NOTIFICATION AND CONSENT OF TREATMENT OF PERSONAL DATA

ACCORDING TO ART. 13 OF EU REGULATION GDPR (General Data Protection Regulation) – N. 679/2016 – 27 APRIL 2016 and authorization for publication

This notification is issued according to art. 13 of EU Regulation GDPR 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and in compliance with the legislation on the processing of personal data, as well as on the free movement of such data.

The Politecnico di Milano, located in Milan, Piazza Leonardo da Vinci 32, 20133 Milano – Italy (referred hereafter as PoliMi or as the Data Controller) would like to provide you with the following information about the processing of your personal data in relation to the registration to Milan Fashion-tech Bootcamp organized by Politecnico di Milano, coordinator of the DeFINE project and referred hereafter also as DeFINE event.

DeFINE (Developing a Fashion-tech Innovation Network for Europe) is a three year (2018 – 2021) collaborative project co-funded by the European Commission’s COSME programme which aims to support the fusion of cutting-edge technologies and innovation into the European fashion and design industries.

The processing of your personal data will be based on principles of correctness, lawfulness and transparency, and will be implemented protecting your privacy, your rights and fundamental freedoms, in compliance with current legislation on the security and protection of personal data.

1.    Data controller and contact

Politecnico di Milano – Director General on behalf of the Rector pro tempore, contact: dirgen@polimi.it.

2.    Internal responsible person

Internal responsible person:

Chiara Colombi (chiara.colombi@polimi.it), PhD, Associate Professor of Design Department, Politecnico di Milano, Durando 38/a – 20158 Milano, Italy.

The data will be processed by other authorized subjects and for this purpose instructed in compliance with current legislation.

3.    Responsible of personal data protection and contact point

Vincenzo Del Core – privacy@polmi.it  tel.: +39 02 2399 9378.

4.    Purposes of processing, legal basis, data categories and storage period

You will participate to the DeFINE Fashion-Tech Bootcamp Milan and related activities carried out by DeFINE project.

For the purposes of the application of European and national legislation on the matter (EU Regulation 679/2016, from now on Regulation), we inform you that:

1. your personal data requested in the application form, i.e., First Name, Last Name, Email, Work Information (Job Title, Organisation Name) have the following purposes:

• the correct and complete provision of the relationship concerning the DeFINE event service and the event attendance between you and the Data Controller or between the company you are employed and Data Controller.
• the fulfillment of obligations under the law, regulations or community regulations, as well as instructions given by authorities or bodies authorized to do so.

1. Name, Surname, E-mail will be used to contact you for the evaluation of the DeFINE event.
2. Your images including filming (in film, audio or both), interviews (in film, audio or both), and photographs taken during the DeFINE event will be used for non-commercial purposes, including the promotion of DeFINE’s and Politecnico di Milano’s institutional activities.

The legal basis of the treatment is the execution of relationship concerning the participation of the DeFINE Event and the necessity to fulfill legal and administrative obligations. The legal basis of the treatment is the consent (Article 6(1)(a) of the Regulation) for the successful execution and expected impact of the project. In particular, the following table details the purpose for each kind of personal data and storage period.

TABLE 1: Purposes of the processing of personal data.

5.    Nature of data provision

In general, failure to communicate and / or refusal to provide the personal data outlined above will make it impossible to take part to the DeFINE event.

6.    Rights of the data subject

The data subject can exercise the rights provided for in the EU Regulation set out below:

• access right [art. 15 of the EU Regulation] (being informed about the processing of their Personal Data and obtain a copy);
• modify their Personal Data [art. 16 of the EU Regulation] (the data subject can modify inaccurate personal data);
• delete Personal Data without delay (“right to be forgotten”) [art. 17 of the EU Regulation] (the data subject can delete their data);
• limit the processing of their Personal Data in the cases provided for by art. 18 of the EU Regulation, including unlawful processing or objection regarding the Personal Data accuracy [art. 18 of the EU Regulation];
• oppose the processing of their Personal Data [art. 21 of the EU Regulation] (the data subject can oppose the processing of their personal data);
• not to be subject to automated decision-making [Article 22 of the EU Regulation] (the data subject can refuse to be subject to a decision based on automated processing).

Further information about data subject rights can be obtained on www.garanteprivacy.it.

Under art. 19 of the EU Regulation, Politecnico di Milano informs personal data recipients, of any corrections, deletion or processing limitations, where possible.

The data subject can withdraw the consent for identification and personal data processing by sending an email to: privacy@polimi.it.

Under Article 7 of the EU Regulation, the consent withdrawal does not affect the lawfulness of the processing based on the consent given before its withdrawal.

7.    Right to lodge a complaint with the Guarantor.

If the data subject considers that their rights have been compromised, they can lodge a complaint with the Data Protection Authority, under the Authority’s procedures, at the following Internet address www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

8.    Possible consequences of failure to provide data

The data processing consent for the above purposes is free and optional. However, any refusal will make it impossible for the Data controller to carry out the purpose-related services.

9.    Processing and profiling method

Personal data will be processed in physical and electronic format and entered in the relevant databases which may be accessed by data controller-appointed employees as internal data processors and persons in charge of processing. They may consult, use, process, align and carry out any other operation, including automated, under legal provisions necessary to ensure the data confidentiality, security, accuracy, updating and purpose-related relevance.

For purpose 1 and 2, your data will be collected throughout through F6S Platform and processed by PoliMi. You can read F6S’s information about GDPR here: https://www.f6s.com/privacy-policy. F6S Network Limited (registered number 08522020), whose registered office is at 152-160 Kemp House, City Road, London EC1V 2NX.

For purpose 3, we inform you that DeFINE event can be the subject of video and audio-video recordings. These data, including images, filming and audio / video recordings (hereinafter, the “Images”), even in partial and / or modified or adapted form, taken during the event, will be treated in full respect of the GDPR. These Images will be taken also with the aid of electronic means by also by internal or external Polimi authorized persons specifically instructed for this task. These Images will be processed, also with the aid of electronic means also by authorized person specifically instructed for data processing, for the dissemination and communication activities of the DeFINE project and of the Politecnico di Milano. The images collected will be stored, also in electronic form and on any technological support for the purposes and within the limits defined above and may be disseminated pursuant to Law n. 150/2000 on the www.define-network.eu platform as well as through social network channels (Facebook, Twitter, Youtube by way of example, but not exhaustive). The use of images does not give right to any compensation. The Politecnico di Milano has the right to access or disclose the user’s Images without any consent, by reason of the art. 97 of law n. 633/1941. This authorization implies the granting of a non-exclusive license, without limits of duration and for the whole world, transferable to third parties, for the use of the Materials and includes the rights set forth in articles from 12 to 19 of the law of 22 April 1941, n. 633, including without limitation: publication rights; right of reproduction in any way or form; right of transcription, assembly, adaptation, processing and reduction; right of communication and distribution to the public, including the rights of projection, transmission and dissemination also in summary and / or reduced version, by any technical means, the right to keep a copy of the Materials, also in electronic form and on any known technological support or future invention for the purposes and within the limits defined above.

It is in any case excluded pursuant to the aforementioned article and pursuant to art. 10 of the Civil Italian Code any use of the Images that could harm the honor, reputation or decorum of the person portrayed, taken or recorded

10. Amendments and updates

This policy is valid from the date indicated in the header. Politecnico di Milano – Department of Design, may amend or supplement this policy after any regulatory later modifications or additions.

11. Consent and authorization for publications

By clicking on the check boxes on the Event registration page on F6S, I freely and fully consent the treatment of my personal data accordingly to the purposes set in the above notification.

Updated notice on 22/11/2019.

I understand that I have the rights to withdraw my consent at any time. The consent withdrawal does not prejudice the lawfulness of the data treatment based on consent before the withdrawal. The consent is revoked with the same ease with which it is granted.