Privacy Policy

Last updated: October 13, 2026

This policy describes how the personal data of users visiting the website www.cci.tn.it (hereinafter “the Website”) is processed. The Website is managed by the Centro per la Cooperazione Internazionale (CCI), based at Vicolo San Marco, 1 – 38122 Trento, Italy (hereinafter “the Data Controller”).

This policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data Controller

Centro per la Cooperazione Internazionale (CCI)
Registered office: Vicolo San Marco, 1 | 38122 Trento, Italy
Tel. +39 0461 1828600
E-mail: info@cci.tn.it
PEC (certified e-mail): cci.tn@pec.it

2. Data collected and purposes

2.1 Browsing data

The IT systems used to operate the Website collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, requested page). These data are used solely to ensure the security and proper functioning of the Website; they are kept in the server logs for a limited period, after which they are deleted.

2.2 Usage statistics

The Website uses Plausible Analytics (Plausible Insights OÜ, Estonia), a web analytics service that does not use cookies and does not collect personal data: statistics are aggregated and anonymous, and data are processed on servers located in the European Union. For more information: plausible.io/data-policy.

2.3 E-mail communications

If the user writes to the e-mail addresses shown on the Website, the data contained in the message (e-mail address, name and any other information) are used solely to answer the request. Processing is based on the user’s request (Art. 6.1.b GDPR).

3. Cookies and tracking technologies

3.1 Technical cookies

The Website uses only technical cookies necessary for its operation, for which user consent is not required (Art. 122 Italian Legislative Decree 196/2003 and Italian Data Protection Authority Guidelines of 10 June 2021):

  • WPML language cookie (wp-wpml_current_language): stores the language in which the Website is being viewed.
  • Deflect cookie (deflect_session): technical cookie of the service that protects the Website from attacks and automated traffic (see section 5).
  • WordPress session cookies: set only for users who log in to the Website’s reserved area.

3.2 No profiling cookies

The Website does not use profiling cookies, advertising cookies or third-party tracking tools. No user profiling takes place. For this reason the Website does not display a cookie consent banner.

4. Embedded third-party content

Some pages of the Website contain content embedded from external services that may set cookies or collect data. To protect users’ privacy, the Website uses a “click-to-load” mechanism: instead of the content, a preview with a button is displayed, and the content is loaded from the external service only after the user explicitly clicks. The service concerned is:

  • YouTube (Google LLC) – videos, loaded through the youtube-nocookie.com domain (privacy-enhanced mode)

Before the user clicks, no data are transmitted to the service. After the click, YouTube may collect data according to its own privacy policy: Google (YouTube). The same mechanism applies to any other external services (e.g. Vimeo, Google Maps, X/Twitter) that may be embedded in the future.

5. Hosting and protection of the Website

The Website is hosted on servers of Hetzner Online GmbH in Germany. Traffic to the Website passes through Deflect (eQualitie Inc., Canada), a not-for-profit service protecting civil society organisations and independent media from cyberattacks, which processes technical browsing data (IP address, HTTP requests) as data processor. Processing is based on the Data Controller’s legitimate interest in the security and availability of the Website (Art. 6.1.f GDPR). Canada is recognised by the European Commission as a country ensuring an adequate level of data protection. For more information: Deflect privacy policy.

6. Legal basis for processing

  • Technical cookies, browsing data and protection of the Website: the Data Controller’s legitimate interest in the operation and security of the Website (Art. 6.1.f GDPR).
  • E-mail communications: steps taken at the request of the data subject (Art. 6.1.b GDPR).
  • Third-party content loaded on request: the user’s consent, expressed by clicking the load button (Art. 6.1.a GDPR).

7. Transfer of data outside the EU

YouTube is a service of Google LLC, based in the United States. Data are transferred only after the user clicks the load button, on the basis of the EU-U.S. Data Privacy Framework or, where applicable, of the standard contractual clauses adopted by the European Commission. Deflect is based in Canada, a country covered by an adequacy decision of the European Commission.

8. Retention period

  • Browsing data are kept in the server logs for a limited period, as necessary for the security of the Website, and then deleted.
  • E-mail messages are kept for as long as necessary to handle the request.
  • Technical cookies last for the duration of the session or in any case no longer than 12 months.

9. Rights of the data subject

Under Articles 15-22 of the GDPR, the user has the right to:

  • access their personal data;
  • obtain their rectification or erasure;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Requests can be sent to: webmaster@cci.tn.it.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country in which they reside.

10. Changes to this policy

The Data Controller reserves the right to amend this policy at any time. The date of the last update is shown at the top of the page.