PRIVACY POLICY UNDER ART. 13 OF REGULATION (EU) NO. 2016/679 OF 27 APRIL 2016

This policy is issued under art. 13 of Regulation EU no. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and in compliance with the laws on personal data processing and on the free movement of such data.

Data Controller

The Data Controller is Politecnico di Milano - General Manager delegated by the pro-tempore Rector - contact: dirgen@polimi.it. dirgen@polimi.it.

Internal Processor

Dr. Gloria Paoluzzi, Department Manager of the Architecture and Urban Studies Department, Piazza Leonardo da Vinci 32, Milan (MI), tel. +39 0223995550, email: gloria.paoluzzi@polimi.it.

The personal data will be processed by other authorised parties who will receive instructions for that purpose under current legislation.

Data Protection Officer and contact details

Dr. Vincenzo Del Core, contact: privacy@polimi.it – tel.: 0223999378.

Processing purposes and legal basis, categories of data and storage period

For the purposes of applying the relevant European and national legislation (Reg. 2016/679, hereafter, Regulation), we inform you that your personal data will be used for the following purposes:

Personal data processing purposes	Legal basis of processing	Periodo di conservazione dei dati personali	Periodo di conservazione dei dati personali
Purpose 1 The data provided will be used to send institutional communications.	Consent (Art. 6, paragraph 1, letter e) of the EU Regulation)	Contact details (name, surname, email address).	The data will be stored for three years.

Nature of the data

The provision of data is optional. Refusal to provide the data makes it impossible to carry out the intended purposes.

Data processing methods

The processing for the purposes indicated above is carried out on digital media, using electronic tools.

Duly authorised persons are entitled to access the data acquired for the aforementioned purposes.

Categories of recipients

The data will not be disclosed to public or private entities for the listed purposes.

Transferring data to non-EU countries or international Organisations

The personal data will not be transferred in any way to countries outside the EU or any international Organisation.

Data subject rights

As the data subject, you may request from the Controller:

• confirmation of the existence or your personal data;
• access to your personal data and related information; correction of inaccurate data or supplementation of incomplete data; deletion of your personal data (under one of the conditions indicated in Art. 17, paragraph 1 of the Regulation and in compliance with the exceptions provided for in paragraph 3 of the same article); restrict the processing of your personal data (under one of the cases indicated in art. 18, paragraph 1 of the Regulation), the transformation into anonymous form or block on data processed in violation of the law, including data whose storage is no longer necessary for the purposes for which it was collected or processed.

As data subject, you have the right to partly or fully object:

• on legitimate grounds, to the processing of personal data relating to you, even if it is relevant for the purpose for which the data were collected;
• to the processing of personal data relating to you for the purpose of promoting initiatives

These rights may be exercised by contacting privacy@polimi.it.

If you believe that your rights have been violated by the data controller or a third party, you can lodge a complaint with the Data Protection Authority, or another relevant supervisory authority under the Regulation.