Privacy Policy

PRIVACY POLICY FOR CLIENT PERSONAL DATA PROCESSING PURSUANT TO ART. 13 OF THE (EU) 2016/679 REGULATION ("GDPR")


DATA CONTROLLER DATA CONTROLLER Politecnico di Milano - General Management
General Manager on instructions from the pro-tempore Rector.
Address: Piazza Leonardo Da Vinci, 32, 20133, Milano
dirgen@polimi.it; (“Organization”).
DATA PROTECTION OFFICER (DPO) DATA PROTECTION OFFICER (DPO) Address (Piazza Leonardo Da Vinci, 32, 20133, Milano), e-mail (privacy@polimi.it).

LAWFUL BASIS FOR PROCESSING

DATA STORAGE PERIOD DATA STORAGE PERIOD

Delivery of services requested by you

By way of example, subscribing to the Internet site www.osservatori.net that enables to access free contents (i.e. some Research reports, Business Cases, Infographics, etc.) of the Digital Innovation Observatories of the Department of Management, Economics and Industrial Engineering of the Politecnico di Milano (hereinafter: "Observatories"); Register for free events (Conferences, Workshops, Seminars, etc.) organized by the Observatories; Involvement in Observatory Research activities (i.e. surveys, telephone interviews, etc.).



The terms of lawful processing are contractual.

Duration of the contract and, following the termination of the contract, for (ordinary limitation period equivalent to 10 years), except in case of other legislative or sector specific terms. In case of judicial dispute, for its entire duration, until all appeal action terms have been exhausted.

Complying to the legislative requirements and applicable National and international regulations. Complying with legislative requirements to make data processing legitimate.

If necessary, to verify, exercise or defend the Data subject’s rights in a court of law. Data processing is legitimate when the data subject expresses an interest.

Scientific promotion and dissemination

By way of example, sending automatically by electronic means (e-mail, social media, etc), and traditional (such as operator calls, regular mail) - newsletters related to services or products provided by the Organization, promotional communications, notifications of company events, conferences, workshops, in addition to developing market studies and statistic analyses.

For example, weekly dispatch of the " Digital Innovation Observatories Update" newsletter with the latest news on research and events of the Observatories; sending communications regarding events (invitations to Conferences, Workshops, Seminars, Questionnaires for Research goals, etc.) and free/premium Observatory contents) via email and/or text messages and/or instant messaging.

The term of lawful processing is consent (voluntary and revocable at any time)

Until consent is revoked or contact details are withdrawn

Scientific promotion and dissemination of third party products and services (without transferring data)

This means exclusively sending communications regarding events and Training initiatives of third parties including the MIP Politecnico di Milano – Graduate School of Business Joint-stock Consortium Company of Politecnico di Milano - via email and/or text message and/or instant messaging.

The term of lawful processing is consent (voluntary and revocable at any time)

Until consent is revoked or contact details are withdrawn

Upon expiry of the storage periods indicated above the Data will be destroyed, deleted, or depersonalised, according to technical erasure and backup procedures.

REQUIREMENTS FOR THE PROVISION OF PERSONAL INFORMATION

Providing personal data in the registration form is mandatory for the conclusion and continuation of the contract; refusal to provide such data will result in the impossibility of registering with the web site and/or the event and/or purchasing subscriptions and/or accessing services, etc.

DATA RECIPIENTS

Personal data can be processed by third parties operating as processors or controllers such as, by way of example, supervisory and control authorities and in general, private or public entities authorised to request such information. The information may also be processed, on behalf of the Organization, by external parties designated as controllers that have received adequate operating instructions. The aforementioned subjects are essentially included in the following categories:

  • Entities providing e-mail delivery services;
  • Entities providing web site IT maintenance and management services;
  • Companies providing support for the development of market studies.

AUTHORIZED DATA PROCESSORS

The information may be processed by employees or collaborators of the company roles in charge, as described above, that have been explicitly designated and have received adequate operating instructions.

PERSONAL INFORMATION TRANSFER TO NON-EU COUNTRIES

The personal information may be transferred abroad to non EU Countries where the level of data protection has been considered adequate by the European Commission pursuant to art. 45 of the GDPR or prior written acceptance of Standard Contractual Clauses adopted/approved by the European Commission in accordance with art. 46, 2, let. c) and d). A copy of the guarantees provided by art. 46 or 47 or 49 second par. may be requested at privacy@osservatori.net

RIGHTS OF DATA SUBJECT – COMPLAINT WITH THE SUPERVISORY AUTHORITY

Data subjects can make a request by email (privacy@polimi.it) to the data controller or processor (Data Protection Officer) to have his or her personal information deleted, corrected, integrated if incomplete, to restrict processing in the cases pursuant to art. 18 GDPR, object to their processing, for specific personal reasons, in the event of legitimate interest of the data controller concerned.
Furthermore, in the event that processing is based on consent or on a contract and performed by automated means, data subjects have the right to receive personal data concerning them in a structured, commonly used, machine-readable format and, if technically possible, to transmit it to another controller unhindered.
Consent given for promotional and scientific dissemination purposes may be revoked by data subjects at any time, as well as the processing of personal information for marketing purposes.
Data subjects have the right to lodge a complaints to the Supervisory authority of the member State in which they habitually reside or work, or of the State where the violation presumably occurred.