Privacy policy in accordance to article 13 of EU Regulation 2016/679

This policy is issued under art. 13 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals during personal data processing, under the personal data processing legislation and the free movement of data.

Identity Data Controller and Contact Point
The Data controller of Politecnico di Milano is the General Manager upon authorization of the pro-tempore Rector
Contact: dirgen@polimi.it

Responsible for data protection and contact points
Dr. Vincenzo Del Core
Contatti: (phone) +39.02.2399.9378 – (mail) privacy@polimi.it

Internal data processor
Samuele Paolo Bordogna
Contact: comunicazione-dcmc@polimi.it
Data will be processed by other authorized parties and, for this purpose, in compliance with current legislation.

 

Purposes of data processing, legal basis, data categories and storage period

For the purposes of the application of European and national legislation on this matter (EU Reg. 679/2016, hereinafter Regulation), we inform you that your personal data will be used for the following purposes:

- DCMIC service authentication;
- participation to an event.

Purposes of the processing for which personal data are intended	Legal basis of data processing	Categories of personal data to be processed	Storage period of personal data
DCMIC services authentication The data provided will be used only to garantee access to the Department (classrooms, laboratories and DCMIC areas) and to departmental ICT Services.	Consent	Identification data Personal data Contact detail Data relating to the activity carried out	For the duration and after the contractual relationship, for a period of time strictly necessary to achieve the purposes for which they are processed.
Participation to an event The data provided will be used only to organize, manage and document the event (also through video audio recordings and images).	Consent	Identification data Personal data Contact detail	For a period of time strictly necessary to achieve the purposes for which they are processed.

Nature of data
The provision of data is optional.
If you refuse to provide data, it is impossible to perform the services.

Data Transfer to Extra EU country
The personal data will not be, in any way, transferred to non-EU countries.

Rights of the interested parties
As interested party, you can ask at any time:
- confirmation of the existence or not of your personal data;
- access to your personal data and related information;
- the correction of incorrect data or the addition of incomplete data;
- the cancellation of your personal data (if any condition indicated in Article 17, paragraph 1 of the Regulations can be applied and it is in compliance with the exceptions provided in paragraph 3 of the same article);
- the limitation of processing of your personal data (when one of the conditions indicated in Article 18, paragraph 1 of the Regulations can be applied), the anonymization or blocking of data processed unlawfully, including data whose storage is not required in relation to the purposes for which the data were collected or subsequently processed.

DCMIC PoliMI, in compliance with Article 19 of the EU Regulation, will inform recipients, to whom the personal data have been communicated, about any corrections, cancellations or limitations of the treatment requested, where this is possible. With reference to the aforementioned purposes, the interested party has the right to proceed, at any time, to the withdrawal of consent for identity and personal data processing by sending an email to: privacy@polimi.it.

Pursuant to Article 7 of the EU Regulation, the withdrawal of consent does not affect the legality of treatment, based on the consent before the withdrawal.

Right to submit a complaint
If you deem that your rights have been violated by the data controller and/or by a third party, you have the right to submit a complaint to the Data Protection Authority, according to the procedures indicated by this Authority at the following internet addres garanteprivacy.it.

Processing Method
Personal data will be processed in paper, computerized and telematic form and stored in dedicated databases to which the access will be allowed, and therefore they become aware of, to the employees clearly appointed by the Data Controller as Internal Data Processors, who may carry out consultation, use, processing, comparison and any other appropriate operation, even automated, in compliance with the provisions of law necessary to ensure, inter alia, the confidentiality and security of data as well as the accuracy, updating and relevance of the data with respect to the stated purposes.

Changes and updates
This privacy information is valid from the subheading date. DCMIC PoliMI could also make changes and/or additions to this information also as an outcome of any subsequent amendments and/or regulatory additions. The interested party can view the text of the information, constantly updated, on the website: cmic.polimi.it/privacy-policy.

Last update: June 10, 2021

 

> Privacy policy Politecnico di Milano