Privacy Events

The EU regulation 2016/679 (“GDPR”) and the D. Lgs. 196/2003 protect the confidentiality of personal data and impose a series of obligations to those who deal with personal information related to natural persons (“interested”). Among the most important fulfilments, there is to inform the interested parties and acquire, where required as a legal basis, the consent to the treatment. Given that the latter will be based on the principles of lawfulness, correctness and transparency, minimisation and limitation of data retention, accuracy, integrity and confidentiality, in the light of the foregoing, we therefore expect to inform you that: a) The data controller is the MIP Politecnico di Milano – Graduate School of Business Consortium for shares, Via Lambruschini 4c – Building 26/A, 20156 Milano, Tel: + 39 02 23992820, Fax: + 39 02 23992844, hereinafter “MIP”.  b) The latter has appointed the Data protection officer, domiciled at the owner, whose contact details are: Phone: 02/23992820-Email: dpo@mip.polimi.it. C. The data provided by you will be treated having as legal basis the fulfilment of a contract (art. 6.1. B of GDPR) or its consent (art. 6.1. A of GDPR) and retained until its request for cancellation, solely to manage and document participation in this event, as well as to promote and organise the training and informative initiatives of the MIP. The treatment will be either on paper or magnetic, manually and/or with electronic instruments or, however, automated. Assuming the legal basis for art. 6.1. F of GDPR (pursuit of a legitimate interest of the proprietor), in addition, the MIP may collect images and audio recordings in order to promote and document its events as well as to show the quality and professionalism of its staff, its Collaborators and rapporteurs, of their research groups, as well as in order to contribute, in the context of institutional aims, to the diffusion of managerial culture. D. The conferral of data is optional, but failure to provide and/or consent to the processing of all data marked with an asterisk will, as appropriate, result in the impossibility of participating in this event; The impossibility to receive illustrative material on the various formative initiatives and/or invitations to further events. e) Unless communicated to persons to whom the right to access the data is recognized by legal provisions or orders of authority, the contact details may be disclosed to partners and sponsors of the event or to institutionally members of the control. The images and audio can be disseminated on the MIP website, on institutional sites and through social media, as well as using other digital or paper media to disseminate internationally as well as communicated to partners and sponsors. f) The data may be subject to treatment by both qualified persons as managers ex art. 28 of GDPR is by individuals (employees, collaborators in various ways) authorised for treatment pursuant to art. 29 of GDPR operating under the direct authority of the holder, who instructed them to do so. g) as part of the acquisition of outsourcing services, data may only be retained in the EU, the United States or in countries for which a European Commission adequacy decision exists; h) by contacting the DPO, pursuant to articles 15 to 22 of the GDPR, you may at any time exercise your rights, or the right to ask the data controller for access to personal information and the rectification or cancellation thereof or the limitation of Treatment that affects them or to oppose treatment. As interested, you have the right to withdraw your consent at any time, but this does not prejudice the lawfulness of the treatment prior to revocation.  It is also his prerogative to consult a supervisory authority to propose a complaint. i) to the MIP is present, a CRM system, aimed at improving the effectiveness of communications, allowing the person concerned to obtain information closer to their interests.

 

In order to guarantee the possibility for the interested parties not to be resumed, depending on the different situations, appropriate measures may be adopted, such as: i) the creation of areas which are not subject to filming that make the person identifiable; (ii) The adoption of instruments identifying the persons who have expressed their willingness not to be the subject of videorigrations; III) the possibility of benefiting from the event in streaming mode.

 

If you decide to withdraw your consent to the use of your images and recordings, you will need to send an e-mail to the DPO: This allows you to activate a procedure that would remove within 30 days of receiving the images from the sites managed directly by the Mip while, for everything related to third party sites and/or paper or multimedia publications, the data will no longer be included in the publications or communicated to third parties from the date of acceptance of the request.