PRIVACY POLICY – Information on the processing of personal data for the matto.design website of the Politecnico di Torino (PURSUANT TO ART. 13 OF THE GENERAL DATA PROTECTION REGULATION – EU REGULATION 679/2016)

We provide you the following information on the processing of your personal data in accordance with the General Data Protection Regulation (EU Regulation 679/2016).

CONTACTS

The Data Controller is Politecnico di Torino, represented by the Rector, with statutory seat in Corso Duca degli Abruzzi, 24 – 10129 Torino.

You can contact the Data Controller at: politecnicoditorino@pec.polito.it (certified e-mail)

For further information and inquiries write to: privacy@polito.it

You can contact the Data Protection Officer (DPO) of Politecnico di Torino for inquiries on the processing of your personal data and your rights at: dpo@polito.it; dpo@pec.polito.it (certified e-mail).

PRICIPLES, LEGAL BASIS AND PURPOSES OF THE PROCESSING OF PERSONAL DATA

Politecnico di Torino (Data Controller) will process your personal data in accordance with the principles of data minimization, accuracy, storage limitation, integrity, confidentiality and accountability (article 5, paragraph 1 of the GDPR).

Politecnico di Torino will process your personal data in compliance with article 6, paragraph 1, letter b) (“processing is necessary for the performance of a contract to which the data subject is party […]”) and letter e) (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) of the GDPR for institutional

purposes related to progress in scientific research, to the transfer of knowledge in the fields of architecture, engineering and other polytechnic sciences as well as in the development process of the company as required by the University Statute and, in cases where your consent is required, according to art. 6, par. 1, let. a) [“the interested party has given consent to the processing of their personal data for one or more specific purposes”] of the aforementioned Regulation.

In particular, your personal data (name, surname, company, role, e-mail address) shall be processed by the Politecnico di Torino in the paper or electronic format, in order to ensure the protection of the activity related to management or research quality and Third Mission. More specifically, the delivery of notifications (newsletters) shall have the aim to: provide the institution with networking activity for the creation of cooperative research projects; provide information on the activities organized by our research teams (e.g. seminars, webinars) and promote the activity, results, and goals achieved by the institution.

TRANSFER OF PERSONAL DATA

Your personal data can be disclosed by Politecnico di Torino, and are in any case visible, to its staff members and collaborators who will receive appropriate training from the Data Controller.

Politecnico di Torino can disclose personal data to other public authorities when they need to process these data in order to carry out procedures for which they are the responsible institutions. On specific grounds, Politecnico di Torino can also disclose personal data to other public bodies if the disclosure is provided for by Union or Member State law.

Personal data are stored in the university servers (located inside Politecnico) and/or in external servers which belong to providers of technical and administrative services. These service providers may have access to your personal data exclusively for the services they render. In this case, Politecnico engages them as Processors in accordance with article 28 of the GDPR.

Your personal data will not be transferred to non-EU countries (third countries).

PERIOD FOR WHICH PERSONAL DATA ARE STORED

Your personal data shall be stored for the time necessary to satisfy your request or – should you have given consent to receiving the newsletters – for a time span no longer than that required to achieve the promotional purposes of such service.

PROVIDING PERSONAL DATA

You are required to provide your personal data to Politecnico di Torino. If you refuse to provide your personal data, Politecnico cannot pursue the above-mentioned aims.

RIGHTS OF THE DATA SUBJECT

You are the Data Subject and you have the right to obtain from the Data Controller (in accordance with articles 15, 16, 17, 18, 19, 20 and 21 of the GDPR):

  • access to your personal data and to the information referred to in art. 15 of the GDPR;
  • rectification of inaccurate personal data (including the right to have incomplete personal data completed);
  • erasure of your personal data (except for data which must be kept by Politecnico di Torino) unless there are overriding legitimate grounds for the processing;
  • restriction of processing pursuant to art. 18 of the GDPR.

You also have the right to:

  • object to the processing of your personal data, except when the processing is required for your use of university services;
  • withdraw your consent given for non-compulsory processing of personal data, without affecting the lawfulness of processing based on consent before its withdrawal.

Please contact the Data Controller if you want to exercise your rights.

COMPLAINT

You have the right to contact the Italian Data Protection Authority (Garante per la protezione dei dati personali) following the instructions available at: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524

This privacy statement has been updated on 18.02.2021

The English translation has no legal effects. The Italian version shall constitute the sole authentic text and will be referred to for any legal matters.

  |     |     |