As required by the General Data Protection Regulation (EU Regulation 2016/679 – GDPR), we provide you with the following information regarding the processing of your personal data.

The data controller is the Politecnico di Torino, located at Corso Duca degli Abruzzi, n. 24, 10129 – Turin (Italy), in the person of the Rector pro tempore, as legal representative. The contact information for the holder is PEC: politecnicoditorino@pec.polito.it; for further information and clarifications: privacy@polito.it

The Data Protection Officer (“DPO”) of the Politecnico di Torino, whom data subjects can contact regarding the processing of their personal data and the exercise of their rights, can be contacted at the following addresses: dpo@polito.it; PEC: dpo@pec.polito.it.

In compliance with the principles of lawfulness, fairness, transparency, adequacy, relevance and necessity referred to in Article 5.1 of the GDPR, Politecnico di Torino, as data controller, will process your personal data in accordance with Article 6.1.a) of EU Regulation 2016/679. In particular, your personal data will be processed by the Politecnico di Torino, in a computerised manner, for the management of visits to the Castelllo.

Data processed for the above purposes will be communicated or otherwise accessible to the Activity Manager and other members of the visit management team. The information collected may be processed in anonymous and/or aggregated form for statistical purposes.

The management and storage of the personal data collected by the Politecnico di Torino will be carried out on systems located within the University and/or external suppliers of certain services necessary for the technical-administrative management, who, for the sole purpose of the service requested, may come to know the personal data of the data subjects and who will be duly appointed as data processors in accordance with Article 28 of the GDPR.

The data collected will not be transferred to a country outside the European Union.

The personal data involved in the processing will be kept for a maximum of five years in order to document the statistical processing necessary for monitoring the University’s activities.

The provision of personal data is necessary for the purpose of booking.

As a data subject, you have the right to:

• make a request to the data controller in accordance with Articles 15 et seq. of the GDPR.,
• access to your personal data and all the information referred to in Article 15 of the GDPR;
• correct your inaccurate personal data and complete incomplete personal data;
• delete your data, unless it is contained in records that the University is obliged to retain, and unless there is an overriding legitimate reason for processing;
• limit processing in cases referred to in Article 18 GDPR.

You also have the right to:

• object to the processing of personal data, subject to the provisions regarding the necessity and the obligatory nature of the processing in order to be able to use the services offered;
• revoke consent given for processing of data that is not compulsory, without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.

If you wish to exercise any of your rights, you may contact the Data Controller.

You have the right to contact the Data Protection Authority in the manner indicated in the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb- display/docweb/4535524