Privacy Policy

Description of the ongoing research

Your personal data will be processed for analysis, study, and research purposes within the scope of the project entitled “Scientific Approach to Innovation Management” (hereinafter the “Project”), conducted by ICRIOS – Bocconi University (Data Controller).

The objective of this study is to observe the decisions that entrepreneurs make in the early stages of the process of creating a new venture, in order to understand which practices help assess the feasibility of new business ideas.

Procedures and duration

The data will be analyzed in aggregated form, as the interest of the research concerns aggregated responses and not individual ones.

Participation in the research activities involves the collection of data until 31 December 2027, which will be processed in compliance with the obligations set out in the General Data Protection Regulation No. 679/2016 (GDPR – Privacy Code).

No data relating to racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership in political parties, trade unions, religious, philosophical, political or trade union organizations, nor personal data relating to health status, sexual life, or other biometric data will be collected.

The data collection procedures include structured interviews, forms, and questionnaires. After completing the required questionnaires, a member of the research team will contact each participant to confirm receipt and ask some follow-up questions based on the responses provided.

Please note that, within the scope of this project, each participant will be asked to provide a brief data update (approximately three times over the following fifteen months).

The results of the analyses and anonymous verbatim excerpts from the interviews will be used exclusively within the scope of the research activity. Such results constitute empirical material for the development and publication/dissemination of scientific articles, books, and, more generally, scientific materials. All data collected within the project will be used exclusively in an anonymous and aggregated form for academic research and public interest purposes. No participant data will be shared with third parties, except those directly involved in the project. All data will be encrypted and stored on access-restricted IT infrastructures.

Expected benefits and foreseeable risks

In terms of benefits, participants will have free access to a high-quality training program. Participation in the training program and in the data collection process also provides access to additional resources, events, and activities. Participation in all these activities is offered free of charge.

Participation in this study does not involve foreseeable risks beyond those normally encountered in daily life or during routine physical or psychological examinations or tests. In particular, participation in the study:

i) will not cause any harm to participants;

ii) will not in any way involve participation in dangerous or harmful activities;

iii) will remain confidential.

Voluntary participation

Participation in the questionnaires, interviews, and all other activities of this study is voluntary. Participants are not required to answer questions they prefer not to answer and may withdraw from the study at any time. However, withdrawal will result in the inability to access the remaining resources, events, and activities of the program.

Participation in the study does not confer any right or claim of any kind to the research and/or its results.

Compensation
Participants will not receive financial compensation for their participation, but they will benefit from free training and free access to all events and activities. Participants who complete the program will also receive a free certificate certifying the successful completion of the course.

Deception

The full objectives of the research will not be described to participants in advance, as this could influence the results. Participants will have the opportunity to receive a full explanation of the study at its conclusion.

Participant’s Declaration

I confirm that I have received the information provided above and declare that I have read and understood its content. I confirm that I am 18 years of age or older and that I am participating voluntarily in this research (consent for minors or legally incapacitated persons must be provided by their respective legal guardians).

Having acknowledged that my data are processed in full compliance with the law, I freely consent to their use in accordance with the methods and purposes described. I also declare that I have understood my rights and the related limitations, as well as the procedures for exercising them.

ADDITIONAL INFORMATION: PRIVACY AND DATA MANAGEMENT

We are required to provide participants with certain information to communicate our compliance with the General Data Protection Regulation No. 679/2016.

UNIVERSITÀ COMMERCIALE “LUIGI BOCCONI” (hereinafter “Bocconi University”), with registered office in Milan, Via Sarfatti 25, declares that it falls within the scope of application of the General Data Protection Regulation No. 679/2016, concerning the protection of personal data, with reference to the use of the data subject’s personal data collected within the scope of this research project.

Contacts of the Researchers and the Ethics Committee

The research is conducted by the Bocconi University research team, composed of the following members:

Myriam Mariani (myriam.mariani@unibocconi.it)

Claudia Frosi (claudia.frosi@phd.unibocconi.it)

For any questions regarding how the research is conducted, access to and control of data, or to provide feedback, ask questions, or request information about the results of the study, participants may contact the Principal Investigator and/or the Data Protection Officer of Bocconi University at DPO@unibocconi.it.

Confidentiality and Security Measures

Data will be communicated by participants exclusively to the research staff of Università Commerciale “Luigi Bocconi” and only for the purposes described above. The data will not be shared with parties other than those indicated in this document, nor transferred to third parties.

All appropriate precautions will be taken to ensure the secrecy and confidentiality of the data. For this purpose, the data will be pseudonymized, separating research data collected through questionnaires, surveys, and interviews from directly identifying data. Direct identifying data will be segregated from other research data and stored in separate physical and virtual locations. All data will be encrypted and stored on access-restricted IT infrastructures. In the event of publication or presentation, no identifying information will be disclosed.

Data Sharing

Transfers of data to third countries: data may be transferred within the European Union to the Netherlands and Spain, and outside the European Union to the United Kingdom and Colombia.

The data collected about you for the purposes of this project and similar future projects may be transferred to and stored in a destination outside the European Economic Area (EEA), for example when processed by an organization operating outside the EEA on our behalf or on behalf of one of our partners, or when personal data are processed by one of our partners based outside the EEA or using storage facilities outside the EEA. Such transfers will be subject to appropriate safeguards to protect the security and confidentiality of the data.

Access to pseudonymized or non-anonymized personal data collected in the project will be granted to:

Myriam Mariani (myriam.mariani@unibocconi.it)

Claudia Frosi (claudia.frosi@phd.unibocconi.it)

Data Subject Rights

Data subjects have the rights provided for in Articles 15, 16, 17, and 18 of the General Data Protection Regulation No. 679/2016. In particular, for example, data subjects may request access to their personal data, rectification, erasure of the same, and restriction of processing activities.

It should be noted that, when data are processed for research purposes, such rights are not absolute and we may be entitled to refuse requests in the cases provided for by law. In particular, pursuant to Article 17(3) GDPR:

the right to erasure does not apply where it is likely to render impossible or seriously impair the achievement of the purposes of the processing carried out pursuant to Article 89(1) GDPR;

the right to erasure and to object may not apply where the research is conducted for reasons of public interest in the area of public health.

If you have given your consent and wish to withdraw it, you may contact the head of the relevant department using the contact details provided. Please note that the withdrawal of consent does not affect the lawfulness of data processing carried out prior to the withdrawal.

Within the scope of the research project, you consent to Bocconi University and the researchers modifying, copying, storing, disseminating, and publishing your contribution to the project. Furthermore, by agreeing to participate in the project, you expressly waive any copyright that may arise from the results of the project, granting Bocconi University and the researchers involved a non-exclusive, free, irrevocable, worldwide license to use your contribution for the purposes indicated above.

If you wish to be informed about the results of the project, the researcher will take all reasonable measures to inform you, subject to any privacy constraints or other legal obligations.

If you have given your consent and wish to withdraw it, you may contact the researcher using the contact details provided. In this case as well, withdrawal of consent does not affect the lawfulness of data processing carried out prior to the withdrawal.