1. Data Controller
The Data Controller for the processing of personal data is RES4NET – Network of Research Centers for Interdisciplinary Collaboration, hosted at Politecnico di Milano, Piazza Leonardo da Vinci 32, 20133 Milan (MI), Italy.
Contact email: res4net.project@gmail.com
2. Types of Data Collected
The website collects the following personal data: browsing data (IP address, browser type, operating system, pages visited, access time) automatically generated by IT systems; data voluntarily provided by the user through contact forms (name, email address, message). Where possible, browsing data is processed in anonymised form.
3. Purposes and Legal Basis for Processing
Data is processed for the following purposes: (a) technical operation of the website – legal basis: legitimate interest under GDPR Art. 6(1)(f); (b) responding to contact requests – legal basis: data subject’s consent under GDPR Art. 6(1)(a); (c) anonymised statistical analysis of website usage – legal basis: consent under GDPR Art. 6(1)(a), given via the cookie banner.
4. Cookies and Tracking Technologies
The site uses strictly necessary cookies and, subject to your consent, analytics and profiling cookies. For detailed information please refer to our Cookie Policy.
5. Recipients of Personal Data
Personal data is not sold or transferred to third parties for marketing purposes. Data may be shared with technical service providers (hosting, analytics) acting as Data Processors under GDPR Art. 28, following execution of appropriate data processing agreements.
6. International Data Transfers
Some third-party services (e.g. Google Analytics) may transfer data to the United States. Such transfers are carried out in compliance with the safeguards provided under GDPR Arts. 44–49 (Standard Contractual Clauses).
7. Retention Period
Browsing data is retained for a maximum of 12 months. Data provided through contact forms is retained for the time necessary to handle the request and in any case no longer than 24 months. Security logs are retained for 6 months.
8. Rights of the Data Subject
Under GDPR Arts. 15–22, data subjects have the right to: access their personal data (Art. 15); rectification (Art. 16); erasure (“right to be forgotten”, Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing (Art. 21); withdraw consent at any time (Art. 7(3)).
To exercise your rights, please write to: res4net.project@gmail.com
9. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it) if they believe that the processing of their personal data violates the GDPR.
10. Updates
This Privacy Policy was last updated on 16 June 2026 (version 1.0). Any changes will be published on this page with the date of update.