Institutional portal - Municipality of Milan

Information pursuant to art. 13 of EU Regulation no. 2016/679

Pursuant to art. 13 of EU Regulation no. 2016/679 (General Regulation on the Protection of Personal Data), the following information is provided.

Data controller

The data controller is the Municipality of Milan with headquarters in Piazza della Scala, 2 – 20121 Milan

Responsible for the protection of personal data

The Data Protection Officer - “DPO”) of the Municipality of Milan can be reached at the following e-mail address: dpo@Comune.Milano.it 

Purpose and legal basis

The data processing is aimed at the publication and completion of the tender and assignment procedures of the Framework Agreement pursuant to art. 6 par. 1 letter b of Regulation 2016/679 as part of the PNRR Intervention - MISSION M5 - COMPONENT 2 - INVESTMENT 2.2 - INTEGRATED URBAN PLANS - OPEN TENDER PROCEDURE PURSUANT TO ARTICLES. 54 AND 60 OF LEGISLATIVE DECREE N. 50/2016, TO BE CARRIED OUT THROUGH A TELEMATIC PLATFORM, FOR THE CONCLUSION OF FRAMEWORK AGREEMENTS WITH MULTIPLE ECONOMIC OPERATORS - promoted by the contracting authority Invitalia pursuant to art. 38, Legislative Decree no. 50/2016).

Personal data are processed in compliance with the conditions established by EU Regulation 2016/679 and in particular:

• from the art. 6 – par. 1 letter b) for the execution of a contract to which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the interested party

Types of data processed

The procedure - Tender for assignment of the Framework Agreement pursuant to art. 6 par. 1 letter b of Regulation 2016/679 as part of the PNRR Intervention - MISSION M5 - COMPONENT 2 - INVESTMENT 2.2 - INTEGRATED URBAN PLANS involves the collection of the following personal data:

• Personal data (name and surname)
• E-mail address: Ordinary Mail or PEC
• Other data provided by economic operators participating in publicly available procedures

Mode of treatment

The processing takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality. It is also carried out with the aid of electronic instruments consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679.

Nature of treatment

The provision of data is

• is mandatory and their failure to issue precludes the possibility of benefiting from the award procedure of the Framework Agreement pursuant to art. 6 par. 1 letter b of Regulation 2016/679 as part of the PNRR Intervention - MISSION M5 - COMPONENT 2 - INVESTMENT 2.2 - INTEGRATED URBAN PLANS promoted by Invitalia pursuant to art.38, Legislative Decree no. 50/2016).

Communication and dissemination

Personal data may be communicated to third parties or disseminated in the cases provided for by the applicable regulatory provisions (e.g. the publication of documents in application of the provisions on transparency in case of dissemination pursuant to Legislative Decree 50/2016).

Categories of data recipients

The processing is carried out by authorized persons committed to confidentiality and responsible for the related activities in relation to the purposes pursued.

The data processing is also carried out by people from the Invitalia Company in its role as Central Purchasing Office pursuant to Art. 38 Legislative Decree 50/2016 who assumes the role of Data Controller pursuant to art. 28 of EU Regulation 2016/679.

Data retention

The data will be kept for the time necessary to achieve the purposes for which they were collected and in any case for a period appropriate to the completion of the public procedure covered by this information.

Data transfer to third countries

The data processed for the aforementioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations.

Rights of interested parties

Interested parties can exercise the rights provided for by the art. 15 and following of EU Regulation 2016/679 and in particular the right to access one's personal data, to request rectification or limitation, updating if incomplete or incorrect and cancellation if the conditions exist as well as to oppose the processing by contacting the request should be addressed to:

Municipality of Milan as Owner,

• Piazza Duomo 19 20100 Milan - Specialist Management and Monitoring Authority Management Plans - to the following e-mail address  pnrrmilano@comune.milano.it 
• Via Durando, 38/a - 20158 Milan - Schools Technical Area - Education Directorate

or

Responsible for the protection of personal data of the Municipality of Milan (Data Protection Officer - “DPO”)

Right of complaint

Finally, we inform you that interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of EU Regulation 2016/679 (art. 77) have the right to lodge a complaint with the Guarantor, (www.garanteprivacy.it/) or to take action in the appropriate judicial offices (art. 79 of the Regulation).