Information for users that access the Historical Archives pursuant to article 13 of eu regulation n. 679/2016 of 27 April 2016

This document is issued pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 on protection of natural persons with regard to personal data processing and in compliance with the legislation on personal data processing, as well as on the free movement of such data.

The purpose of the information is to provide information on the data processed by the Historical Archives Service as part of the activities carried out as tasks of public interest, as provided by the Code of Cultural Heritage and Landscape and in compliance with the Code of deontology and good conduct related to the processing of personal data for historical purposes (see Article 6, paragraph 1, letter 'e' of GDPR, EU Regulation 2016/679).

Data Processing Controller

The Data controller of Politecnico di Milano is the General Manager upon authorization of the pro-tempore Rector – contact: dirgen(at)

Responsible for Data Protection and Contact Points

Dr. Vincenzo Del Core - privacy(at) tel.: 02.2399.9378

Place of Data Processing

For the purposes of the application of European and national legislation on this matter (EU Reg. 679/2016, hereinafter Regulation), we inform you that your personal data will be used for the following purposes:


Nature of data

The collected data are compulsory. Failure to communicate and/or refusal to reply will imply the impossibility to access the services offered for the use of the archival heritage kept by the Historical Archives.

Processing methods - Profiling

Processing methods

The processing will also be carried out through electronic tools, by staff appointed by the Historical Archives Service or the Service of the Museum Activities, according to methods and with specific tools aimed at guaranteeing the security and confidentiality of data. The processing will be carried out through IT tools to facilitate the retrieval of sources, including the online use of research tools, and according to fairness and non-discrimination principles for users accessing the historical archives (see chapter I, article 1 and chapter II of the Code of deontology and good conduct related to the processing of personal data for historical purposes). As far as it can be compatible, what mentioned at number 3 of Code of deontology and good conduct related to the processing of personal data for historical purposes, pursuant to Article 20 of the legislative decree n. 101 of 10 August 2018, can be applied.


The data processed will not be subject to data profiling.

Recipient categories

The data of all those who make use of the services offered will be collected. Data will not be disclosed to third parties.

Transfer to Extra-Eu Countries

Personal data may be transferred abroad, in accordance with the provisions of the Regulations, even in countries outside the European Union when this is necessary for one of the purposes indicated in this information document. The transfer to non-EU countries, in addition to cases where this is guaranteed by the adequacy decisions of the European Commission, is carried out in a way to provide the appropriate guarantees required by the articles 46 or 47 or 49 of the Regulations.

Rights of the interested parties

At any time, the interested party can exercise the rights provided by the EU Regulation n. 679/2016 and in particular:

  1. Right of access to personal data and all information pursuant to Article 15 of the Regulations;
  2. Right related to correction and anonymised change of data processed;
  3. Right to cancel (right to be forgotten) your data, except for those already included in documents that must be kept by Politecnico di Milano and unless there is a legitimate reason in order to proceed with data processing;
  4. Right to limitation of data processing, pursuant to Article 18 of the Regulations;
  5. Right to object to personal data processing, without prejudice to what is required in relation to the need for mandatory data processing in order to take advantage of the services offered;
  6. Right to withdraw the consent given for non-compulsory data processing, without prejudice about legality of treatment, based on the consent given before the withdrawal.

Methods of exercise of the Rights and complaint

Contact of the University Data Protection Officer: privacy(at) The interested party can also submit his/her complaint to the National Supervisory Authority, or the Data Protection Authority (

Last update: November 21, 2018