Privacy Policy

Last updated: October 13, 2026

This policy describes how the personal data of users visiting the website www.projectingrid.eu (hereinafter “the Website”), the website of the INGRiD project – INtersecting GRounds of Discrimination in Italy, is processed. The Website is managed by the Centro per la Cooperazione Internazionale (CCI), based at Vicolo San Marco, 1 – 38122 Trento, Italy (hereinafter “the Data Controller”).

This policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data Controller

Centro per la Cooperazione Internazionale (CCI)
Registered office: Vicolo San Marco, 1 | 38122 Trento, Italy
Tel. +39 0461 1828600
E-mail: info@cci.tn.it
PEC (certified e-mail): cci.tn@pec.it

2. Data collected and purposes

2.1 Browsing data

The IT systems used to operate the Website collect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser type, operating system, requested page). These data are used solely to ensure the security and proper functioning of the Website; they are kept in the server logs for a limited period, after which they are deleted.

2.2 Usage statistics

The Website uses Plausible Analytics (Plausible Insights OÜ, Estonia), a web analytics service that does not use cookies and does not collect personal data: statistics are aggregated and anonymous, and data are processed on servers located in the European Union. For more information: plausible.io/data-policy.

2.3 Contact form

The Contact page contains a form through which users can send a message by providing their first name, last name, e-mail address and the text of the message. The data are stored on the Website’s server, used solely to reply and automatically anonymised after 24 months. Neither the IP address nor the browser of the person submitting the form is recorded. Processing is based on the user’s request (Art. 6.1.b GDPR).

2.4 E-mail communications

If the user writes to the e-mail addresses shown on the Website, the data contained in the message (e-mail address, name and any other information) are used solely to answer the request. Processing is based on the user’s request (Art. 6.1.b GDPR).

3. Cookies and tracking technologies

3.1 Technical cookies

The Website uses only technical cookies necessary for its operation, for which user consent is not required (Art. 122 Italian Legislative Decree 196/2003 and Italian Data Protection Authority Guidelines of 10 June 2021):

  • Polylang language cookie (pll_language): stores the language in which the Website is being viewed.
  • WordPress session cookies: set only for users who log in to the Website’s reserved area.

3.2 No profiling cookies

The Website does not use profiling cookies, advertising cookies or third-party tracking tools. No user profiling takes place. For this reason the Website does not display a cookie consent banner.

4. Embedded third-party content

Some pages of the Website contain content embedded from external services that may set cookies or collect data. To protect users’ privacy, the Website uses a “click-to-load” mechanism: instead of the content, a preview with a button is displayed, and the content is loaded from the external service only after the user explicitly clicks. The service concerned is:

  • YouTube (Google LLC) – videos

Before the user clicks, no data are transmitted to the service. After the click, YouTube may collect data according to its own privacy policy: Google (YouTube). Before the click only the video preview image is shown, served by YouTube’s servers without cookies.

5. Hosting

The Website is hosted on servers of Hetzner Online GmbH in Germany, which processes technical browsing data as data processor. Processing is based on the Data Controller’s legitimate interest in the security and availability of the Website (Art. 6.1.f GDPR).

6. Legal basis for processing

  • Technical cookies, browsing data and hosting of the Website: the Data Controller’s legitimate interest in the operation and security of the Website (Art. 6.1.f GDPR).
  • Contact form and e-mail communications: steps taken at the request of the data subject (Art. 6.1.b GDPR).
  • Third-party content loaded on request: the user’s consent, expressed by clicking the load button (Art. 6.1.a GDPR).

7. Transfer of data outside the EU

YouTube is a service of Google LLC, based in the United States. Data are transferred only after the user clicks the load button, on the basis of the EU-U.S. Data Privacy Framework or, where applicable, of the standard contractual clauses adopted by the European Commission.

8. Retention period

  • Browsing data are kept in the server logs for a limited period, as necessary for the security of the Website, and then deleted.
  • Messages sent through the contact form are automatically anonymised after 24 months.
  • E-mail messages are kept for as long as necessary to handle the request.
  • Technical cookies last for the duration of the session or in any case no longer than 12 months.

9. Rights of the data subject

Under Articles 15-22 of the GDPR, the user has the right to:

  • access their personal data;
  • obtain their rectification or erasure;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Requests can be sent to: webmaster@cci.tn.it.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country in which they reside.

10. Changes to this policy

The Data Controller reserves the right to amend this policy at any time. The date of the last update is shown at the top of the page.