Privacy Policy

Privacy policy for client personal data processing pursuant to art. 13 of the (EU) 2016/679 Regulation (“GDPR”).

Data Controller

Politecnico di Milano – General Management, General Manager on instructions from the pro tempore Rector.
Piazza Leonardo Da Vinci, 32, 20133 Milano.

Data Protection Officer (DPO)

Piazza Leonardo Da Vinci, 32, 20133 Milano — privacy@osservatori.net.

Processing purposes and terms of lawful handling

Delivery of services requested by you

The data you provide will be processed for the following purposes: registration to the web site www.osservatori.net that enables to access free content (i.e. some Research reports, Business Cases, Infographics, etc.) of the Digital Innovation Observatories of the Department of Management, Economics and Industrial Engineering of the Politecnico di Milano (hereinafter “Observatories”); registration for free events (Conferences, Workshops, Seminars, etc.) organized by the Observatories. The condition that makes the processing legitimate is the execution of a contract.

Data storage period: in relation to site registration, up to 10 years following the registration; in relation to registration to events, up to 10 years after each event.

Legal obligations

Comply with legislative and applicable national and international regulations. The condition that makes the processing legitimate is the requirement to comply with legal obligations.

Data storage period: the data will be retained as long as the obligations under applicable regulations or national or supranational legislation remain.

Establishment, exercise or defence of legal claims

If necessary, to verify, exercise or defend the Data subject’s rights in a court of law. Data processing is legitimate when the data subject expresses a justified interest.

Data storage period: in the case of court litigation, the data will be maintained for the duration of the litigation, until the terms for attempting appeal actions are exhausted.

Scientific promotion and dissemination

With your consent, the data you provide will be processed for the following additional purposes: weekly delivery of the “Osservatori Digital Innovation Update” newsletter with the latest news on research and events of the Observatories; communications regarding events (invitations to Conferences, Workshops, Seminars, etc.) and free/premium Observatory content (publications, research reports, …) via email and/or SMS and/or instant messaging; involvement in research activities (e.g. surveys, telephone interviews, etc.) of the Observatories. The condition that makes the processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities.

Data storage period: until consent is revoked and/or for a maximum of 10 years.

Scientific promotion and dissemination on behalf of the MIP Politecnico di Milano Graduate School of Business – Joint Stock Consortium company

Subject to your consent, the data you provide will be processed to allow the Observatories to conduct scientific promotion and dissemination activities related to events and training courses of the MIP Politecnico di Milano Graduate School of Business. The condition that makes the processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities.

Data storage period: until consent is revoked and/or for a maximum of 10 years.

Communication of data to third parties, in particular to partners and sponsors of Observatory events/research

Subject to your consent, the data you provide will be processed to allow the Observatories to communicate the data to the aforementioned subjects, who will process them for their communications regarding their products, services, newsletters and events, as well as to carry out market studies and statistical analytics. The condition that makes the processing legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities.

Data storage period: until consent is revoked and/or for a maximum of 10 years.

Use of images and multimedia materials for information, promotion and scientific dissemination

In the case of participation in events organized by the Politecnico di Milano (following your enrolment or registration), participants are notified that audio and video recordings may be conducted and their image and/or voice processed, through any channel and/or means, to pursue institutional purposes of scientific information, promotion and dissemination. The Data Controller has the right to access or disclose images of the user without consent, pursuant to art. 97 of Law 633/1941. In any case, pursuant to article 10 of the Civil Code (Italian Law), any use of the images that may jeopardize the honour, reputation or decorum of the person portrayed, filmed or recorded is excluded.

Data storage period: images will be processed pursuant to the principles in art. 5 of the GDPR, for a period not exceeding 5 years for the attainment of such objectives and in compliance with conservation limitation periods, without prejudice to previously conducted data treatments.

Profiling

With your consent, the data you provide will be processed to enable the Observatories to create profiles (individual and/or aggregated) to develop statistical analyses and/or to improve products and services, as well as to send you targeted promotional information and communications that may be of greater interest to you. The condition that makes the treatment legitimate is your consent (voluntary and revocable at any time). The withdrawal of consent does not affect previously performed data processing activities.

Data storage period: until consent is revoked and/or for a maximum of 5 years.

Data recipients

The data can be processed by external entities operating as controllers such as, but not limited to, self-employed professionals (e.g. law firms, accountants), supervisory authorities and bodies, and public or private entities in general, entitled to request the data.