Privacy

The Data controller of Politecnico di Milano is the General Manager upon authorization of the pro-tempore Rector – contact: dirgen@polimi.it 

Data Processor: privacy@polimi.it, phone: +39 0223999378

The personal data processing required to the interested party is made pursuant to Article 6 letter e) of EU regulation 2016/679 (data processing for reasons of public interest), for the following purposes:

Main data processing concerning students

• Data processing for guidance
• Data processing with the aim to provide entry tests or assessment of access requirements
• Data processing aimed at providing the education career and its management (from registration to graduation)
• Data processing for internship activity
• Data processing for statistical surveys and evaluation of teaching
• Data processing for tutoring services
• Data processing aimed at providing services and activities for diritto allo studio
• Data processing for teaching in distance mode

See also: not-primary information

Main data processing concerning employees and/or collaborators

• Data processing for carrying out competition tests/selections
• Data processing for management of the employment relationship
• Personal data processing for training and professional development purposes
• Personal data processing necessary for management of research projects
• Personal data processing in order to guarantee research monitoring and evaluation
• Personal data processing for technology transfer activities
• Data processing necessary for welfare policies and financial aids
• Data processing for the health and safety of people in the workplace
• Personal data processing for landline and mobile phone service

See also: not-primary information

Transversal data processing or related to transversal activities

• Data processing for what concerns management of areas
• Personal data processing for management of workstations
• Data processing to manage activities of bodies and institutional profiles
• Data processing for management of accidents
• Data processing for libraries
• Data processing in the field of protocol and document preservation services
• Data processing with the aim to purchase goods and services, sign of contracts, debt collection, management of litigation
• Data processing in the field of e-mail services and collaboration tools
• Personal data processing in the context of joint provision of services

See also: not-primary information

Personal data may be processed by employees or collaborators of the Data Controller who, working under its direct authority, are appointed as responsible or authorized for data processing and are properly trained and receive specific operating instructions.

In particular, they will be processed by technical-administrative staff and professors, in relation to the different activities provided by the related data processing.

Personal data may also be disclosed to other public administrations, if they have to process them for any procedures within their institutional jurisdiction. 

In particular, to take advantage of the services, contributions and facilities of diritto allo studio, the data will be communicated to providers of Politecnico di Milano, appointed as external data processors. 

Personal data may also be communicated to public authorities or private subjects that could carry out education, research or internship activities related to the study programme chosen. 

The University is supported by external service providers for technical-administrative management, which could be made aware of the personal data of students, for the sole purpose of the service required and which would be previously authorized as external data processors. 

Personal data for research and teaching activities may be transferred abroad to other university and research institutions, or in the context of international mobility projects. 

The data collected will be kept for the time established by current legislation or by the University regulations. 

In particular, it should be noted that personal data concerning the university career will be kept indefinitely, taking into account the storage obligations imposed by current legislation.

The interested subject has the right:

• To ask the data controller, pursuant to Article 16, 17, 18, 19 and 21 of Regulation (EU) 2016/679, the access to their personal data and correction or their cancellation or limitation of the data processing that concern him/her or to object to their processing. Cancellation is not allowed for data included in documents that must be stored by the University;
• To submit a complaint to a supervisory authority. 

The processing of personal data will be carried out through manual, computerized and telematic means, however, suitable to guarantee their security and confidentiality. 

Security measures are used, in compliance with the provisions of Article 32 of the GDPR to prevent the loss of data, illicit or incorrect use and unauthorized access and in compliance with the AgID Circular n. 2/2017 "Minimum ICT security measures for public administrations".

For details on data managed in each data processing, please refer to what specified in the related processes and administrative procedures.

This information may be subject to subsequent updates and additions, so we suggest you to periodically review it. 

DATA PROCESSING CONCERNING STUDENTS 

• Continuing education (07/02/2024) 
• Distance learning activities 
• Guidance activities: Open day, events and other activities (03/03/2023) 
• Language courses management (7/6/2021) 
• Student careers (23/2/2023) 

DATA PROCESSING CONCERNING EMPLOYEES AND/OR COLLABORATORS 

• Electronic Selection Procedure test (07/11/2023) 
• Health and Safety in the workplace (01/10/2021) 
• Personal Data Processing Information for the Technical-Administrative Staff of the University (14/07/2021) 

TRANSVERSAL DATA PROCESSING OR RELATED TO TRANSVERSAL ACTIVITIES 

• Accomodation (20/04/2022) 
• Election procedures online (22/11/2022) 
• Emergency situation in Ukraine (28/03/2022) 
• Fundrasing (07/02/2024) 
• Green Pass (14/10/2021) 
• Historical Archives (15/6/2020) 
• ICT Services 
• Identity Provider Federazione IDEM (01/03/2024) 
• Learning (04/02/2022) 
• Libraries (25/11/2020) 
• Management of mail and protocol services (16/9/2020) 
• Merchandising (26/11/2020) 
• Multimedia content (13/06/2023) 
• Placement (07/02/2024) 
• Politesi (17/03/2023) 
• Protection of privacy rights (28/04/2023) 
• Research (28/06/2022) 
• Reporting malfunctions and failures (08/09/2023) 
• Services and Supplies (30/08/2022) 
• Student Associations and contributions (29/08/2022) 
• Technology Transfer 
• University's collegial bodies (01/10/2021) 
• Video Surveillance (18/04/2024) 
• Web sites 
• WhatsApp (01/03/2021)