PRIVACY POLICY FOR Whistleblowing

PRIVACY POLICY

regarding the processing of personal data of individuals submitting reports through the Whistleblowing Reporting Software

 

PRIVACY POLICY

Pursuant to Article 13 of Legislative Decree No. 196/2003 of the Code regarding the protection of personal data (hereinafter also referred to as the “Privacy Code”) and pursuant to Article 13 of the European Regulation No. 679/2016 (hereinafter also referred to as the “GDPR”), we provide you with this information.

 

DATA CONTROLLER
The data controller is F.B. SPA with registered office in Alberone di Cento, Via Cristofori 2, email: info@fbitmi.it.

 

PLACE OF DATA PROCESSING
The related processing activities take place in Italy, and there is no transfer or dissemination of data abroad or to non-EU countries. No data is communicated or disseminated, except for statistical purposes and in any case in an anonymous and/or aggregated form.

 

PURPOSE OF DATA PROCESSING
The personal data you provide is used solely for the purpose of managing the Whistleblowing report you submitted.

 

PROCESSED DATA
The only personal data processed are:

  • First name
  • Last name
  • Email address

 

LEGAL BASIS FOR PROCESSING

The legal basis for processing personal data is the legal obligation deriving from the provisions of Article 6 of Legislative Decree No. 231 of 2001, as amended by Law No. 179 of 2017, containing “Provisions for the protection of the authors of reports of crimes or irregularities that have come to their knowledge in the context of a public or F.B. S.p.A. employment relationship.”

 

DATA RETENTION PERIOD

The personal data you provide will be deleted within 10 years from their collection.

 

WHO WE SHARE COLLECTED DATA WITH
Your personal data may be accessed by employees responsible for handling Whistleblowing reports. Additionally, considering that Whistleblowing reports are submitted through the Whistleblowing software, the provider of said application, appointed as data processor pursuant to Article 28 of the GDPR, may also access your personal data. It is understood that, in line with the principle of protecting the confidentiality of the whistleblower pursuant to Law No. 179/2017, the sharing of your personal data will be limited to what is strictly necessary to ensure your confidentiality.

PROCESSING METHODS
Personal data is processed using both automated and manual tools for the above-mentioned purposes. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

DATA SUBJECTS’ RIGHTS
Under certain conditions, you have the right to exercise the rights provided by Articles 7, 8, 9, and 10 of the Privacy Code and Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR and, in particular, to request:

  • Access to your personal data
  • A copy of the personal data you have provided us (so-called portability)
  • The rectification of data in our possession
  • The deletion of any data for which we no longer have any legal basis for processing
  • Objection to processing where provided by applicable law
  • Withdrawal of your consent, where the processing is based on consent
  • Limitation of how we process your personal data, within the limits provided by data protection law

 

The exercise of these rights is subject to certain exceptions aimed at safeguarding the public interest (e.g., prevention or identification of crimes) and our interests (e.g., maintaining professional secrecy). If you exercise any of the aforementioned rights, it will be our responsibility to verify that you are entitled to exercise them, and we will generally respond within one month.

Anyone who has doubts regarding the compliance with the privacy protection policy adopted by F.B. SPA, its application, the accuracy of their personal data, or the use of the collected information can contact us by email at info@fbitmi.it. However, if you wish, you may submit your complaints or reports, pursuant to Article 77 of the GDPR, to the authority responsible for data protection.