Privacy policy

The current information is issued pursuant to Art. 13 of the EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and in compliance with the law on the processing of personal data and the free movement of such data.
This information refers to https://www.industry40lab.org, representing the research activities on which the Industry4.0lab staff is active. This privacy policy is rendered only for the site https://www.industry40lab.org and provides information to those who interact with the site, which is accessible electronically and pertains to the domain: https://www.industry40lab.org.
Data controller
Politecnico di Milano - General Director by proxy of the pro-tempore Rector - contact: dirgen@polimi.it.
Internal controller
Prof. Luca Fumagalli, Scientific and Internal Manager - Department of Management Engineering, via Lambruschini 4, Milan.
The data will be processed by further persons authorised and instructed for this purpose in accordance with current legislation.
Data protection officer and contact points
Mail: privacy@polimi.it - tel.: +390223999378.
Purpose of processing, legal basis, categories of data and retention period
For the purposes of the application of the relevant European and national legislation (EU Reg. 679/2016, henceforth Regulation), we inform you that your personal data will be used for the following purposes:

​

Purpose 1: Involvement in research activities (e.g. telephone interviews, email communication) of the research team.

Legal basis for processing: Public interest (Art. 6(1)(e) of the Regulation.

Categories of personal data processed: Identifying data, Contact details.

Personal data retention period: 2 years.

​

Purpose 2: Filling out online forms.

Legal basis for processing: Public interest (Art. 6(1)(e) of the Regulation.

Categories of personal data processed: Identifying data, Contact details.

Personal data retention period: 2 years.

​

Nature of the data
The provision of data is optional. Refusal to provide data will result in the impossibility of performing the intended purposes.
Treatment modes
Processing for the above-mentioned purposes is carried out digitally, manually and/or by electronic or, in any event, automated means. Access to data acquired for the above-mentioned purposes is permitted to duly authorised personnel.
Categories of recipients
In connection with the stated purposes, the data may be disclosed to the following public and/or private entities:
⦁    Any suppliers or processors and their direct delegates
Transfer to Non-EU Countries or International Organisations
Personal data will in no way be transferred to non-EU countries or international organisations.
Rights of data subjects
As a data subject, you may ask the Controller at any time:
⦁    confirmation as to whether or not personal data concerning him exist;
⦁    access to their personal data and information;
⦁    the rectification of inaccurate data or the supplementation of incomplete data;
⦁    the deletion of personal data concerning him/her (if one of the conditions set out in Article 17(1) of the Regulation occurs and in compliance with the exceptions set out in paragraph 3 of the same Article);
⦁    the restriction of the processing of your personal data (in the event of one of the hypotheses indicated in Article 18(1) of the Regulation), the transformation into anonymous form or the blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
As a data subject, you also have the right to object in whole or in part:
⦁    for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
⦁    to the processing of personal data concerning him/her for the purpose of sending promotional mailings for Politecnico di Milano training initiatives and cultural events.
These rights may be exercised by contacting privacy@polimi.it.
If you consider that your rights have been violated by the data controller and/or a third party, you have the right to lodge a complaint with the Data Protection Authority and/or any other supervisory authority competent under the Regulation.

DECLARATION OF CONSENT

By checking the appropriate box [on the on-line registration form], the person concerned expressly gives his or her free and full consent to the Processing of Data in accordance with the purposes indicated in the information notice and to the extent to which his or her consent is required by law, as well as to its communication within the scope of the subjects indicated in the information notice.
We inform you that as a data subject you have the right to revoke your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the consent before withdrawal. Before giving consent, the data subject shall be informed of this. Consent is revoked as easily as it is given.