Information regarding privacy Training activities on personal data protection POLI.design Scrl
with registered office in Milan, via Durando 38 / A, TAX CODE- VAT: IT-12878090153 is the Data Controller of personal data processing ("POLI.design", or also "Controller")
The company POLI.design Scrl based in Via Durando 38 / A Milan (hereinafter referred to as the Company) states that it is the Data Controller pursuant to articles 4, no. 7 and 24 of EU Regulation 2016/679
(or GDPR) of 27 April 2016 concerning protection of individuals with regard to the processing of personal data (hereinafter Regulation) of personal data collected on the website www.polidesign.net
("site") with particular reference to the registration area for users exclusively interested in receiving communications on products and / or services offered.
The Company therefore states that, pursuant to article 13 of the Regulation, it will go ahead with the processing in question for the primary and exclusive purpose of training, using the methods indicated below.
Personal data processing means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data, even if not registered in a database, such as the
collection, recording, organisation, structuring, storage, processing, selection, blocking, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or
otherwise making available, alignment or combination, restriction, elimination or destruction.
The data shall be processed for the following purposes, manually and/or with the support of IT or electronic means.
- Main purpose of the processing of personal data
Personal data collected will be processed for "Training" purposes (UNIVERSITY MASTERS OF THE POL TECNICO DI MILANO, JOINT MASTERS AND IN COL LABORATION WITH OTHER INSTITUTIONS, INSTITUTIONS,
SCHOOLS AND MORE; HIGHER EDUCATION COURSES; EDUCATION ON DEMAND - WORKSHOPS COMPETITION WORKSHOPS - COACHING FOR COMPANIES, BODIES, ASSOCIA TIONS AND INSTITUTIONS, EVENTS, COMPETITIONS,
SEMINARS AND MORE.)
For maximum transparency aimed at ensuring the user gives informed consent, it is specified that the purpose in question cannot be achieved without the necessary registration
on the company website or without registration through a specific "registration document" (REQUEST FOR ADMISSION, APPLICATION FORM OR SIMILAR DOCUMENT.) or
for legal companies without signing the contract with POLI.design Scrl. If the user does not intend to give consent to the processing, he / she (should not and / or) may not register,
except for the possibility of browsing and viewing the contents of the site as an unregistered user. By giving consent to the processing, the data subject acknowledges the purposes described.
- Data communication and dissemination
Users' personal data obtained by "get registered/registration" and/or "contract" may be communicated to third parties for the provision of training activities;
however, within the limit of the purposes of the processing described above. No personal data acquired from the web site or through the appropriate registration form at POLI.design Scrl
will be disseminated in accordance with the purpose for which it was derived.
- Category of collected data
POLI.design Scrl only processes the personal data of the data subject collected by: POLI.design website form; Application for admission and / or application form; Curriculum vitae;
Copy of the identity document; Copy of the tax code; Copy of the passport.
In case the service is addressed to a legal entity, POLI.design S.c.r.l. exclusively treats the company data, the name and surname of the person being authorized to sign the private agreement and the contact
personal data of the person of the company who deals with the activities mentioned in the appointment.
- Processing methods
The personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected. If it is necessary the Data Controller will formally request the data
subject for an extension. In order to prevent data loss, abuse, incorrect data use and unauthorised access, specific security measures have been implemented. Finally, the processing of personal data is only
handled by the personnel given the task of processing by the Data Controller or the Data Processing Manager. The processing will be carried out in the following ways: paper media, magnetic media,
manually and/or electronically, or automated.
Personal data will be stored both in a physical file in the company and in the company server to follow up the purposes and activities indicated in this information.
Personal data will be processed only for the purposes referred to in the previous paragraph; if POLI.design Scrl intends to use the same for further purposes, it must do so with the explicit
consent of the data subject. The processing of personal data may be carried out on behalf of POLI.design, with the aforementioned methods and criteria of confidentiality and equivalent security, by
companies and bodies that provide specific processing services regarding the management of services reserved for students or administrative services, as well as by public or private organisations
carrying out orientation and placement activities, providing internships or implementing cooperation and exchange programmes with EU and non-EU universities or carrying out activities that fall
within the aforementioned purposes.
Personal data will be transmitted to companies, firms, organisations and institutions for the planning and implementation of curricular internship programmes
In the event that the companies, firms, organisations and institutions transmit to the Data Controller:
- Offers and opportunities for entering the world of work
- Extra-curricular internships or training and / or orientation work placement
POLI.design Scrl will limit itself to merely transmitting the job description or similar document / text to the data subject who must apply personally for the aforementioned job.
In such cases POLI.design Scrl is not responsible for the processing of data carried out by the applicant companies and / or firms
The data subject may have knowledge of the source of the data as well as the logic and purpose of its processing; may obtain the cancellation, transformation, anonymous form or blocking of data processed
in violation of the law, as well as the updating, correction or, if there is interest, integration of the data, and he/she may oppose processing of the data for legitimate reasons
- Data Controller and Data Protection Officers
The Data Controller is POLI.design Scrl based in Via Durando 38 / A Milan.
The Internal Officer is the pro-tempore manager, the Chief Executive Officer.
The DPO is available at the following email addresses dpo@polidesign.net
An updated list of officers, appointed by the Data Controller of the DPO articles37, 38.39 appointed pursuant to GDPR Regulation 2016/679 is available at the registered office of the Data Controller.
For any other form of communication, not covered by those for which the DPO has been designated, the Data Controller provides the email address: privacy@polidesign.net
- Storage Time
The storage time of any piece of data, which has been formalised in documents such as information to be released to the data subject or in the register of processing activities, is linked
to the purpose of the processing.
The Company reserves the right to keep personal data for up to 60 months from the end of the training activity and/or contract considering also the possible obligations of archive required by the law.
In reality, the same data could have different storage times if used for different purposes and these must therefore be appropriately managed and communicated to the data subject.
The times are divided into times for purposes, which end when the purpose for which it was provided is achieved, and storage times, for which there must be a reason. In some situations, the Data Controler may
decide to extend the storage times beyond those required by law.
- Rights Of The Data Subject
The data subject has the rights refe red to in article 15 GDPR and specifically the rights listed below:
- To obtain confirmation from the Data Controller of the existence yet registered
- To obtain information on: a) the source of the Personal Data; b) the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic
instruments; e) the identification details of the Data Controller, of the officers and of the other persons charged with the task
- To obtain a) the updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of unlawfully-processed data, inc uding those that do not need
to be kept for the purposes for which the data were collected; c) certification that the operations as per letters a) and b) were made known, including their contents, to those to whom the data were
communicated or disclosed, except where this is impossible or involves a commitment of resources clearly disproportionate to the protected right
- To object, in whole or in part: a) for legitimate reasons, to the processing of personal data even if pertinent to the purpose of the collection; b) to the processing of his/her Personal Data for the
purpose of sending advertising or direct sales material or for carrying out market research or commercial communication through the use of traditional marketing systems, or automated calls,
by means of email, phone and / or paper mail.
The data subject also has the rights referred to in Articles 16-21 of the GDPR, namely the right to be forgotten, the right to limit processing, the right to data portability,
as well as the right to complain to the Authority for the Protection of Personal Data.
The data subject may, at any time, exercise his/her rights by sending a request to the Data Controller by:
- registered mail to POLI.design Scrl at the registered office in Milan, via Durando 38 / A, 20158 Milan;
- email to the address: privacy@polidesign.net
Or the data subject (i.e. the subject to whom the personal data refer) may choose to assert his/her rights before two bodies: Privacy Guarantor and / or Judicial Authority.
These two bodies offer alternative courses of action: the data subject, therefore, can not assert his/her right before both but will have to choose who to contact for the purpose of any claim for damages.
- Consent
Pursuant to EU Regulation 679/2016 on privacy, the data subject's and company consent to the processing of data for this purpose is considered necessary. Without the user’s consent, POLI.design
will not be able to proceed with the relation. The consent is deemed granted when the box at the bottom of the form is checked or the form is signed.
