Privacy Policy
Data Controller
Politecnico di Milano - Director General delegated by the pro-tempore Rector - contact: dirgen@polimi.it.
Data Protection Officer and contact details
E-mail: privacy@polimi.it - Tel: 02 23999378.
Internal Data Processor for the Department of Architecture and Urban Studies - Craft:
Head of Management, Dr. Gloria Paoluzzi - contact: gloria.paoluzzi@polimi.it
Purpose of the processing, legal basis, categories of data and retention period
Considering that the University's privacy policy is available at https://www.polimi.it/privacy/, this information notice describes the processing of personal data carried out in the context of Craft activities. The legal bases of the processing are the public interest and the consent of the data subject pursuant to Art. 6, para. 1, lett. e) and lett. a) and Art. 9, para. 2, lett. a) of EU Regulation 679/2016
Transversal or cross-cutting activities
- Communication, promotion and dissemination of craft activities and resources
- Organisation and promotion of events
- Research projects, conventions and third-party contracts
- Research questionnaires and surveys
- Organisation of training courses
See also third-level notices:
Processing methods
Personal data will be processed using manual, computerised and telematic tools suitable to guarantee the security and confidentiality of the data.
Security measures are adopted in compliance with the provisions of Article 32 of the GDPR to prevent data loss, illicit or incorrect use and unauthorised access and in compliance with AgID Circular No. 2/2017 ‘Minimum ICT security measures for public administrations’.
Typologies of data processed
For details on the data handled in the individual processing operations, please refer to what is specified under the corresponding administrative processes and procedures.
This information notice may be subject to subsequent updates and additions, so please read it periodically.
Recipients of personal data
Personal data may be processed by employees or collaborators of the Data Controller who, operating under the latter's direct authority, are appointed as data processors or authorised processors and receive adequate training and operating instructions in this regard.
In particular, they will be processed by technical-administrative staff, teaching staff and any third parties in relation to the different activities involved in the processing.
Personal data may also be communicated to other public administrations, should they need to process the same for any proceedings falling within their institutional competence.
Personal data may also be communicated to public authorities or private entities where institutional activities may take place.
Finally, personal data for research activities may be transferred to other university institutions, research bodies or third sector entities also abroad in the context of the performance of research or international mobility projects.
Storage time of personal data
The data collected will be retained for the time period laid down by the legislation in force or by the University regulations, except for archiving obligations imposed by the legislation in force.
Rights of data subjects
The interested party has the right to
- request from the data controller, pursuant to Articles 15, 16, 17, 18, 19 and 21 of Regulation (EU) 2016/679, access to their personal data and the rectification or erasure of the same or the restriction of the processing concerning them or to object to their processing. Deletion is not permitted for data contained in documents that must be compulsorily kept by the University;
- to lodge a complaint with a supervisory authority.
Milan, July 2024