR.

Appropriate technical and organisational measures are adopted to ensure the protection of processed personal data.

7. Display of Content from External Platforms

The website may integrate services and content provided by third parties.

Google Fonts

Font display service provided by Google Ireland Limited / Google LLC.

Processed data: usage data and technical browsing data.
Place of processing: EU / United States.

Font Awesome

Icon and graphic style display service provided by Fonticons Inc.

Processed data: usage data and technical browsing data.
Place of processing: United States.

Google Maps

Map display service provided by Google Ireland Limited / Google LLC.

Processed data: cookies and usage data.
Place of processing: EU / United States.

8. Links to External Websites

The website may contain links to external websites or social media platforms not managed by the Data Controller or the Data Processor.

Users are invited to consult the relevant privacy and cookie policies of any external websites they may visit.

9. Browsing Logs and Security

The website uses log files in which information automatically collected during browsing activities may be recorded, including:

• IP address;
• browser type;
• Internet service provider;
• date and time of access;
• visited pages;
• referring or exit pages.

Such data are used exclusively for security purposes, technical maintenance, monitoring of the correct functioning of the website and prevention of unlawful or harmful activities.

10. Place of Processing

Data are processed at the former TIX Data Center (Tuscany Internet Exchange), Via San Piero a Quaracchi n. 250 – Florence, now part of the Tuscany Cloud System (Sistema Cloud Toscana – SCT).

Cookie Policy

11. Cookies

The website uses technical cookies necessary for the proper functioning of web pages and related services.

The website also uses web traffic statistical analysis tools through Google Analytics (Google Analytics 4).

Cookies and analytics tools may collect information relating to users’ browsing activities, such as:

• IP address;
• online identifiers;
• browser and device information;
• statistical data relating to visits and website usage.

Data processed through Google Analytics are used in aggregated form and, where possible, anonymised.

12. Google Analytics and Google Tag Manager

Google Analytics

Google Analytics 4 is a web analytics service provided by Google Ireland Limited / Google LLC and used to collect aggregated statistics regarding website usage.

Processed data:

• cookies;
• usage data;
• online identifiers;
• technical browsing data.

Place of processing: EU / United States.

Processing activities carried out through Google services are governed by the provider’s terms and privacy policies.

Google Tag Manager

Google Tag Manager is a tag management system used to implement and manage tools and services on the website.

Google Tag Manager does not directly collect users’ personal data but enables the activation of other services that may process data.

13. Cookie Consent Management

Upon first access to the website, a dedicated banner is displayed allowing users to:

• accept cookies;
• reject non-technical cookies;
• customise their preferences.

Preferences may be modified at any time through the dedicated link available in the website footer.

Users may also manage or disable cookies through their browser settings.

Disabling cookies may limit certain website functionalities.

14. Data Retention

Browsing data are retained for the time strictly necessary for the functioning of the website, cybersecurity purposes and the production of aggregated statistics.

Professional and contact data published on the website are retained for the duration of participation in the ERIAFF network activities or until they are updated or removed.

15. Data Subjects’ Rights

Data subjects may exercise the rights provided for by Articles 15–22 GDPR, including:

• right of access;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
• right to lodge a complaint with a supervisory authority.

Requests may be addressed to the Data Controller or the Data Processor using the contact details indicated above.

16. Supervisory Authority

Data subjects have the right to lodge a complaint with the Garante per la protezione dei dati personali pursuant to Article 77 GDPR.

17. Updates

This Privacy and Cookie Policy was updated on 7 May 2026.