Privacy Policy
INFORMATION FOR PERSONAL DATA PROCESSING UNDER ART. 13 AND 14 OF EU REGULATION NO. 679/2016 OF 27 APRIL 2016
This policy is issued under art. 13 and 14 of EU Regulation no. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and in respect of the laws on personal data processing and on the free movement of such data.
This policy refers to the institutional web site of the PhD Course in Information Technology, through which information on research and training activities in the fields of information technology is disseminated.
This privacy policy is issued only for the website of the PhD Course in Information Technology and provides information to those who interact with the website, accessible electronically and pertaining to the domain: https://phd-inf.polimi.it/.
DATA CONTROLLER
Politecnico di Milano – Director General, delegated by the pro-tempore Rector – e-mail: .
DATA PROTECTION OFFICER AND CONTACTS
PURPOSE OF DATA PROCESSING, LEGAL BASIS, DATA CATEGORIES AND STORAGE PERIOD
Under the relevant European and national legislation (EU Reg. 679/2016, hereafter, Regulation), we inform you that your personal data will be used for the following purposes:
| Purposes of personal data processing | Legal basis of processing | Categories of personal data processed | Data storage period |
| Purpose 1 Institutional communication activities of the PhD Course | Public interest (Art. 6, paragraph 1, letter e) of the EU Regulation). | – Identification data – Contact data | 3 years |
| Purpose 2 Website maintenance and monitoring | Public interest (Art. 6, paragraph 1, letter e) of the EU Regulation). | – Navigation data | 10 years |
| Purpose 3 Statistical, storage and archiving purposes | Public interest (Art. 6, paragraph 1, letter e) of the EU Regulation). | – Identification data – Contact data | 10 years |
NATURE OF THE DATA
It is optional to provide the data. The refusal to provide them involves the impossibility of fulfilling the intended purpose.
PROCESSING METHODS
The processing will be carried out on digital media, manually and/or using electronic or automated tools. Duly authorized persons are entitled to access the data acquired for the aforementioned purposes.
TRANSFER TO NO-EU COUNTRIES OR INTERNATIONAL ORGANIZATIONS
The personal data will not be transferred to countries outside the European Union or to international Organizations.
RIGHTS OF DATA SUBJECTS
As the data subject, you may at any time ask the Data Controller:
- for confirmation of the existence or otherwise of personal data concerning you;
- for access to your personal data and information relating to them;
- for the rectification of inaccurate data or the completion of incomplete data;
- for the erasure of personal data pertaining to you (in the presence of one of the conditions indicated in Art. 17, paragraph 1 of the Regulation, and in accordance with the exceptions envisaged by paragraph 3 of that article);
- for the restriction of processing of your personal data (in the presence of one of the conditions indicated in Art. 18, paragraph 1 of the Regulation);
- for the conversion into anonymous form or for the block on data processed illegally, including those data which do not need to be stored for the purposes for which they were collected or subsequently processed.
As the data subject you are also entitled to object in whole or in part:
- on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose for which the data was collected;
- to the processing of personal data relating to you for the purposes of promotion of initiatives.
These rights can be exercised by contacting .
If you believe that your rights have been infringed by the Controller and/or by a third party, you are entitled to lodge a complaint with the Data Protection Authority and/or with another competent supervisory authority by virtue of the Regulation.