Information for the Whistleblower - Whistleblower - on the processing of his/her personal data pursuant to Articles 13-14 of EU Reg. 2016/679 - GDPR
Dear Data Subject, Pursuant to and in accordance with EU Reg. 2016/679 hereinafter 'GDPR', we hereby wish to inform you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of their personal data. Such processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and rights.
Your personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations provided for the processing of your personal data provided through the Whistleblowing Portal.
Retention Period. We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, reports and the related documentation will be kept for the time necessary for the processing of the report and, in any case, no longer than five years from the date of the communication of the final outcome of the reporting procedure, in compliance with the confidentiality obligations set out in Article 12 of Legislative Decree No. 24 of 2023. Furthermore, your data will be kept for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory time limits prescribed by law.
You have the right to obtain from the data controller the cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
Rights of the Data Subject
As the data subject, you have the right to obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, their communication in intelligible form and the possibility to lodge a complaint with the supervisory authority.
The data subject also has the right to obtain information on the source of the personal data, the purposes and methods of processing, the logic applied in the event of processing carried out with the aid of electronic means, the identification details of the data controller, data processors and the representative designated pursuant to Article 5(2), the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing.
The data subject also has the right to obtain the updating, rectification or integration of the data; the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected and/or processed; the portability of the data.
+39 0444 764543
