DATA CONTROLLER	Politecnico di Milano - General Management General Manager as delegated by the pro-tempore Rector. Address: Piazza Leonardo Da Vinci, 32, 20133, Milano E-mail: dirgen@polimi.it; (“Institution” or “Politecnico” or “Controller”).
	DATA PROTECTION OFFICER	Address (Piazza Leonardo Da Vinci, 32, 20133, Milano), E-mail: privacy@osservatori.net.

What are cookies

Our website and the online services we provide through it, use “cookies”. Cookies are small bits of text, usually consisting of letters and/or numbers, that are sent to the visited website and generally stored by the web browser (such as Google Chrome or Mozilla Firefox), installed on the device used by the user to navigate. Cookies are then resent to the website upon the users’ next visit.

Cookies enable web sites to run smoothly, ensuring greater efficiency, and enabling you to keep products in your online cart, maintaining your login session active without requiring authentication every time you visit the website, as well as to customise your website user experience. Furthermore, they tell us which parts of our websites are visited, they help us to evaluate the effectiveness of web advertising and searches, and they enable us to analyse user behaviour to improve our communications, content and products.

If you wish to manually manage and/or verify the cookies on your computer, you can contact your browser manufacturer for detailed information.

Cookies can be classified according to:

• duration: session or persistent cookies
• provenance: first party or third party cookies;
• purpose: technical, analytics or profiling cookies.

Cookies that expire at the end of a browser session (usually when a user quits the browser) are called session cookies and are useful, for example, to store a user’s purchase order in memory, or for security reasons such as when a user accesses their internet banking or  webmail account. Cookies that are stored in memory for longer periods (between sessions) are called persistent cookies and are useful to remember user preferences or for targeted advertising.

The first or third party definition refers to the website or the domain that installs the cookie. first party cookies are installed directly by the website that the user is browsing, while third party cookies are installed by a different domain from the one that the user is visiting, for example, in the case that the website combines elements from other websites, such as images or social media plugins, or advertising.

You can delete cookies stored on your computer and change the settings of nearly all browsers to block them and avoid them from being stored. However, if you choose this option you will have to manually change some preferences every time you access the website, and it is possible that some services or features may not be available.

 Purpose of processing through cookies

According to the purpose, cookies installed on this website are identified as technical cookies, analytics cookies, and profiling cookies.

Technical cookies

These cookies are used by the website to ensure simple and smooth navigation, for example to remember login information or store products in the cart or the wish list. These cookies are necessary to navigate and use website features. Without these cookies we are unable to provide services such as shopping cart, purchasing and invoicing. For these reasons, their installation does not require users’ prior consent.

Analytics cookies

These cookies, that can be first or third party, are used to collect information on website use. In particular, they are useful to statistically analyse website accesses and visits and to enable the Data Controller to improve the structure, navigation logic and content. The information collected is used to perform statistical analyses aimed at improving website usage and if necessary, to provide content that is more appealing and more relevant to users’ interests.

Analytics cookies are not needed to operate the website, so user consent is required for the installation.

Profiling cookies

These cookies, that can be first or third party, collect information on how you use our website, for example, which pages you view most frequently. Such information enables us to optimize our website, making it easier to navigate.

These cookies enable user profiling, providing the Data Controller with the possibility of using such profiles for marketing purposes to, for example, offer discounts and/or promotions related to your actual interests. This category also includes social cookies.

These cookies may be installed on the user’s device only if prior consent has been granted.

The following table reports, for each type of cookie, the name, if it is first or third party, purpose of use, duration, and third party link:

Managing cookie preferences

When you first log in to the website, a banner will appear with a summarized privacy notice and a cookie preference management panel called the "Cookie Center". Also available is a button enabling you to accept all cookies.

Consent you decide to grant for the use of cookies will be registered with a technical cookie.

Managing preferences

You can also manage your cookie preferences through your browser settings. Almost all web browsers are set to automatically accept cookies, but the default configuration can be changed through the settings of the browser used, which allows you to delete/remove all or some cookies or block cookies from being sent, or allowing it only for certain sites.

