They've been using wifi/cellphone data to track tourists' flow for at least a couple of years.

What seems new is the control tower thingie (Orwellian af) and the tracking of the tourists' origin.

I somehow doubt that they do all of that without ever storing sensitive data/personal identifiers. Anyhow, I suspect some italian journalist is gonna send some FOIAs soon (: