Informativa sulla Privacy
Quali dati personali tratta questo sito e come.
Draft B6 — technical inventory of 25 September 2026BOZZA — IN ATTESA DI APPROVAZIONE DELLA CAMERA E DEL CONSULENTE LEGALE / DPO
Questo testo descrive i trattamenti effettivamente svolti dal sito. Non è ancora stato approvato dalla Camera né da un consulente legale / per la protezione dei dati e non costituisce quindi l'informativa ufficiale della Camera. La bozza è disponibile solo in inglese: la versione italiana sarà pubblicata dopo l'approvazione.
1. Who is responsible
The website cci-egypt.org is operated by the Italian Chamber of Commerce in Egypt, 33 Abdel Khalek Sarwat St., Down Town, Cairo, Egypt. Privacy questions: info@cci-egypt.org.
[Exact legal name, controller / representative details and any data-protection officer — pending Chamber and legal review.]
2. Visiting the website
The website does not use analytics, advertising or tracking tools and does not load fonts, scripts or images from other websites (fonts are served by the website itself).
Requests pass through Cloudflare (network security and delivery) before reaching the website's server, hosted by OVH. As part of delivering each page, the web server records the request (IP address, date and time, page requested, browser identification) in its access log, which is kept for 14 days. The website application's own logs are designed not to contain personal data (e-mail addresses and phone numbers are removed from error messages).
Links to other websites (for example maps, embassy or partner websites) are ordinary links: those websites receive data only if you open them.
3. Forms and requests
The website offers these forms: membership application; general contact; fair / delegation registration; service request; B2B expression of interest and B2B portal access request; convention / discount request; job vacancy (employers); candidate profile with an optional CV (PDF or Word, up to 5 MB); service-quality feedback.
What you enter in a form (for example name, company, e-mail, phone, tax ID for membership, sector, message, the CV file) is stored in the website's database on the same server and sent by e-mail to the Chamber mailbox responsible for that request. The request receives a reference number. If the e-mail cannot be delivered immediately, the stored request is delivered later automatically or handled by Chamber staff.
Current technical retention: the CV file is deleted from the website database as soon as the e-mail has been delivered; the content of a delivered request (message and contact details) is deleted from the website database 30 days after delivery; a record of the request (reference, form type, date, delivery status, destination mailbox) is kept for 365 days. Requests not yet delivered are kept until they are delivered or handled by staff. [These periods are technical defaults pending the Chamber's retention decision; retention of the e-mails in the Chamber's mailboxes is decided by the Chamber — pending.]
To prevent abuse, the number of submissions per IP address and per e-mail address is limited; the counters (IP address or e-mail address with submission times) are kept for up to 24 hours.
The membership form records the three statements you accept (Statute and ethical code, data processing, publication in the members directory) with their wording, language and version in the application e-mail. [Wording and legal effect of these statements — pending legal review.]
4. Members directory
The public members directory shows, for each member company listed by the Chamber: company name, category (Egyptian, Italian or foreign-capital company), sector, city and website, and a profile page. Member e-mail addresses, phone numbers and street addresses are not published. The data comes from the Chamber's member register.
Member profile pages ask search engines not to index them. [Publication basis for the directory and whether profiles may be indexed — pending Chamber decision (register C-07, C-09).]
5. Sign-in (members and Chamber staff)
Accounts for members are created only by the Chamber Secretariat; staff accounts are configured by the website administrator. The website stores the account e-mail and a salted password hash (never the password itself).
For security the website records sign-in attempts (account, IP address, time, outcome) and keeps short-lived counters (15 minutes, longer while an account or address is locked) to block repeated failed attempts. Failed and refused sign-ins are kept as security events up to the newest 200,000 entries; successful sign-ins are part of the audit trail below.
Actions performed by Chamber staff in the administration area are recorded in an audit trail with the staff member's e-mail and IP address. [Retention of the staff audit trail — pending Chamber decision (C-52); currently kept without automatic deletion.]
6. B2B opportunities
Opportunities submitted by signed-in members are stored with the member's company and contact e-mail and published only after Chamber staff approve them — anonymously unless the member chooses to show the company name. Contacts go through the Chamber Secretariat.
7. E-mail communications
Circulars and newsletters are currently NOT sent from the website (the function is disabled). When enabled, messages go only to addresses with a recorded communication basis, one message per recipient, each with an unsubscribe link.
If you unsubscribe, your e-mail address, the type of communication, the date and the source of the request are kept in a suppression list so that no further messages are sent to you.
For its mailing lists the Chamber uses Zoho Campaigns. The website's staff tools can read the Chamber's existing Zoho Campaigns lists and suppression data for a data-quality review; the website does not export member data to Zoho (the export is disabled).
8. Cookies and browser storage
The website sets only the cookies and browser storage entries below. None is used for analytics or advertising.
| Name | Type | Purpose | Duration | When |
|---|---|---|---|---|
| ccie-lang | Cookie (first party) | Remembers the language you chose (en, it or ar) so that links without a language open in that language | 1 year | When you view a page in a language or change language |
| ccie-lang | Browser local storage | Same language preference, kept in your browser only | Until you clear your browser data | Same |
| ccie_session | Cookie (first party, HttpOnly, Secure, SameSite=Lax) | Keeps you signed in | Staff: 12 hours · members: 7 days (ends at sign-out) | Only after you sign in |
| ccie_device | Cookie (first party, signed) | Marks a browser that has already signed in, so that failed attempts by others cannot lock your account | 180 days | Only after a successful sign-in |
- Cloudflare, which protects the website, may set its own strictly technical security cookies. [List to be confirmed from the Cloudflare configuration — pending.]
9. Service providers and recipients
- OVH — hosting of the website server and database. [Data-centre location — to be confirmed.]
- Cloudflare — network security and delivery of the website (processes the requests, including IP addresses).
- Zoho — e-mail delivery of form requests to the Chamber (Zoho Mail) and the Chamber's mailing lists (Zoho Campaigns). [Zoho data-centre region — to be confirmed from the Chamber's Zoho account.]
- Chamber staff who handle requests and manage the website.
- No automatic translation service is active. [If the Chamber approves one for staff and member B2B texts, it will be named here.]
10. Legal bases, transfers and your rights
[Legal bases for each processing activity, international transfers (Cloudflare, Zoho and the hosting location) and their safeguards, the applicable rules (including the EU GDPR and Egyptian Law No. 151 of 2020) and the formulation of your rights — pending legal / data-protection review. Until then, requests about your data can be sent to info@cci-egypt.org.]