If the registration form is presented in paper format, the student is required to sign at the bottom of this document.
PORADA INTERNATIONAL DESIGN AWARD
Information Notice pursuant to Art. 14 of the Regulation (EU) 2016/679 (GDPR) According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of the personal data concerning PORADA INTERNATIONAL DESIGN AWARD.
- SUBJECT OF THE PROCESSING
DATA CONTROLLER - pursuant to art. 4 and art. 24 of GDPR, is Porada Arredi Srl with registered address at Via P. Buozzi 2, Cabiate (CO) in person of Giacomo Allievi, President of Board of Directors. Contacts: e-mail privacy@porada.it; phone number: 031766215
- CATEGORIES OF PROCESSED DATA
Personal data means any information relating to a Data Subject, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (art 4.1.1. GDPR). In this case: name, surname, image, contact details
Processing of personal data means "any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction".
Data Subject means "an identified or identifiable natural person".
- PURPOSES OF THE PROCESSING | LAWFULLNESS | DATA RETENTION | NATURE OF DATA PROVISION AND REFUSAL
| Purposes of the Processing |
Lawfulness of the Processing |
Data retention period |
Nature of data provision and refusal |
Dissemination of image (photography/video) and name and surname for the activities connected to the promotion of the event and of the participants/winners
The dissemination will be put in place throught the Data Controller web site https://www.porada.it/ and brochure.
The image will be collected within the scope of PORADA INTERNATIONAL DESIGN AWARD
|
Consent of the Data Subject art. 6 lett. a) GDPR |
Personal Data will be kept for the period necessary for the purposes for which they are collected except the right to object or withdrawal the consent given for dissemination. |
The provision of personal data is optional. The Data Subject is free to refusee to provide the Data and in this case the image/data will not be disseminated. |
| Direct marketing: commercial communication for marketing/ promotional activities through e-mail, newsletter and/or papery mail. To compare and possibly improve the results of communications, Data Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, openings, unique "clickers" and clicks; the devices and operating systems used to read the communication; the detail on the activity of individual users; the details of the e-mails sent, e-mails delivered or not, of those forwarded. All these data are used for the purpose of comparing, and possibly improving, the results of communications |
Consent of the Data Subject art. 6 lett. a) GDPR |
Until consent withdrawal (opt-out) |
The provision of personal data is optional. The Data Subject is free to refusee to provide the Data and in this case the Data Subject will not be subscribed to newsletter of Porada Arredi Srl and will not receive marketing communication |
- RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Your processed data will be communicated to subjects that operates as Data Processor and/or person acting under the authority of the Data Controller or Data Processor, or acting as separate Data Controllers and this to comply with the related purposes.
Precisely data will be communicated to: - subjects such as photographers, press agencies, who support the Data Controller for printing brochures, catalogs and make photographs and video;- subjects that provide services for the management of the information system and the telecommunications networks ( included the service of newsletter and platform web); - competent authorities for fulfilling legal obligations and/or provisions of public bodies, upon request.
The list of Data Processor is constantly updated and available at the Data Controller’s registered office.
- DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
Personal data are not transferred outside the European Union.
- DATA SUBJECT’S RIGHTS
You can exercise your rights as expressed to articles 15 and ss. of the UE Regulation 2016/679, contacting the Data Controller by sending an e-mail to privacy@porada.it. Precisely, you have the right, at any time, to ask the Data Controller the access to your personal data, the rectification of the data, the erasure of the data, the restriction of the processing. Moreover, you have the right to object to the processing of your personal data, in any time, and you have the right for the portability.
You have the right to withdraw the consent without prejudice to the lawfulness of the processing based on consent before withdrawal. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your personal data violates the provisions of Regulation EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Regulation EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it ).
- ORIGIN OF THE DATA
Concerning the INTERNATIONAL DESIGN AWARD, promoted by Porada Arredi Srl and Poli.design, Porada Arredi Srl riceived your personal data and detail contact from Poli.design.
PERSONAL DATA PROCESSING CONSENT, Reg. (UE) 2016/679