Disabling or blocking cookies or deleting them may compromise the optimal use of certain parts of the website or prevent certain features, as well as affect the functioning of third-party services.

Cookie management configuration depends on the browser used. Following are instructions and links on how to manage cookies for major desktop browsers:

• Microsoft Internet Explorer: click on the settings icon in the top right and select “Internet options”. Click on “Privacy”, “Advanced” in the window to edit cookie settings.

For more information click on the following link:

http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies

• Google Chrome: click on the three dots in the upper right, then click on “Settings”. Select “Advanced” and in the “Privacy and security” section click on “website settings”. To change cookie settings, click on “Cookies and website data”.

For more information click on the following link:

https://support.google.com/chrome/answer/95647?hl=it&p=cpn_cookies%20https://support.google.com/accounts/answer/61416?hl=it

• Mozilla Firefox: click on the icon with the three horizontal bars at the top right and select “Options”. In the window, select "Privacy and Security" to adjust cookie settings.

For more information click on the following link:

https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

• Apple Safari: select "Preferences" and then select "Privacy" to edit cookie settings.

For more information click on the following link:

https://support.apple.com/it-it/guide/safari/sfri11471/mac

• Opera: select the icon with the three horizontal bars in the upper right and then on "Advanced". Select "Confidentiality & Security" and then "Site Settings." From the "Cookies and website data" section, adjust the cookie settings.

For more information click on the following link:

https://help.opera.com/en/latest/web-preferences/#cookies

For browsers other than those listed above, see the relevant guide to identify how to manage cookies.

Data provision

The data processed through the installation of technical cookies is necessary to ensure the correct navigation within the website.

It is optional to grant consent to the installation of analytics cookies and profiling cookies. Your data will therefore be processed by these cookies only with your express consent in the manner indicated above.

Data recipients

The data can be processed by external subjects operating as holders such as, but not limited to, supervisory and control authorities and bodies, and in general by subjects, even private ones, entitled to request data, Public Authorities that expressly request it from the Body for administrative or institutional purposes, in accordance with the provisions of current national and European legislation, as well as persons, companies, associations or professional firms providing assistance and consulting.

The data may also be processed, on behalf of the Entity, by external subjects designated as data controller, to whom appropriate operational instructions are given. These persons are essentially included in the following categories:

1. a) companies providing email delivery services;
2. b) companies that provide management and maintenance services of the website and of the information systems related to it;
3. c) companies that provide marketing automation platform management services.

Persons authorized to process

The data may be processed by employees or collaborators of the departments or offices of the Body responsible for the pursuit of the above-mentioned purposes that have been expressly authorized to process and who have received appropriate operational instructions.

Transfer of personal data to countries outside the European Union

Data collected using cookies may be transferred outside the European Union, and in particular to the United States (by way of example and not limited to, Hubspot, Umbraco, U-commerce, Microsoft, Brain Tree, Vimeo) or other non-European countries, which have not received an adequacy decision of the European Commission, by virtue of standard contractual clauses (Standard Contractual Clauses) adopted/ approved by the European Commission pursuant to art. 46, 2(.c) and (d) and in accordance with the decision taken by the Court of Justice of the European Union and thus make the transfer conditional on the adequacy of the guarantees.

A copy of the guarantees adopted can be obtained by contacting the Data Controller at the contact details reported at the beginning of this cookie policy.

The data collected using all other cookies will not be disseminated further.

Rights of the data subject - Complaint to the Supervisory Authority

By contacting the address and-email (privacy@osservatori.net), interested parties can at any time Request of the Data Controller:

- access to the data concerning them, its deletion, the rectification of incorrect data, the integration of incomplete data, as well as the limitation of its processing;

- revoke the consent granted at any time, without prejudice to the legitimacy of the processing previously performed.

Interested parties also have the right to file a complaint with the competent supervisory authority (Art. 77 GDPR), as well as to bring cases before the appropriate judicial bodies (Art. 79 GDPR). 

In addition, if the processing is based on consent or contract and is performed with automated tools, the data subjects have the right to portability, that is, receive the data in a structured format of common use and readable by an automated device, as well as, if technically feasible, to pass it on to another controller unimpeded.

Last updated: February 2021