Privacy Policy

Last updated: October 13, 2026

This policy describes how the personal data of users visiting the website www.europeandatajournalism.eu (hereinafter “the Website”) is processed. The Website is managed by the Centro per la Cooperazione Internazionale (CCI), based at Vicolo San Marco, 1 – 38122 Trento, Italy (hereinafter “the Data Controller”).

This policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data Controller

Centro per la Cooperazione Internazionale (CCI)
Registered office: Vicolo San Marco, 1 | 38122 Trento, Italy
Tel. +39 0461 1828600
E-mail: info@cci.tn.it
PEC (certified e-mail): cci.tn@pec.it

2. Data collected and purposes

2.1 Browsing data

The IT systems used to operate the Website collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, requested page). These data are used solely to ensure the security and proper functioning of the Website; they are kept in the server logs for a limited period, after which they are deleted.

2.2 Usage statistics

The Website uses Plausible Analytics (Plausible Insights OÜ, Estonia), a web analytics service that does not use cookies and does not collect personal data: statistics are aggregated and anonymous, and data are processed on servers located in the European Union. For more information: plausible.io/data-policy.

2.3 Newsletter

Subscription to the EDJNet newsletter is managed through Mailchimp (Intuit Inc., United States), using the form on the Contact page or the form hosted directly by Mailchimp. The user voluntarily provides their e-mail address and, optionally, their name and organisation. Data processing is based on the user’s consent; the user can unsubscribe at any time through the link included in every newsletter. For more information: Intuit Mailchimp privacy statement.

2.4 Requests sent through the form (Help Desk)

Some pages of the Website contain a form through which users can send a question by providing their e-mail address, a category and the text of the request. The data are stored on the Website’s server, used solely to answer the request and automatically anonymised after 24 months. Processing is based on the user’s request (Art. 6.1.b GDPR). Neither the IP address nor the browser of the person submitting the form is recorded.

3. Cookies and tracking technologies

3.1 Technical cookies

The Website uses only technical cookies necessary for its operation, for which user consent is not required (Art. 122 Italian Legislative Decree 196/2003 and Italian Data Protection Authority Guidelines of 10 June 2021):

  • WPML language cookie (wp-wpml_current_language): stores the language in which the Website is being viewed.
  • Deflect cookie (deflect_session): technical cookie of the service that protects the Website from attacks and automated traffic (see section 5).
  • WordPress session cookies: set only for users who log in to the Website’s reserved area.

3.2 No profiling cookies

The Website does not use profiling cookies, advertising cookies or third-party tracking tools. No user profiling takes place. For this reason the Website does not display a cookie consent banner.

4. Embedded third-party content

4.1 Content loaded on request

Some articles contain content embedded from external services that may set cookies or collect data. To protect users’ privacy, the Website uses a “click-to-load” mechanism: instead of the content, a preview with a button is displayed, and the content is loaded from the external service only after the user explicitly clicks. The services concerned are:

  • YouTube (Google LLC) – videos, loaded through the youtube-nocookie.com domain (privacy-enhanced mode)
  • Vimeo (Vimeo Inc.) – videos, loaded with the dnt=1 (Do Not Track) parameter
  • Spreaker (iHeart Media) – podcast player
  • X/Twitter (X Corp.) – embedded posts
  • Google Maps (Google LLC) – maps
  • Tableau Public (Salesforce Inc.) – interactive charts

Before the user clicks, no data are transmitted to these services. After the click, the external service may collect data according to its own privacy policy: Google (YouTube, Maps), Vimeo, Spreaker, X, Salesforce (Tableau).

4.2 Data visualisations

Many articles contain interactive charts and maps created with services that do not set profiling cookies: Datawrapper, Flourish, LocalFocus, Civio, OpenPolis, uMap/OpenStreetMap and visualisations published by EDJNet itself. This content is loaded directly with the page. To display it, the user’s browser contacts the servers of the service, which receive the technical connection data (e.g. the IP address); some of these services in turn load fonts from Google Fonts, and Flourish loads Google Analytics in a mode that does not store cookies. OpenPolis applies its own consent system to its measurement tools.

5. Hosting and protection of the Website

The Website is hosted on servers of Hetzner Online GmbH in Germany. Traffic to the Website passes through Deflect (eQualitie Inc., Canada), a not-for-profit service protecting civil society organisations and independent media from cyberattacks, which processes technical browsing data (IP address, HTTP requests) as data processor. Processing is based on the Data Controller’s legitimate interest in the security and availability of the Website (Art. 6.1.f GDPR). Canada is recognised by the European Commission as a country ensuring an adequate level of data protection. For more information: Deflect privacy policy.

6. Legal basis for processing

  • Technical cookies, browsing data and protection of the Website: the Data Controller’s legitimate interest in the operation and security of the Website (Art. 6.1.f GDPR).
  • Third-party content loaded on request: the user’s consent, expressed by clicking the load button (Art. 6.1.a GDPR).
  • Newsletter: the user’s consent (Art. 6.1.a GDPR).
  • Requests sent through the form: steps taken at the request of the data subject (Art. 6.1.b GDPR).

7. Transfer of data outside the EU

Some of the services listed above (Google, Vimeo, X Corp., Salesforce, Intuit Mailchimp) are based in the United States. For embedded content, the transfer only takes place after the user clicks; for the newsletter, at the time of subscription. The transfer is based on the EU-U.S. Data Privacy Framework or, where applicable, on the standard contractual clauses adopted by the European Commission. Deflect is based in Canada, a country covered by an adequacy decision of the European Commission.

8. Retention period

  • Browsing data are kept in the server logs for a limited period, as necessary for the security of the Website, and then deleted.
  • Technical cookies last for the duration of the session or in any case no longer than 12 months.
  • Data provided for the newsletter are kept until the user unsubscribes.
  • Data sent through the Help Desk form are kept for as long as necessary to handle the request and in any case no longer than 24 months, after which they are automatically anonymised.

9. Rights of the data subject

Under Articles 15-22 of the GDPR, the user has the right to:

  • access their personal data;
  • obtain their rectification or erasure;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Requests can be sent to: webmaster@cci.tn.it.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country in which they reside.

10. Changes to this policy

The Data Controller reserves the right to amend this policy at any time. The date of the last update is shown at the top of the page.