In accordance to article 13 of GDPR (General Data Protection Regulation) EU Regulation n. 679/2016 of 27 April 2016

This document is issued pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 on protection of natural persons with regard to personal data processing and in compliance with the legislation on personal data processing, as well as on the free movement of such data.

Data Controller – Identity and Contact

The Data controller of Politecnico di Milano is the General Director upon authorization of the pro-tempore Rector – contact: dirgen(at)polimi.it

Data Protection Officer – Identity and Contact

Dr. Vincenzo Del Core - privacy(at)polmi.it tel.: 02.2399.9378

Internal data processor

Dr. Federico Colombo - Area Development and Relations with Enterprises Manager – Piazza Leonardo da Vinci, 32, Milan (MI), e-mail: careerservice(at)polimi.it 

Data will be processed by other authorized parties and, for this purpose, in compliance with current legislation.

Purposes of data processing

For the purposes of the application of European and national legislation on this matter (EU Reg. 679/2016, hereinafter Regulation), we inform you that your personal data will be used for the following purposes:

Purposes of the processing for which personal data are intendedLegal basisCategories of personal dataStorage period
Management of placement activities, including internship and institutional communication activitiesTo fulfil the institutional activities of Politecnico di Milano (Article 6, paragraph 1, letter e of the EU Regulations) as well as for legal obligations (Legislative Decree 276/2003, Law n. 183 of 04/11/2010)
  • Identification and personal data
  • Personal and career data

Data concerning the university career, including those related to the internship, will be stored for an indefinite period of time due to the transparency and good operation of the public administration.
The data processed for purposes of placement and professional guidance will be processed for the period required to carry out these activities.

Nature of data

The provision of data is optional. If you refuse to provide data, it is impossible to perform the mentioned services. The collected data are compulsory.

Processing methods

The data processing carried out for the above mentioned purposes can be performed both through paper and digital means, manually and/or with electronic tools or, in any case, through automated tools, including in-house databases. They are also stored in paper archives as well as in digital format for the aforementioned period. Access to data acquired for the purposes mentioned above is allowed to duly authorized staff.

Recipients categories

In relation to the mentioned purposes, data may be disclosed to the following public and/or private subjects, as to say to companies and/or persons, in Italy and abroad, for placement purposes. In particular, your personal data may be communicated also to other public administrations, anonymised too, if these institutions must process them for procedures related to their institutional work, as well as to all those public entities to whom, with the same prerequisites, the communication is compulsorily provided in accordance to EU provisions, laws or regulations, as well as insurance companies for possible accident insurances.

Storage period of personal data and their return

At the end of the storage period, as set out in table one and where there are not data related to the university career for which it is provided a storage for an indefinite period of time, the data will be deleted or given back in an anonymous way.

Data Transfer to Extra EU Country

The data collected for the aforementioned purposes could be transferred to a country located outside the European Union (the so-called Third country). The Data Controller specifies that this extra EU transfer will take place only to third countries on which the European Commission has taken an adequacy decision (Article 45 GDPR) or to third countries that provide one of the guarantees indicated as appropriate by the Article 46 of the GDPR.

Processing Method

As interested party, you can ask the Data Controller, at any time:

  • confirmation of the existence or not of your personal data;
  • access to your personal data and related information; the correction of incorrect data or the addition of incomplete data; the cancellation of your personal data (if any condition indicated in Article 17, paragraph 1 of the Regulations can be applied and it is in compliance with the exceptions provided in paragraph 3 of the same article); the limitation of processing of your personal data (when one of the conditions indicated in Article 18, paragraph 1 of the Regulations can be applied), the anonymization or blocking of data processed unlawfully, including data whose storage is not required in relation to the purposes for which the data were collected or subsequently processed;

As interested party, furthermore, you have the right to wholly or partly oppose:

  • for legitimate reasons regarding the processing of his/her personal data, related to collection purposes;
  • to the processing of his/her personal data for the purpose of sending promotion of educational initiatives and cultural events of Politecnico di Milano.

These rights can be exercised by contacting privacy(at)polimi.it.

If you deem that your rights have been violated by the data controller and/or by a third party, you have the right to submit a complaint to the Data Protection Authority and/or to another competent supervisory authority pursuant to the Regulation.

Last update: February 1, 2019