INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATING TO REPORTS
Dear Madam or Sir,
Antica Sartoria Srl, in accordance with ethical principles, in implementation of the commitment to legality, recognizing the high social function inherent in reporting, in compliance with current legislation on whistleblowing, as prescribed by European Regulation 679/2016, provides you with the following information.
1. Data Controller and Data Protection Officer.
The Data Controller, or the entity responsible for decisions regarding the purposes, methods and security of personal data, is Antica Sartoria Srl with registered office in Milan – postcode 20135, Viale Sabotino 19/2 – operational headquarters Piazza VII Settembre, 28 80134 Naples tel. 081 5109088 PEC anticasartoria@pec.cgl.it, email legal@anticasartoriapositano.it
2. Purposes and legal bases of the processing.
The personal data that you provide us with the report and any additional data that may be collected in following up on the report will be processed for the purposes according to the legal bases indicated below:
| PURPOSE | LEGAL BASIS | CONSEQUENCES |
|
(Why we process your data) |
(On the basis of which legal provision we treat them.) |
(What happens if you refuse to provide personal data and/or authorise processing) |
|
To follow up on the reports received. |
Art. 6, Par. 1, Lett.c) GDPR (the processing is necessary for the fulfilment of the obligations imposed on Antica Sartoria S.r.l. by Legislative Decree 24/2023 as amended). |
Reports can also be sent anonymously. |
3. Recipients and categories of data processed.
The personal data provided by you and any subsequent data acquired during the course of the service will be processed exclusively by personnel authorized for this purpose or by data controllers designated for this purpose. Further information on the designated persons, data controllers and system administrators can be requested from the Administration.
Your data may be communicated, in addition to the expressly delegated subjects, to the following recipients:
|
PURPOSE DATA CATEGORY RECIPIENTS |
PURPOSE DATA CATEGORY RECIPIENTS |
PURPOSE DATA CATEGORY RECIPIENTS |
|
For the exercise of judicial institutional activities |
Identification data, reporting data. |
Identification data, reporting data |
|
To comply with a request for access in order to defend one's rights in case of disciplinary measures. |
Identification data, reporting data |
Persons involved in reporting with your consent. |
4. Transfer abroad – automated processes
Your personal data is not transferred outside the European Union, nor is it processed in automated decision-making processes.
5. Period of storage of personal data and criteria used
The reports are kept for a period of 5 years from the closure, unless an extension is required by law.
6. Rights of the interested party
The interested parties have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 and following of the Regulation). The specific request is presented at the contact points indicated above.
7. Right to complain
Interested parties who believe that the processing of their personal data by us is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation).
8. Collaboration
The protection of your data and compliance with the principles set forth by the legislation, with particular reference to the principle of transparency, are values of primary importance to us; we would be grateful if you would help us by reporting any misunderstandings of this document or by suggesting improvements to the Data Controller's references as indicated above.