Privacy Policy

Last updated: October 23, 2026
This policy describes how the personal data of users visiting the website www.balcanicaucaso.org (hereinafter “the Website”) is processed. The Website is managed by the Centro per la Cooperazione Internazionale (CCI), based at Vicolo San Marco, 1 – 38122 Trento, Italy (hereinafter “the Data Controller”).
This policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data Controller

Centro per la Cooperazione Internazionale (CCI)
Registered office: Vicolo San Marco, 1 | 38122 Trento, Italy
Tel. +39 0461 1828600
E-mail: info@cci.tn.it
PEC: cci.tn@pec.it

2. Data collected and purposes

2.1 Browsing data

The IT systems used to operate the Website automatically collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser type, operating system). These data are used solely to obtain anonymous statistical information on the use of the Website and to verify its proper functioning. The data are deleted immediately after processing.

2.2 Usage statistics

The Website uses Plausible Analytics, a privacy-friendly web analytics service. Plausible does not use cookies and does not collect personal data. For more information: plausible.io/data-policy.

2.3 Newsletter

Subscriptions to OBCT newsletters are managed through an external form provided by Brevo (formerly Sendinblue). Your email address and any optional information provided in the form, such as your first and last name, are used to manage your subscription and send the newsletters you request. The processing of personal data for sending newsletters is based on your consent under Article 6(1)(a) of the GDPR. You can withdraw your consent and unsubscribe at any time using the link included in every newsletter.

Anonymous statistics on email opens and clicks

Brevo’s anonymous email tracking feature is enabled for new newsletter sends. Messages may contain small images, known as pixels, that register an email open when images are loaded; links may also be used to measure clicks.

These measurements are used to obtain anonymous, aggregate statistics, monitor the service and improve email delivery. Opens and clicks are not associated with individual subscribers and are not used to create individual profiles or personalise messages based on their interactions.

Anonymous measurement of interactions is separate from the processing of email addresses needed to send the newsletter: anonymising statistics does not anonymise the subscriber list.

For more information about the service provider, see the Brevo privacy policy.

3. Cookies and tracking technologies

3.1 Technical cookies

The Website uses only technical cookies necessary for its operation, for which user consent is not required (Art. 122 Italian Legislative Decree 196/2003 and Italian Data Protection Authority Decision No. 229/2014):

  • WordPress session cookies: necessary for the CMS to function.
  • WPML language cookies: store the user’s language preference.
  • WP-Rocket cache cookies: optimise page loading performance.
  • Cloudflare cookie (__cf_bm): technical cookie for protection against automated bots.

3.2 No profiling cookies

The Website does not use profiling cookies, advertising cookies, or third-party tracking tools. No user profiling activities are carried out.

Newsletter statistics, which are separate from the technologies used while browsing the Website, are described in section 2.3.

4. Embedded third-party content

Some articles may contain multimedia content embedded from external services (videos, audio, interactive visualisations, maps, social media posts). To protect user privacy, the Website adopts a click-to-load mechanism: external content is not loaded automatically when the page is visited. A preview with a button is displayed; the content is loaded from the external service only after the user explicitly clicks.
The services involved are:

  • YouTube (Google LLC) – videos, loaded via the youtube-nocookie.com domain (enhanced privacy mode)
  • Vimeo (Vimeo Inc.) – videos, loaded with the dnt=1 parameter (Do Not Track)
  • Spreaker (iHeart Media) – podcast player
  • Twitter/X (X Corp.) – embedded tweets
  • Facebook (Meta Platforms Inc.) – embedded posts
  • SoundCloud (SoundCloud Ltd.) – audio player
  • Google Maps (Google LLC) – maps
  • Genially (Genially Web S.L.) – interactive content

Before the user clicks, no data is transmitted to these services. After clicking, the external service may collect data in accordance with its own privacy policy. Users are encouraged to consult the respective privacy policies:

The Website also hosts interactive visualisations from services that do not perform tracking (Flourish, LocalFocus, OpenPolis, Civio, KnightLab, Highcharts). This content is loaded directly without requiring prior consent.

5. Content Delivery Network (CDN)

The Website uses Cloudflare (Cloudflare Inc.) as a content delivery network to improve performance and security. Cloudflare may process technical browsing data (IP address, HTTP requests) as a data processor. Processing is based on the Data Controller’s legitimate interest (Art. 6.1.f GDPR) in the security and availability of the Website. For more information: Cloudflare privacy policy.

6. Legal basis for processing

  • Technical cookies and browsing data: the Data Controller’s legitimate interest in the operation of the Website (Art. 6.1.f GDPR).
  • Third-party content: user consent expressed by clicking the load button (Art. 6.1.a GDPR).
  • Sending newsletters: user consent (Article 6(1)(a), GDPR). Anonymous statistics on email opens and clicks are described separately in section 2.3.

7. Data transfers outside the EU

Some of the third-party services mentioned above (Google, Meta, Vimeo, X Corp., SoundCloud, Cloudflare) are based in the United States. Data transfers occur only after the user’s explicit consent (clicking the load button) and on the basis of the safeguards provided by the EU-U.S. Data Privacy Framework or, where applicable, the standard contractual clauses adopted by the European Commission.

8. Data retention period

  • Browsing data are deleted immediately after statistical processing.
  • Technical cookies have a session duration or in any case do not exceed 12 months.
  • Data provided for the newsletter are retained until consent is withdrawn.

9. Data subject rights

Under Articles 15–22 of the GDPR, users have the right to:

  • access their personal data;
  • obtain rectification or erasure;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Requests may be sent to: webmaster@cci.tn.it.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

10. Changes to this policy

The Data Controller reserves the right to amend this policy at any time. The date of the last update is indicated at the top of the page.