This notice explains what personal data the Culture at COP31 website (cultureatcop.org) collects, why, who sees it, how long it is kept and what rights you have.
In short: the site has no analytics, no tracking and no advertising. It collects only what you type into one of its forms, and uses it only for the purpose of that form.
Who is responsible
The site is run by the Culture at COP31 Secretariat. Culture at COP31 is convened by the Europe Region Chair of the Climate Heritage Network (Europa Nostra / European Heritage Hub) and co-hosted by Europa Nostra Türkiye and ICOMOS Türkiye.
- Data controller: [legal name and registered address of the organisation responsible for this site — to be confirmed by the organisers]
- Privacy contact: [email address for data-protection requests — to be confirmed]. Until then, write to the Secretariat through the contact page.
What we collect and why
Contact form
Your name, organisation (optional), email address, the subject you choose and your message, plus the site language you wrote from and the time it arrived. We use it only to answer you. Legal basis: our legitimate interest in replying to people who write to us, or steps you ask us to take (GDPR Art. 6(1)(f) and (b)) [to confirm].
Newsletter
Your email address, the site language and page you signed up on, and when. We use it only to send the Culture at COP31 newsletter, once or twice a month. Legal basis: your consent (GDPR Art. 6(1)(a)). You can unsubscribe at any time [by the link in each email, or by writing to the privacy contact — to confirm]; we then stop sending.
Signing the Antalya Declaration
Your organisation’s name and type, your name and role, country, sector and email address, and the date. The Secretariat reviews every sign-on. Once it is approved, only the organisation’s name, its country and a short note appear on the public list; your name, role and email address are never published. We use your email address only to contact you about your sign-on [and about the Declaration’s follow-up — to confirm]. Legal basis: your consent, given with the checkbox on the form (GDPR Art. 6(1)(a)) [to confirm].
Secretariat sign-in
Only Secretariat staff have accounts. Signing in checks your username and password and sets one session cookie (see below). Legal basis: it is necessary to run the site’s back office (GDPR Art. 6(1)(f)).
Server logs
[To confirm with the hosting operator: whether the web server keeps request logs that contain IP addresses, for what purpose (for example security) and for how long.]
Cookies and browser storage
The site uses no analytics, tracking or advertising cookies, and sets no cookie at all for ordinary visitors. It keeps a few small values in your browser’s local storage, each only once you use the control it belongs to. They stay in your browser and are not sent to us. Each is strictly necessary for something you asked for, so we do not ask for consent [to confirm]; the notice at the foot of the page tells you about them, and “Cookies” in the footer brings it back.
| Name | Kind | Set when | Purpose | Kept for |
|---|---|---|---|---|
__Host-hero_proxy_session | Cookie | When Secretariat staff sign in | Keeps the signed-in session | Up to 24 hours, or until sign-out |
cc_lang | Local storage | When you switch between EN and TR | Remembers your language | Until you clear your browser data |
cc_theme | Local storage | When you switch between light and dark mode | Remembers your display mode | Until you clear your browser data |
cc_joinbar | Local storage | When you close the “Not part of the platform yet?” bar | Keeps that bar closed | Until you clear your browser data |
cc_consent | Local storage | When you press OK on the privacy notice | Remembers that you have seen the notice: its version and the date | Until you clear your browser data |
Files loaded from other companies
To display the site, your browser fetches some files directly from two other companies. Like any website you visit, they receive your IP address and basic browser information. They set no cookies for this site.
- Google Fonts (Google): the Nunito Sans typeface, from fonts.googleapis.com and fonts.gstatic.com. Google’s privacy policy.
- cdnjs (Cloudflare): the Bootstrap page styles and script and the Bootstrap icon set, from cdnjs.cloudflare.com. Cloudflare’s privacy policy.
[Note for the organisers: serving these files from the site’s own server would remove both transfers, and this section with them.]
Links to other websites (Instagram, LinkedIn, the affiliation form, partner organisations and resources) take you to services with their own privacy policies; nothing from them is loaded until you follow the link. A news post may occasionally show an image hosted on another website.
Who sees your data
- Authorised members of the Culture at COP31 Secretariat, through the site’s back office.
- [The hosting provider that runs the site’s server, acting on our instructions — name and location to confirm.]
- The public sees only what is described above for approved Declaration sign-ons.
We do not sell or rent personal data, and we do not use it for advertising or profiling.
[To confirm: where the server is located, and whether any data leaves the EU/EEA or Türkiye, and on what safeguards.]
How long we keep it
- Contact messages: [period to confirm]
- Newsletter addresses: until you unsubscribe [then deleted, or kept only as an opt-out record — to confirm]
- Declaration sign-ons: [period to confirm, including for sign-ons that are not approved]
- Session cookie: up to 24 hours. Browser storage: until you clear it.
Your rights
Under the EU General Data Protection Regulation (GDPR) [and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), where it applies — to confirm] you can ask us to:
- show you the data we hold about you and give you a copy;
- correct it;
- delete it;
- restrict or stop using it;
- give it to you in a portable format;
- and you can withdraw your consent at any time, without affecting what was done before.
To use these rights, write to [privacy contact] or use the contact page. We will answer within one month. You can also complain to a data-protection supervisory authority, in particular in the country where you live or work.
Changes to this notice
If what the site collects, stores or loads changes, we will update this notice and its date, and show the notice at the foot of the page again.