Privacy Policy

cocaproject.art — Last updated: May 2026

1. Data Controller

The data controller for this website is:

2. What data we collect

Application form

When you submit an application to the COCA Project open call, we collect: your name and surname, email address, nationality and country of residence, artistic discipline, portfolio images or links, artwork titles, year of creation, and any other information you voluntarily provide in the form.

Newsletter and email marketing

If you subscribe to our newsletter, we collect your email address and, optionally, your name. You may unsubscribe at any time using the unsubscribe link included in every email we send.

Cookies and analytics

We use Google Analytics to understand how visitors interact with our website. This service collects anonymized data such as your IP address, browser type, pages visited, and time spent on the site. Google Analytics may transfer data to servers located in the United States; such transfers are governed by Standard Contractual Clauses approved by the European Commission. You can opt out at any time via the Google Analytics Opt-out Browser Add-on.

3. Purpose and legal basis for processing

We process your personal data for the following purposes and on the following legal grounds under EU Regulation 2016/679 (GDPR):

4. Data sharing and third parties

We do not sell or rent your personal data to third parties. Your data may be shared only with the following categories of processors:

• Email marketing service providers (for newsletter delivery)
• Google LLC (Google Analytics) — transfers to the USA governed by Standard Contractual Clauses
• Web hosting providers for the operation of cocaproject.art

All third-party processors are contractually required to handle your data in compliance with applicable data protection laws.

5. Data retention

• Application data: retained for the duration of the selection process and for up to 3 years thereafter for program documentation purposes
• Newsletter data: retained until you unsubscribe or withdraw consent
• Analytics data: retained according to Google Analytics standard retention settings (default 26 months)

6. Cookies

Our website uses the following categories of cookies:

• Strictly necessary cookies: required for the website to function. No consent required.
• Analytics cookies: used by Google Analytics to collect anonymized usage data. Activated only with your consent.

You can manage or disable cookies at any time through your browser settings or via our cookie consent banner.

7. Your rights

Under the GDPR (Arts. 15–22), you have the right to:

• Access the personal data we hold about you (Art. 15)
• Request correction of inaccurate or incomplete data (Art. 16)
• Request deletion of your data (“right to be forgotten”) (Art. 17)
• Restrict processing of your data (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, without affecting prior processing (Art. 7.3)
• Lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali

To exercise any of these rights, contact us at: artist@cocaproject.art

8. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.

9. Contact

For any questions or requests regarding this Privacy Policy: