Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR), we hereby inform you that your personal data will be collected and processed, including, but not limited to, your name, email address and telephone number, city and/or country of origin and/or residence, years of work experience and/or academic background. Such personal data will be processed by MIP Politecnico di Milano Graduate School of Business ScpA, Data Controller, in order to respond to your request and provide you with more detailed information on the course for which you are requesting information, by contacting you at the telephone number and/or e-mail address you have indicated. Please note that some of your personal data, such as years of work experience, may be used in order to evaluate the requirements for attending the course of interest to you. The legal basis of the processing indicated consists in carrying out activities of a pre-contractual/contractual nature requested by the data subject. We would like to inform you that the personal data provided will also be used to advise you of further courses and activities carried out by the Data Controller that we consider to be of interest to you because of the course for which you are requesting information today. The legal basis for the processing indicated is the legitimate interest of the Data Controller. This interest consists in considering that, because of the relationship that has been established between you and MIP following the request for information, you may be interested in receiving information on additional courses and activities that the Data Controller organises with reference to the specific subject area to which the course of interest to you relates. Following the assessments made by the Data Controller, which can be clarified in detail, it was considered that the transmission of the aforementioned information periodically and for a limited period of time is an activity which, in addition to being in the interest of the Data Controller as it allows the promotion of the initiatives undertaken, also responds to a clear interest of a professional who is particularly attentive to lifelong learning and who, for this education, has decided to contact MIP, recognising its institutional seriousness and professionalism. Failure to provide the requested personal data does not allow the Data Controller to perform the activities in question. Finally, only with your express consent, your personal data will also be processed in order to comply with your request to subscribe to our automated newsletter containing information on our products, the latest news, events and other advertising and/or promotional material. The legal basis of such processing is the data subject’s consent (optional and revocable at any time). If you decide to provide us with your data, we hereby inform you that it will be processed by personnel authorised by the Data Controller and will be kept only for the time necessary to fulfil the stated purposes

With regard to the purpose of providing more detailed information on the course, personal data will be retained until the course is started, while with regard to bringing to your attention information relating to further courses and activities carried out by the Data Controller that are deemed to be of interest to you, your personal data will be kept for a further period defined by reason of the legitimate interest you have. In relation to the processing for the purpose of sending the newsletter, your personal data will be kept until your consent is withdrawn. Under no circumstances will your data be disclosed, but we advise you that it may be disclosed to third parties who perform, on behalf of the Data Controller, specific services aimed at ensuring the correct pursuit of the aforementioned purposes. The Data Controller makes use of services offered by some suppliers, suitably qualified as Data Processors, operating in Europe or countries for which there are adequate guarantees pursuant to art. 46 of the GDPR or, if those are absent, by applying one of the provisions pursuant to Art. 49 of the GDPR and also considering the possible risks deriving from the transfer of personal data. Finally, we remind you that, pursuant to Articles 15 to 22 of the GDPR, you have the right to obtain confirmation of the existence or otherwise of data concerning you, to obtain an indication of the origin and the purposes and methods of processing, updating, rectification and integration of data, as well as deletion of data processed in breach of law or where one of the reasons specified in Article 17 of the GDPR exists. We specify in particular that you have the right to object to processing based on the legitimate interest of the Data Controller or to processing for sending automated communications; at your request, such processing will be immediately interrupted and (where it is not otherwise lawfully processed) personal data will be deleted immediately. You also have the right to lodge a complaint with a supervisory authority if you believe that the rights set out here have not been granted to you. To exercise these rights, you can contact the Data Controller by writing to MIP Politecnico di Milano Graduate School of Business ScpA, with registered office in Via Lambruschini 4C, Building 26/A – 20156 Milan, email: privacy@gsom.polimi.it. The Company has appointed a Data Protection Officer, who can be reached at the following email address: dpo@gsom.polimi.it