The Data Controller:: 
Politecnico di Milano - General Manager upon authorization of the pro-tempore Rector - contact: dirgen@polimi.it

Data Processor: 
privacy@polimi.it, tel.: 0223999378

Internal Data Processor for the Department of Architecture and Urban Studies: 
Department Manager, Gloria Paoluzzi – contact: gloria.paoluzzi@polimi.it

PURPOSES OF DATA PROCESSING AND LEGAL BASIS

Given that the privacy policy is available on https://www.polimi.it/privacy/, this information describes the processing of personal data carried out as part of the activities of the Climate Change and Resilience Laboratory (CCRR-Lab). The processing of personal data requested from the interested party is carried out pursuant to art. 6 letters b), c), e) of EU Regulation 2016/679 (processing is necessary for the execution of a contract, to fulfill a legal obligation and for reasons of public interest), for the following purposes:

• Communication, promotion and dissemination of the activities and resources of the Laboratory
• Management of research projects, agreements and third party contracts of the Laboratory
• Management of access to the spaces and services of the Laboratory

DATA PROVIDED VOLUNTARILY BY THE USER

The optionaland voluntary sending of e-mail to the addresses indicated on this website or the sending of messages through the "Contact Us" form present on this site involves the subsequent acquisition of the sender's address required to reply to information requests, and any other personal data included in the message. 

The personal data provided voluntarily by users will be processed for the conduct of the activities of the Laboratory, within the limits established by law and by regulations, in compliance with the general principles of transparency, correctness and confidentiality

RECIPIENTS OF PERSONAL DATA

Personal data may be processed by employees or collaborators of the Data Controller who, working under its direct authority, are appointed as responsible or authorized for data processing and are properly trained and receive specific operating instructions.

In particular, they will be treated by technical-administrative staff and/or by professors, in relation to the various activities to be carried out.

Personal data may also be disclosed to other public administrations, if they have to process them for any procedures within their institutional jurisdiction.

Personal data may also be disclosed to public authorities or private entities where institutional activities could be carried out.

Personal data for research and teaching activities may be transferred abroad to other universities, research institutions, third sector bodies, or in the context of international mobility projects.

STORAGE TIME OF PERSONAL DATA

The data collected will be kept for the time established by current legislation or by the University regulations.

Personal data provided voluntarily by users will be kept for 3 years.

RIGHTS OF THE INTERESTED PARTIES

The interested subject has the right:

• To ask the data controller, pursuant to Article 16, 17, 18, 19 and 21 of Regulation (EU) 2016/679, the access to their personal data and correction or their cancellation or limitation of the data processing that concern him/her or to object to their processing. Cancellation is not allowed for data included in documents that must be stored by the University;
• To submit a complaint to a supervisory authority.

PROCESSING METHODS

The processing of personal data will be carried out through manual, computerized and telematic means, however, suitable to guarantee their security and confidentiality.

Security measures are used, in compliance with the provisions of Article 32 of the GDPR to prevent the loss of data, illicit or incorrect use and unauthorized access and in compliance with the AgID Circular n. 2/2017 "Minimum ICT security measures for public administrations".

LAST UPDATE: 21 APRIL 2022
This information may be subject to subsequent updates and additions, so we suggest you to periodically review it.