Privacy Policy
PRIVACY POLICY FOR CLIENT PERSONAL DATA PROCESSING PURSUANT TO ART. 13 OF THE (EU) 2016/679 REGULATION (“GDPR”)
Data Controller
Politecnico di Milano – General Management
Data Protection Officer (DPO)
PROCESSING PURPOSES AND TERMS OF LAWFUL HANDLING | DATA STORAGE PERIOD |
Delivery of services requested by you | The data will be stored: In relation to site registration, up to 10 years following the registration; In relation to registration to events, up to 10 years after each event. |
Comply with legislative requirements and applicable National and international regulations. The condition that makes the processing legitimate is the requirement to comply to legal obligations. | The data will be retained as long as the obligations under applicable regulations or national or supranational legislation remain. |
If necessary, to verify, exercise or defend the Data subject’s rights in a court of law. Data processing is legitimate when the data subject expresses a justified interest. | In the case of court litigation, the data will be maintained for the duration of the litigation, until the terms for attempting appeal actions are exhausted. |
Scientific promotion and dissemination – Weekly delivery of the “Osservatori Digital Innovation Update” newsletter with the latest news on research and events of the Observatories; – Communications regarding events (invitations to Conferences, Workshops, Seminars, etc.) and free/premium Observatory content (publications, research reports, …) via email and/or SMS [texts] and/or instant messaging; – Involvement in Research activities (e.g. surveys, telephone interviews, etc.) of the Observatories. The condition that makes the processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities. | Data will be stored until consent is revoked and/or for a maximum of 10 years |
Scientific promotion and dissemination on behalf of the MIP Politecnico di Milano Graduate School of Business – Joint Stock Consortium company. The data you provide will be processed, subject to your consent, to allow the Observatories to conduct scientific promotion and dissemination activities related to events and training courses of the MIP Politecnico di Milano Graduate School of Business. The condition that makes processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities. | Data will be stored until consent is revoked and/or for a maximum of 10 years |
Communication of data to third parties and in particular to partners and sponsors of Observatory events/research. The data you provide will be processed, subject to your consent, to allow the Observatories to communicate the data to the aforementioned subjects who will process them for their communications regarding their products, services, newsletters and events as well as to carry out market studies and statistical analyzes. The condition that makes processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities. | Data will be stored until consent is revoked and/or for a maximum of 10 years |
Use of images and multimedia materials for information, promotion and scientific dissemination. | For the purposes listed herein the images will be processed pursuant to principles in art. 5 of the GDPR, for a period not exceeding 5 years for the attainment of such objectives and in compliance with conservation limitation purposes, without prejudice to previously conducted data treatments. |
Profiling The data you provide will be processed with your consent to enable the Observatories to create profiles (individual and/or aggregated) to develop statistical analyses and/or to improve products and services, as well as to send you targeted promotional information and communications that you may enjoy and may be of greater interest to you. The condition that makes treatment legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities. | Data will be stored until consent is revoked and/or for a maximum of 5 years |
DATA RECIPIENTS |
The data can be processed by external entities operating as controllers such as, but not limited to, self-employed professionals (e.g. law firms, accountants), supervisory authorities and bodies, and public or private entities in general, entitled to request the data |