Home Privacy

Didattica Privacy statement

Print page


You should receive the following information on the processing of your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679).


The Data Controller is Politecnico di Torino, represented by the Rector, with statutory seat in Corso Duca degli Abruzzi, 24-10129 Torino.
You can contact the Data Controller at: politecnicoditorino@pec.polito.it (certified e-mail)
For further information and inquiries write to: privacy@polito.it
You can contact the Data Protection Officer (DPO) of Politecnico di Torino for inquiries on the processing of your personal data and your rights at: dpo@polito.it ; dpo@pec.polito.it (certified email)


Your personal data shall be processed by Politecnico di Torino (Data Controller) in accordance with:

  • the principles of lawfulness, fairness, transparency and data minimization referred to in article 5, paragraph 1 of the GDPR.
  • article 6, paragraph 1, letter e) of the GDPR (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller”).
  • article 9, paragraph 2, letter g) of the GDPR (“processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law”): the processing of special categories of personal data such as image and voice in remote teaching, is carried out for institutional purposes only.
  • article 49, paragraph 1, letter d) of the GDPR (“the transfer is necessary for important reasons of public interest”) or article 9, paragraph 2, letter a) and article 49, paragraph 1, letter a) (the data subject has explicitly consented to the processing or transfer of personal data)

Politecnico di Torino collects your personal data (including your family members’ data) when you enrol in a degree programme and during the course of your studies. Here is an example of the personal data which may be collected and processed by Politecnico in electronic and paper format:

  • biographical data
  • information related to your school education provided upon enrolment at Politecnico
  • information related to your studies and academic progress at Politecnico di Torino (Personal Study Plan, exams, degree, etc.)
  • tuition fee payments, late payment penalties, sanctions
  • declarations on the financial condition of your family submitted to get tuition fee reduction
  • scholarships received from Politecnico di Torino, EDISU (Ente Regionale per il Diritto allo Studio Universitario) or other institutions
  • part-time on-campus jobs at Politecnico di Torino
  • sanctions imposed on you by Politecnico di Torino, if any
  • disability certificates, if submitted

Your data are processed by the Data Controller and by the university bodies authorised by the Data Controller to process your personal data within the scope of their functions and responsibilities.
Your data can be disclosed outside the University in the following cases:

  • at the request of public authorities when they need your data for institutional purposes (for instance, information is periodically exchanged with the: Ministry of Education, University and Research, National Student Register Office, Ministry of Economy and Finance, Ministry of Foreign Affairs, EDISU – the Regional Agency for the Right to University Education, ISTAT - Italian National Statistical Institute , CNVSU - National Agency for the Evaluation
    of the University and Research Systems and Osservatorio Regionale per l'Università e per il diritto allo studio Universitario).
  • at the request of judicial authorities.
  • when you register for your Final Examination you are asked to give your consent to the transfer of some of your personal data to businesses or institutions which declare to use them for employment purposes or to advertise training and cultural activities.
  • when you apply for a Specializing Master’s Programme organized in cooperation with external partners (businesses/organizations), you may be asked to give your consent to the transfer of your personal data to these partners who may offer you training opportunities or help you enter the world of work. Any other form of data processing or disclosure is not permitted.
  • when you take part in an international mobility project, you may be asked to give your consent to the transfer of your personal data to universities and academic institutions (based also outside the European Union), funding organizations and diplomatic missions.

Personal data are stored in the university servers (located inside Politecnico) and/or in external servers which belong to providers of technical and administrative services. These service providers may have access to your personal data exclusively for the service they render. In this case Politecnico engages them as Processors in accordance with article 28 of the GDPR.

Personal data collected for specific institutional purposes (i.e., internships, job placements at companies or institutions located outside the European Union) may be transferred to non-EU countries (third countries). The Data Controller ensures that a transfer of personal data to a third country may take place where the EU Commission has decided that the third country in question ensures an adequate level of protection (art. 45 - GDPR) or has provided appropriate safeguards
(art. 46 - GDPR) or when the transfer is necessary for important reasons of public interest or upon prior explicit consent of the data subject (art. 49, par.1, letter a) and d) – GDPR).


The personal data related to your academic progress at Politecnico di Torino are kept for an unlimited period of time in accordance with the achieving obligations imposed by the law. Other personal data are kept for no longer than is necessary for the purposes for which the personal data are processed (art. 5 - GDPR).


You are required to provide your personal data to Politecnico di Torino. If you refuse to provide your personal data, Politecnico cannot process your requests.


You are the Data Subject and you have the right to obtain from the Data Controller (in accordance with articles 15,16,17,18, 18 and 21 of the GDPR):

  • access to your personal data and to the information referred to in art. 15 of the GDPR;
  • rectification of inaccurate personal data (including the right to have incomplete personal data completed);
  • erasure of your personal data (except for data which must be kept by Politecnico di Torino) unless there are overriding legitimate grounds for the processing;
  • restriction of processing pursuant to art. 18 of the GDPR.

You also have the right to:

  • object to the processing of your personal data, except when the processing is required for your use of university services;
  • withdraw your consent given for non-compulsory processing of personal data, without affecting the lawfulness of processing based on consent before its withdrawal;
  • data portability.

Please contact the Data Controller if you want to exercise your rights.


You have the right to contact the Italian Data Protection Authority (Garante per la protezione dei dati personali) or other public supervisory authorities to lodge a complaint about the processing of your personal data.

The English translation of this document is provided as a support to the student community and has no legal effects. The Italian version shall constitute the sole authentic text and will be referred to for any legal matters.


This privacy statement has been updated on 31.07.2018