We provide you the following information on the processing of your personal data, when you use the DigiCirc MOOC platform (https://digicirc-onlinecourses.polito.it/), in accordance with the General Data Protection Regulation (Regulation EU 2016/679).

The DigiCirc MOOC platform has been developed to support the learning activities required by DigiCirc acceleration programs (Circular Cities, Blue Economy, Bioeconomy) which is part of an Innovation Action via a consortium funded by the European Union’s Horizon 2020 research and innovation program under grant agreement No. 873468 ('DigiCirc'). The DigiCirc MOOC platform contains 17 courses, provided by 11 DigiCirc partners, and each course is structured with video-lectures, slide presentations and written assignments.

The DigiCirc MOOC platform is an open-source CMS (content management system), which is developed by Open EdX, customized and operated by Politecnico di Torino (IT Department, Architecture and Design Department) with the cooperation of Abstract Technologies GmbH as external developing company. Politecnico di Torino will only use personal data for the purposes as described in this policy and will protect any personal data collected in accordance with the applicable laws.

PROVIDING AND PURPOSES OF PROCESSING PERSONAL DATA

When you register to the DigiCirc MOOC platform (https://digicirc-onlinecourses.polito.it), you provide personal data (such as: full name, email, public username, content of the assignment) which will be processed by Data Controller in electronic and/or paper format. Your personal data will only be used and collected so that you can participate and attend the courses, have access to the learning materials related to DigiCirc MOOC platform and join related activities. Your personal data will only be shared among DigiCirc partners involved in the evaluation of the assignments related to the courses and solely in order to contact you. No other personal data will be collected when you use the DigiCirc MOOC platform.

If you refuse to provide your personal data or does not agree with the compliance obligations, please note that access to the DigiCirc MOOC platform will not be possible.

PRICIPLES AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA

Politecnico di Torino (Data Controller) will process your personal data in accordance with the principles of data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability (art. 5, paragraph 1 of the GDPR) and pursuant to art. 6, paragraph 1, on the legal basis of consent of the GDPR for the educational aims of DigiCirc training program.

PERSONS AUTHORISED TO PROCESS THE PERSONAL DATA, POSSIBLE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA AND DATA PROCESSOR

Your personal data are processed by the Data Controller and access to your personal data is given to specific persons of Politecnico di Torino’s IT Department and Architecture and Design Department, as responsible of DigiCirc MOOC platform development; to Abstract Technologies GmbH for technical maintenance; and shared with the DigiCirc partners as recipients of contents for the assignments’ evaluation.

Personal data are stored in the university servers (located inside Politecnico di Torino) and/or in external servers which belong to providers of technical and administrative services. These service providers may have access to your personal data exclusively for the services they render. In this case, Politecnico di Torino engages them as Data Processors in accordance with article 28 of the GDPR.

Politecnico di Torino takes specific technical and organizational security measures to prevent loss, illicit or unlawful use of personal data and unauthorized access to personal data according to the GDPR, and applicable laws.

TRANSFER OF PERSONAL DATA

Currently, the collected personal data will not be transferred to a country that does not belong to the European Union (third countries). However, if any personal data will be transferred such will take place in accordance with article 45 of Regulation (EU) 2016/679, i.e. only to a non-EU country that offers an adequate level of data protection.

PERIOD FOR WHICH PERSONAL DATA ARE STORED

Personal data are kept for no longer than is necessary for the fulfilment of the purposes regarding the DigiCirc MOOC platform and deleted after the DigiCirc projects end.

AUTOMATED DECISION-MAKING

The personal data collected for the purposes here described will not be subject to processing involving an automated decision-making process (including profiling).

RIGHTS OF THE DATA SUBJECT

You, as a Data Subject, have several rights regarding the processing of your personal data to request from the Data Controller, in accordance with articles of the GDPR, which are the following:

• access to your personal data and to the information referred to in art. 15 of the GDPR;
• rectification of inaccurate personal data (including the right to have incomplete personal data completed);
• erasure of your personal data, unless there are overriding legitimate grounds for the processing (such as data which must be kept by Politecnico di Torino);
• restriction of processing pursuant to art. 18 of the GDPR;
• object to the processing of your personal data;
• withdraw your consent given for non-compulsory processing of personal data, without affecting the lawfulness of processing based on consent before its withdrawal.

Please contact the Data Controller if you want to exercise your rights.

COMPLAINT

You have the right to file a complaint at the Italian Data Protection Authority (Garante per la protezione dei dati personali) following the instructions available at: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524. Or you can file a compliant at your national Data Protection Authority.

CONTACTS

The Data Controller is Politecnico di Torino, represented by the Rector pro tempore as legal representative, with statutory seat in Corso Duca degli Abruzzi, 24 – 10129 Torino. You can contact the Data Controller at: politecnicoditorino@pec.polito.it (certified e-mail). For further information and inquiries write to: privacy@polito.it

You can contact the Data Protection Officer (DPO) of Politecnico di Torino for inquiries on the processing of your personal data and your rights at: dpo@polito.it; dpo@pec.polito.it (certified e-mail).

This privacy statement has been updated on 21.06.2021