Information on the processing of personal data art. 13 EU Reg. 2016/679
Pursuant to Article 13 of the European Regulation No. 679/2016 (hereinafter, also, the "GDPR") we provide you with this information.
THE DATA CONTROLLER
The data controller is STUDIO E.R. CONGRESSI S.R.L. headquartered in Bologna – Via De' Poeti, 1/7 Codice Fiscale 06301101009 ercongressi@ercongressi.it .
PLACE OF DATA PROCESSING.
The related processing takes place in Italy and there is no activity of transfer or dissemination abroad or to countries outside the EU. No data is communicated or disseminated, except for statistical purposes and in any case in an anonymous and/or aggregate manner.
PURPOSE OF DATA PROCESSING.
The personal data you provide is used for the sole purpose of handling the Whistleblowing report you made.
PERSONAL DATA PROCESSED.
The personal data processed are exclusively:
- First name
- Surname.
- E-mail address.
- Other data that may be indicated in the report.
LEGAL BASIS FOR PROCESSING
The legal basis under which personal data are processed is the legal obligation arising from the provisions of Article 6 of Legislative Decree No. 231 of 2001, as amended by Law No. 179 of 2017, on "Provisions for the protection of the authors of reports of crimes or irregularities of which they have become aware in the context of a public or private employment relationship." It should be noted that it is also possible to make an anonymous report or voice recording.
RETENTION PERIODS
The personal data you provide will be deleted within 5 years of its collection.
WITH WHOM WE SHARE THE COLLECTED DATA
Your personal data may be accessed by the employees in charge of investigating Whistleblowing reports and the Whistleblowing Procedure Manager. In addition, considering that Whistleblowing reports are forwarded through the Legality Whistleblowing software, your personal data may also be accessed by the provider of the aforementioned application, appointed for this purpose as the data controller pursuant to Article 28 of the GDPR. It is understood that, in line with the principle of protecting the confidentiality of the whistleblower set forth in Law 179/2017, the sharing of your personal data will be limited to what is strictly necessary in order to guarantee your confidentiality.
METHODS OF PROCESSING.
Personal data are processed by both automated and manual means and for the purposes stated above. The security measure of cryptography and the maximum protection required by legislation is used. Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access.
RIGHTS OF DATA SUBJECTS.
Under certain conditions You have the right to exercise the rights provided by Articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.
The exercise of these rights is subject to certain exceptions aimed at safeguarding the public interest (e.g., the prevention or identification of crimes) and our interests (e.g., maintaining professional secrecy). In the event that you exercise any of the above rights, it will be our responsibility to verify that you are entitled to exercise them, and we will, as a rule, respond to you within one month.
Should anyone have any concerns regarding compliance with the privacy policy adopted by Studio Er Congressi, its application, the accuracy of your personal data, or the use of the information collected, you may contact us by e-mail at: ercongressi@ercongressi.it. However, if you wish, you may forward your complaints or reports, pursuant to Article 77 of the GDPR, to the data protection authority, using the relevant contact details:
Garante per la protezione dei dati personali - Piazza di Monte Citorio n. 121 - 00186 ROMA - Fax: (+39) 06.69677.3785 - Telephone: (+39) 06.696771 - E-mail: garante@gpdp.it - Certified mail: protocollo@pec.gpdp.it .
