Article 9 – Data treatment

In accordance with art.13 of EU Regulation 2016/679 “General Data Protection Regulation”,
we inform you that the personal data provided during the expression of interest and
candidacy for the AI4GOV Startup Contest and after its process will be processed by Polihub
S.c.a.r.l. as the Data Controller. AI4GOV Startup Contest is organized by the partner
universities of AI4GOV: Universidad Politécnica de Madrid (Spain), Politecnico di Milano
(Italy), Friedrich-Alexander-Universität (Germany) and the Tallinn University of Technology
(Estonia). The 2022 Edition is facilitated by PoliHub, the Innovation Park & Startup Accelerator
of the Politecnico di Milano.

Personal data collected will be processed for the following purposes:

● Registration to the initiative;
● Participation in activities/initiatives reserved for AI4GOV Startup Contest participants;
● Management of content (documents, information, images, etc.) voluntarily uploaded
to the website ( for purposes related to the AI4GOV Startup
Contest initiative.

The personal data provided will be communicated to all representatives of the Steering
Committee as well as to the UPM Data Protection Officer (, as
Data Processors pursuant to Article 28 of EU Regulation 2016/679, will manage the related
data processing.

All personal data provided will be stored in full for the entire period of the initiative.
Subsequently, personal data will be stored for a longer period with reference to the finalists
of the initiative. If necessary, further information will be presented. Personal data of other
participants will be stored for a period that will vary due to the interest of the AI4GOV
Consortium to initiate further relationships in line with the purposes of the AI4GOV Startup
Contest project.

Moreover, the AI4GOV Consortium reserves the right to share data with the EC in case it is
required to justify the AI4GOV project expenses and evaluate its performance.
The AI4GOV Consortium also reserves the right to use the name and basic information of
participants in its marketing and dissemination activities.
The provision of data is free, however, not providing it will not allow the Owner and Managers
of the treatment to make assessments aimed at allowing participation in the initiative. 

Current legislation recognizes numerous rights of the participant. Among these are:

  1. Access to the following information:
    a. purposes of processing,
    b. categories of personal data concerned,
     c. addressees or categories of addressees to whom such personal data has been
    or will be communicated, in particular if in third countries or from international
    d. the existence of the participant’s right to request from the Data Controller the
    rectification or cancellation of personal data or the restriction of the
    processing of personal data concerning him or her or to object to their
  2. Rectification, by which is meant:
    a. correction of inaccurate personal data concerning the participant without
    justified delay,
    b. integration of incomplete personal data, also by providing supplementary
  3.  Cancellation of data concerning the participant without undue delay, if:
    a. the data are no longer necessary in relation to the purposes for which they
    were collected or otherwise processed,
    b. a revocation of consent is given and there is no other legal basis for the
    c. the participant objects to the processing and there is no overriding legitimate
    reason for the processing,
    d. the personal data has been processed unlawfully,
    e. the personal data must be deleted in order to comply with a legal obligation,
    f. the personal data was collected in connection with the provision of
    information society services;
  4.  Restriction of processing:
    a. where the accuracy of personal data is disputed, for the period necessary for
    the Data Controller to verify the accuracy of such personal data
    b. when the processing is unlawful and the interested party opposes the deletion
    of personal data and requests instead that its use be limited
    c. when the personal data are necessary to the data subject for the
    establishment, exercise or defence of legal claims, although the data controller
    no longer needs them for the purposes of the processing,
    d. if the data subject objects to the processing by virtue of the right to object;
  5. Receive notification in case of rectification or cancellation of personal data o restriction of processing; 
  6. Data portability, namely the right to receive in a structured, commonly used and machine-readable format personal data concerning the data subject and has the right to transmit such data to another data controller, if: a. the processing is based on the express consent of the data subject for one ormore specific purposes or takes place by reason of a contract entered intowith the data subject; andb. the processing is carried out by automated means;
  7.  Opposition at any time, for reasons related to their particular situation, to the processing of personal data concerning them. The data subjects have the right to lodge a complaint with a supervisory authority if they consider that the rights indicated herein have not been recognized. In order to exercise the above rights, he/she may contact the Data Controller by sending the communication to “AI4Gov”, Departamento de Inteligencia Artificial, ETSI Informáticos (UPM), Campus de Montegancedo, 28660 Boadilla del Monte, Spain. Email: