PRIVACY POLICY FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13 OF REGULATION (EU) 679/2016 OF 27 APRIL 2016
This privacy policy is issued pursuant to Art. 13 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and compliance with the legislation on the processing of personal data, as well as the free movement of such data.
Data Controller
Politecnico di Milano – Director General delegated by the pro-tempore Rector – contact: dirgen@polimi.it.
Internal data processor
Dr. Andrea Papoff, Management Responsible of Department of Energy, Via Lambruschini 4, Milan (Italy), Tel. +39 0223996571, e-mail: andrea.papoff@polimi.it
The data shall be processed by other persons authorised and instructed for this purpose in accordance with current legislation.
Data Protection Officer and contact details
Dr. Vincenzo Del Core, e-mail: privacy@polimi.it – Tel. +39 02 23999378.
Purpose of the processing, legal basis, categories of data and retention period
For the purposes of applying the relevant European and national legislation (Regulation EU 679/2016, henceforth “Regulation”), we hereby inform you that your personal data will be used to send you communications concerning the institutional activities of the Department – PURPOSE 1 – (such as, including, but not limited to: Advertising services and events of the University addressed to internal public; Advertising master and postgraduate courses; Communications related to training activities; Newsletter orientation; Operational communications for open days; etc.); if you are not interested in receiving such communications you can tick the box “unsubscribe” always present at the end of these communications.
The data may also be processed to send you non-institutional communications – PURPOSE 2 – (such as, including, but not limited to: Advertising of events not strictly related to training activities but of general interest; Advertising of agreements with external commercial entities; Events organised by third parties; Pure marketing communications; etc.) but only after obtaining the consent which, in this case, will be the legal basis of the processing.
| Intended purpose of the personal data processing | |
Purpose 1 | Purpose 2 The data provided will be processed for sending communications of non-institutional nature. |
Legal basis of the processing | |
| Public interest (Article 6(1)(e) of the EU Regulation). | Consent of the data subject (Article 6(1)(a) of the EU Regulation). |
| Categories of personal data subject to processing | |
Personal details (name, surname); | Personal details (name, surname, gender); |
| Retention period of personal data | |
| The data collected shall be stored for a period of 4 years. | The data collected shall be stored for a period of 4 years. |
Nature of the data
The provision of the data requested is optional. In the event of failure to provide the data requested, the planned services/activities cannot be guaranteed.
Processing methods
The processing carried out for the purposes described above may be carried out on digital support, using electronic tools.
The data acquired for the aforementioned purposes shall only be accessed by duly authorised personnel.
Categories of recipients
In relation to the purposes indicated, no data may be disclosed to the public and/or private entities.
Transfer to non-EU countries or international organizations
Personal data shall in no way be transferred to non-EU countries or international organizations.
Rights of data subjects
As a data subject, you can ask the Data Controller for the following at any time:
- confirmation of any personal data held concerning you;
- access to your personal data and related information; the correction of inaccurate data or the completion of incomplete data; the cancellation of personal data concerning you (where any of the conditions indicated in Art. 17, paragraph 1 of the Regulation applies and in compliance with the exceptions provided for in paragraph 3 of the same article); the restriction of the processing of your personal data (where one of the conditions indicated in Art. 18, paragraph 1 of the Regulation applies), the transformation into anonymous form or the blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
As a data subject, you also have the right to object in whole or in part:
- for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
- to the processing of personal data concerning you for the purpose of sending advertisements on courses and cultural events at the Politecnico di Milano.
These rights can be exercised by contacting privacy@polimi.it.
If you believe that your rights have been violated by the data controller and/or a third party, you have the right to lodge a complaint with the Personal Data Protection Authority and/or other competent supervisory authority pursuant to the Regulation.
Latest update: 18/07/2025