Privacy Policy
Privacy Statement
This questionnaire is anonymous. The record of your responses to this questionnaire does not contain any identifying information unless any of the questions explicitly ask you to do so. If you have used a code to access this questionnaire, please be assured that no information related to this code can be recorded with your responses. The code, if any, is handled separately where it will be indicated only that you have (or have not) completed this questionnaire. It is not possible to associate the code with responses to this questionnaire.
Privacy Agreement
INFORMATIVE IN ACCORDANCE WITH ARTICLE 14 GDPRThis document is produced pursuant to Article 14 of Regulation (EU) 679/2016 (General Data Protection Regulation, hereinafter "GDPR"), the Online Survey available at the following address: https://survey.polito.it/ng/index.php/761464
WE INFORM YOU THAT YOUR PERSONAL DATA WILL BE PROCESSED ACCORDING TO THE FOLLOWING PRINCIPLES:
Article 5 of Regulation (EU) 679/2016, Principles applicable to the processing of personal data
1. Personal data shall be:
(a) processed lawfully, fairly and transparently in relation to the data subject ("lawfulness, fairness and transparency");
(b) collected for specified, explicit and legitimate purposes and thereafter processed in a manner not incompatible with those purposes; further processing of personal data for purposes of documentation of public interest, for scientific and historical surveys or for statistical purposes, pursuant to Article 89 , Paragraph 1, shall not be considered incompatible with the initial purposes ("purpose limitation");
(c) adequate, relevant, and limited in relation to the purposes for which they are processed ("data minimization");
(d) accurate and, if necessary, kept up to date; every reasonable step must be taken to eliminate or rectify promptly any personal data that are inaccurate in relation to the purposes for which they are processed ("accuracy");
(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected; personal data may be kept for longer periods insofar as the data will be processed solely for archiving in the public interest, scientific or historical research, or statistical purposes in accordance with Article 89(1), subject to the application of appropriate operational tools and organizational measures required by this Regulation to ensure the protection of the rights and freedoms of the data subject ("data retention limitation")
(f) processed in such a way as to ensure adequate security of personal data, including the protection of data against any unauthorized or unlawful processing, destruction of data or accidental damage, through appropriate technical and organizational measures ("integrity and confidentiality").
2. The Data Controller is responsible for compliance with Paragraph 1 and may be accountable for it ("accountability").
We therefore provide you with the following information:
GENERAL INFORMATION (Article 14 §.1 GDPR)
Data Controller
The "Data Controller" is Cristina Pronello, professor at the Polytechnic University of Turin for the purposes of this information.You may contact the Data Controller at the above address or by sending an e-mail to the following address: cristina.pronello@polito.it
Data Protection Officer (DPO)The position of DPO is not required for this specific data processing.
Transfer of personal data to other countriesData is not transferred to third countries.
FURTHER INFORMATION (Article 14 §.2 GDPR)
Retention period
The retention period of your personal data follows the principle of necessity of such processing. Therefore, your personal data will be kept as long as necessary for the purposes described above.
Legitimate interest
The controller uses personal data to pursue its legitimate interest in the cases described in section 1.c based on the following assessments.
The interest of the data controller is legitimate because of the scientific research purposes of the collection of personal data and the scientific research mission.
Data processing is limited to personal data concerning:
- Family, social and economic conditions of the Data Subject;
- Habitual behavior and transportation preferences;
The interests, fundamental rights and freedoms of the data subject remain protected as:
- Data is collected and collated anonymously;
- Data is kept confidential;
- Data may only be transferred, disclosed, disseminated, published, licensed, exploited, or made available to third parties anonymously;
Rights of the data subject
Through the above addresses, the data subject may exercise the following rights (in addition to the right to data portability ex art.20 GDPR, not applicable to this processing):
- Request access to his/her personal data (Art. 15 GDPR);
- Request rectification of inaccurate data or supplementation of incomplete data (Art. 16 GDPR);
- Request deletion of personal data concerning him/her (Art. 17 GDPR);
- Request restriction of processing of personal data (Art. 18 GDPR).
Right to revoke consent
Where consent is a legal basis for the processing of personal data (Art. 6, §. 1(a)) and special data (Art. 9, §. 2(a)), the data subject has the right to revoke his or her consent at any time without affecting the lawfulness of the processing based on the consent given prior to revocation.
Right to lodge a complaint
According to Article 77 GDPR and Article 2a of Legislative Decree 196/2003, the data subject has the right to lodge a complaint with the Italian Data Protection Authority as the Supervisory Authority, as established by the Italian legal system.
Source of personal data
Data are collected exclusively from the survey, thus from the respondent.
Profiling
The personal data processed will not be used for personal profiling
Recipients of personal data
Personal data are shared only with the following recipients:
- Providers of statistical analysis services;
- Data processors.
PROCEDURE FOR THE EXERCISE OF RIGHTS
To exercise the above rights, you may contact the Data Controller by writing to the following email address: cristina.pronello@polito.it
We would like to inform you that pursuant to Article 14 paragraph 3 GDPR, the Data Controller shall provide the information referred to in paragraphs 1 and 2 of Article 14 GDPR:
(a) Within a reasonable period after obtaining the personal data, but no later than one month, considering the specific circumstances under which the personal data are processed;
(b) if the personal data are intended to be disclosed to the data subject, at the latest at the time of the first disclosure to that person; or
(c) if the personal data are intended to be disclosed to another recipient, no later than at the time of the first disclosure of the personal data.