PRIVACY POLICY FOR THE COLLETION AND PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 679/2016 OF 27 APRIL 2016

This privacy policy is issued pursuant to Art. 13 and 14 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and compliance with the legislation on the processing of personal data, as well as the free movement of such data.

In particular, this privacy policy applies to the institutional website of Architecture, Built Environment and Construction Engineering Department. This privacy policy is rendered only for this site and provides information to those who interact with the site, which is electronically accessible and pertains to the domain: www.dabc.polimi.it

DATA CONTROLLER

Politecnico di Milano – Director General delegated by the pro-tempore Rector – contact:

DATA PROTECTION OFFICER AND CONTACT DETAILS

ph 0223999378

PURPOSE OF THE PROCESSING, LEGAL BASIS, CATEGORIES OF DATA AND RETENTION PERIOD

For the purposes of applying the relevant European and national legislation (Regulation EU 679/2016, henceforth “Regulation”), we hereby inform you that your personal data will be used for the following purposes:

Intended purpose of the personal data processingLegal basis of the processingCategories of personal data subject to processingRetention period of personal data
Purpose 1
Performing institutional communication activities
Public interest (art. 6, paragraph 1, letter e) of Regulation UE)Personal details
Contact details
3 years
Purpose 2
Filling-in online Form
Public interest (art. 6, paragraph 1, letter e) of Regulation UE)Personal details
Contact details
3 years
Purpose 3
Maintenance and monitoring of the site
Public interest (art. 6, paragraph 1, letter e) of Regulation UE)Browsing data5 years
Purpose 4
Maintenance and monitoring of the platform
Public interest (art. 6, paragraph 1, letter e) of Regulation UE)Browsing data5 years
Purpose 5
Statistical purposes, retention and archiving
Public interest (art. 6, paragraph 1, letter e) of Regulation UE)Personal details
Contact details
The data necessary for the correct functioning of the public administration will be archived and stored indefinitely, in respect of principles of transparency, lawfulness, proportionality and minimisation.

NATURE OF DATA

The provision of the data requested is optional. In the event of failure to provide the data requested, the planned services cannot be guaranteed.

PROCESSING METHODS

The processing carried out for the purposes described above may be carried out on digital media, manually and/or using electronic or in any case automated tools.

The data acquired for the aforementioned purposes shall only be accessed by duly authorised personnel.

CATEGORIES OF RECIPIENTS

In relation to the purposes indicated the data may be disclosed to the following public and/or private entities:

• Any suppliers or data processors

TRANSFER TO NON-EU COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Personal data shall in no way be transferred to non-EU countries or international organizations.

RIGHTS OF DATA SUBJECTS

As a data subject, you can ask the Data Controller for the following at any time:

● confirmation of any personal data held concerning you;

● access to your personal data and related information;

● the correction of inaccurate data or the completion of incomplete data;

● the cancellation of personal data concerning you (where any of the conditions indicated in Art. 17, paragraph 1 of the Regulation applies and in compliance with the exceptions provided for in paragraph 3 of the same article);

● the restriction of the processing of your personal data (where one of the conditions indicated in Art. 18, paragraph 1 of the Regulation applies), the transformation into anonymous form or the blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed.

As a data subject, you also have the right to object in whole or in part:

● for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;

● to the processing of personal data concerning you for the purpose of sending advertisements on courses and cultural events at the Politecnico di Milano.

These rights can be exercised by contacting .

If you believe that your rights have been violated by the data controller and/or a third party, you have the right to lodge a complaint with the Personal Data Protection Authority and/or other competent supervisory authority pursuant to the Regulation.