INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATING TO REPORTS
Dear Madam, Sir
Antica Sartoria S.r.l., in accordance with its ethical principles, in implementation of its commitment to legality, recognising the high social function inherent in whistleblowing, in compliance with the current legislation on whistleblowing, as prescribed by European Regulation 679/2016, provides you with the following information.
1. Data Controller and Data Protection Officer
The Data Controller, i.e. the subject who is responsible for decisions regarding the purposes, methods and security of personal data, is Antica Sartoria S.r.l. with registered office in Milan – c.a.p. 20135 , Viale Sabotino 19/2 – operational headquarters Piazza VII Settembre, 28 80134 Naples tel. 081 5109088 P.E.C. anticasartoria@pec.cgl.it, legal@anticasartoriapositano.it
2. Purpose and legal basis of processing
The personal data you provide us with in the report and any further data that may be collected in the follow-up to the report will be processed for the purposes according to the following legal bases:
PURPOSE
(Why we process your data)
To follow up on the reports received.
LEGAL BASIS
(On the basis of which legal provision we treat them.)
Art. 6, Par. 1, Lett.c) GDPR (the processing is
necessary for the fulfilment of the obligations imposed on Antica Sartoria S.r.l. by Legislative Decree 24/2023 as amended).
CONSEQUENCES
(What happens if you refuse to provide personal
data and/or authorise processing)
Reports can also be sent anonymously.
3. Recipients and categories of processed data.
The personal data you provide and any subsequent data acquired in the course of the service will be processed exclusively by staff authorised for this purpose or by data processors designated for this purpose. Further information on the designated persons, data processors and system administrators can be obtained from the Administration.
Your data may be communicated, in addition to the persons expressly delegated, to the following recipients:
4. Transfer abroad – automated processes
Your personal data are not transferred outside the European Union, nor are they processed in automated decision-making processes.
5. Personal data retention period and criteria used
Reports are retained for a period of 5 years after closure, unless extended due to legal obligations.
6. Rights of the data subject
Data subjects have the right to obtain from the Controller, in the cases provided for, access to their personal data and the rectification or deletion thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation). The appropriate request is submitted at the contact points indicated above.
7. Right to complain
Data subjects who consider that the processing of personal data relating to them carried out by us is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for in Article 77 of the Regulation itself, or to take legal action (Article 79 of the Regulation).
8. Collaboration
The protection of the data concerning you and compliance with the principles laid down in the legislation, with particular reference to the principle of transparency, are values of primary importance to us; we would be grateful if you would help us by pointing out any misunderstandings of this document or by suggesting improvements to the Controller’s references as indicated above.
