This privacy policy is issued pursuant to Art. 13 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and in compliance with the legislation on the processing of personal data, as well as free circulation of such data.

 

 

Data Controller: Politecnico di Milano – General Director, by delegation of the Rector pro tempore – contact: dirgen@polimi.it

Data Protection Officer and Contact Points: privacy@polimi.it

Categories of Data Subjects

This information notice is mainly addressed to:

• Students and recent graduates of the Politecnico di Milano, enrolled or previously enrolled in bachelor’s and master’s degree courses;
• Accredited representatives of employers, representing public or private entities that interact with the Career Service of the Politecnico di Milano. 

Purpose of Processing, Legal Basis, Categories of Data and Retention Period

For the purposes of applying European and national regulations (EU Reg. 679/2016, hereinafter Regulation), we inform you that your personal data will be used for the following purposes:

 

During events organized by the Politecnico di Milano to facilitate the meeting between students/graduates and employers, photos and audio-video recordings of participants may be collected.
The images and/or audio-video recordings collected in carrying out this purpose may be disseminated pursuant to Law no. 150/2000 (“Regulations on information and communication activities of public administrations”) on institutional websites as well as through social network channels (including but not limited to Instagram, Facebook, LinkedIn).
Furthermore, the communication and/or dissemination of images and/or audio-video recordings implies the granting of a non-exclusive license, without time limits and worldwide, transferable to third parties. This license includes the rights set out in Articles 12 and following of Law no. 633/1941, including but not limited to: right of publication; right of reproduction in any manner or form; right of transcription, editing, adaptation, processing and reduction; right of communication and distribution to the public, including projection, transmission and broadcasting rights (for example, via IPTV, mobile terminals, VoIP, digital channels, etc.), also in summarized and/or reduced versions, using any technical means; the right to keep a copy of the images, also in electronic form and on any known or future technological support, for the purposes and within the limits defined above. The use of images does not entitle the subject to any compensation.
In any case, any use of the image that may damage the honor, reputation, or decorum of the person portrayed, recorded, or filmed is excluded.

Nature of Data

Providing data is optional. Refusal to provide data makes it impossible to provide the indicated services. The collected data is of a mandatory nature.

Processing Methods

The processing carried out for the purposes indicated above may be performed both on paper and digitally, manually and/or with electronic or otherwise automated tools, including in-house databases or external databases. Data is stored in paper archives and/or in digital format for the indicated retention period. Access to the data acquired for the purposes mentioned is allowed only to duly authorized personnel. Personal data is also collected and processed through the dedicated platform www.careerservice.polimi.it, managed by the Politecnico di Milano.
The platform allows personalized registration and access for students and recent graduates, consultation of job and internship offers, application for open positions, participation in career guidance events, and uploading of CVs. It also allows personalized registration and access for employer representatives to propose job/internship positions and monitor applications. The platform functionalities fall within the scopes of career guidance, job/internship search and support for job transition purposes.
Optionally, the Career Service platform allows personalized use of content and suggestions, based on the user’s academic path and stated preferences/areas of interest. This personalization does not involve binding automated decisions and is carried out under human supervision.

Use of Artificial Intelligence - (AI) Tools

Within the Career Service platform, optional automated support tools based on AI technologies may be used. These tools are used, for example, to suggest improvements to CVs, help with applications, and—limited to company users—in drafting job postings; or to propose tags or keywords consistent with the user’s profile.
The processing does not involve binding automated decisions, is carried out under human supervision, and does not involve the transfer of personal data to third parties. The user may freely choose whether to use these features without affecting access to other services.

Limited Profiling

The Career Service platform offers personalization of content and suggestions, based on academic path and preferences provided by the user. These are supervised by authorized staff and do not involve automated decisions with binding effects. Personalization is based only on data directly provided by the user (e.g. year of study, field of study, declared interests) and academic data already available in the University’s information system. Free interactions, open text content, or unstructured browsing behavior are not analyzed. The purpose is to improve the user’s experience by offering relevant content and services. The logic is based on predefined, constant rules (e.g. suggestions based on year of enrollment or area of study), not on dynamic learning or external predictive models.

Human Supervision and Optional Nature

All personalization activities are supervised by authorized Career Service staff. The user can freely enable or disable these functions. Disabling them does not limit access to the main services of the platform. Personal data processed for personalization is not transferred to third parties nor processed outside Politecnico infrastructure or by technical providers designated as Data Processors.

Source of Data

Personal data is collected in the following ways:
a. Data provided directly by the user: personal and professional data submitted through CVs or manually entered on the Career Service platform. The Politecnico does not deduce or process professional data from indirect sources without legal basis or consent.
b. Data provided through registration/use of the platform at www.careerservice.polimi.it, including optional visibility settings of personal profiles to accredited entities.
c. Data provided indirectly by third parties: e.g. event organizers or associations connected to the University (such as the Alumni Association), only if the user has consented.
d. Data from public sources: such as reputable newspapers, company websites, or social networks.

Personal data may also be processed through platforms or online services used by Politecnico di Milano to create virtual connections between employers, Career Service representatives, and students/recent graduates. Access is restricted to duly authorized personnel.

Categories of Recipients

Personal data may be communicated to public and/or private entities. For statistical purposes, it may be shared with research institutes and technology support providers (as data processors). Employers who access personal data through job/internship applications or the graduates’ profiles act as independent Data Controllers and are responsible for their own privacy notices and GDPR compliance.

Data Retention and Deletion

At the end of the retention period (outlined in table 1), unless it relates to academic careers where indefinite storage applies, data will be deleted or anonymized. CV and profile visibility for employers is maintained only up to 24 months after graduation, in line with Career Service policies.

Transfer to Non-EU Countries or International Organizations

Personal data will be processed within the EU. If it becomes necessary for technical/operational reasons to use providers located outside the EU, transfers will comply with Chapter V of the GDPR, based on adequacy decisions, appropriate safeguards, or binding corporate rules.

Data Subject Rights

As a data subject, you can request at any time:

• confirmation of the existence of your personal data.
• access to your personal data and related information; rectification of inaccurate or incomplete data; deletion of data (under conditions in Art. 17(1) GDPR and subject to exceptions in Art. 17(3)); restriction of processing (under conditions in Art. 18(1)); anonymization or blocking of unlawfully processed data.

You also have the right to object, wholly or partially:

• on legitimate grounds, to the processing of your personal data, even if relevant to the purpose of collection.
• to the processing of your data for promotional purposes concerning educational initiatives and cultural events of the Politecnico di Milano.

These rights can be exercised by contacting privacy@polimi.it. If you believe your rights have been violated, you have the right to file a complaint with the Data Protection Authority or another competent supervisory authority under the Regulation.