Privacy Notice pursuant to Article 13 of Regulation (EU) 2016/679
Pursuant to Article 13 of Regulation (EU) 2016/679, we hereby inform you that the personal data collected are processed, including by automated means, by Politecnico di Milano – Public Engagement and Communication Division, for the purpose of sending the Frontiere Newsletter, published by Politecnico di Milano and dedicated to science communication.
Data Controller: identity and contact details
The Data Controller for Politecnico di Milano is the Director General, acting under delegation from the Rector pro tempore. Contact: dirgen@polimi.it
Internal Data Processing Manager
Ms. Marcella Elvira Logli – e-mail: marcellaelvira.logli@polimi.it.
The data will also be processed by other authorised persons who have been duly instructed for this purpose in compliance with the applicable legislation.
Personal data collected and methods of collection
The personal data processed include identification and contact information (e.g. first name, surname, e-mail address, occupation and organisation), collected through the following channels:
- “Frontiere” newsletter subscription forms: data collected through an electronic form available on the Politecnico di Milano website [https://www.frontiere.polimi.it/en/newsletter/subscribe], which are necessary in order to receive the relevant newsletter.
- Forms available on social media platforms for the Frontiere Newsletter: data collected through forms provided by the Meta and LinkedIn platforms and used to subscribe to the newsletter. Such data are processed independently by Politecnico di Milano and by the relevant social media platforms, in accordance with their respective privacy notices.
For this purpose, please refer to the privacy notices of the relevant platforms:
– Meta: https://www.facebook.com/privacy/policy/
Purposes of the processing
The purpose of the processing of personal data is to send the Frontiere newsletter published by Politecnico di Milano.
The table below specifies, for each of the purposes identified above, the applicable legal basis, the categories of personal data processed and the relevant retention period:
| Purpose of the processing for which the personal data are intended | Legal basis for the processing | Categories of personal data processed | Retention period for personal data |
| Sending the Frontiere newsletter, published by Politecnico di Milano and dedicated to science communication | Consent (Article 6(1)(a) of the EU Regulation) | Identification data; personal details | Retained until the data subject requests erasure or until the service is discontinued – 24 months |
| Sending communications concerning future events, initiatives and activities of Politecnico di Milano, including in collaboration with other organisations, by e-mail and newsletter, provided that such communications fall within the institutional purposes of the University | Consent (Article 6(1)(a) of the EU Regulation) | Identification data; personal details; contact details | Retained until the data subject requests erasure or until the service is discontinued – 24 months |
Categories of data subjects
Subscribers to the “Frontiere” Newsletter: this category includes all persons who voluntarily subscribe to the newsletter, the official science communication channel of Politecnico di Milano.
Data subjects may subscribe by completing the appropriate form available on the University website or through advertising forms available on the Meta and LinkedIn platforms. Newsletter subscribers, who are generally interested in receiving updates on Politecnico di Milano’s scientific activities, receive periodic communications concerning news, events and science communication initiatives promoted by the University.
The categories of data subjects described above include students, academic and administrative staff, external professionals, representatives of public and private bodies and organisations, as well as anyone interested in learning about and participating in the science communication activities and events promoted by the University.
By voluntarily subscribing, these individuals express their interest in the activities of Politecnico di Milano and qualify as recipients of the institutional and science communication activities described in this Privacy Notice.
Transfer of data to third countries outside the EU
Personal data will be processed by the Data Controller within the territory of the European Union.
Should it become necessary, for technical and/or operational reasons, to engage parties located outside the European Union, or to transfer some of the data collected to technical systems and cloud-based services located outside the European Union, such processing will be governed in accordance with the provisions of Chapter V of the EU Regulation and authorised on the basis of specific decisions of the European Union.
All necessary safeguards will therefore be adopted to ensure the fullest possible protection of personal data, with transfers being based on:
a) adequacy decisions concerning the recipient third countries adopted by the European Commission;
b) appropriate safeguards provided by the third-party recipient pursuant to Article 46 of the EU Regulation;
c) the adoption of Binding Corporate Rules (BCRs).
Rights of the data subject
With regard to the personal data covered by this Privacy Notice, the data subject may exercise the rights provided for under the EU Regulation, as set out below:
Right of access [Article 15 of the EU Regulation]: the right to obtain information concerning the processing of one's Personal Data and, where applicable, to receive a copy thereof;
Right to rectification [Article 16 of the EU Regulation]: the data subject has the right to obtain the rectification of inaccurate personal data concerning him or her;
Right to erasure of Personal Data without undue delay (“right to be forgotten”) [Article 17 of the EU Regulation]: the data subject has the right to obtain the erasure of his or her personal data;
Right to restriction of processing of Personal Data in the circumstances provided for by Article 18 of the EU Regulation, including where the processing is unlawful or where the accuracy of the Personal Data is contested by the data subject [Article 18 of the EU Regulation];
Right to data portability [Article 20 of the EU Regulation]: in the circumstances provided for by that Article, the data subject may request to receive his or her Personal Data in a structured format for the purpose of transmitting those data to another controller;
Right to object to the processing of Personal Data [Article 21 of the EU Regulation]: the data subject has the right to object to the processing of his or her personal data;
Right not to be subject to automated decision-making [Article 22 of the EU Regulation]: the data subject has the right not to be subject to a decision based solely on automated processing.
Further information concerning the rights of data subjects is available on the website www.garanteprivacy.it.
In accordance with Article 19 of the EU Regulation, Politecnico di Milano shall communicate any rectification or erasure of personal data or restriction of processing requested by the data subject to each recipient to whom the personal data have been disclosed, where this is possible.
With regard to the purposes indicated above, the data subject may withdraw his or her consent at any time to the processing of identification data and personal details by sending an e-mail to:
privacy@polimi.it
Pursuant to Article 7 of the EU Regulation, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint
Where the data subject considers that his or her rights have been infringed, he or she has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with the procedures specified by the Authority at the following website:
www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
Methods of processing
Personal data will be processed in paper, electronic and digital form and entered into the relevant databases.
Such databases may be accessed, and the data contained therein may therefore become known, by staff members expressly designated by the Data Controller as Internal Data Processing Managers and persons authorised to process personal data.
Such persons may carry out operations including consultation, use, processing, comparison and any other appropriate operation, including by automated means, in compliance with the applicable legal provisions necessary to ensure, inter alia, the confidentiality and security of the data, as well as their accuracy, updating and relevance in relation to the stated purposes.
Amendments and updates
This Privacy Notice shall be effective from the date indicated in its heading.
Politecnico di Milano – Public Engagement and Communication Division may amend and/or supplement this Privacy Notice, including as a result of subsequent amendments and/or additions to the applicable legislation.
The data subject may consult the most up-to-date version of this Privacy Notice at any time on the following website: