WHISTLEBLOWING' PRIVACY POLICY

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

 

Dear 'Interested',

We would like to inform you that the "EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data" (hereinafter "GDPR") provides for the protection of persons and other subjects with regard to the processing of personal data.

DATA CONTROLLER

Lpm S.p.A., the "Data Controller" of personal data, hereinafter also "the Company", informs you that it will process the personal data provided by you in the manner set out below.

The data indicated at the time of registration and included in the reports will be processed in accordance with the principles of correctness, lawfulness, transparency and protection of confidentiality and rights, yours and of all those concerned, in compliance with the confidentiality obligations imposed by the privacy legislation and the law on whistleblowing.

LEGAL BASIS FOR PROCESSING

The processing of personal data is carried out by the Company for purposes related to the receipt, acceptance and subsequent management of reports of unlawful conduct received in accordance with applicable legislation. Pursuant to Article 6(1)(c) of the GDPR, all personal data collected as part of this processing are strictly functional and necessary to fulfil a legal obligation to which the data controller is subject. Should the reporting party be identified, the consent of the latter will be requested as provided for by the applicable legislation; the legal basis for this processing is in the consent freely provided by the data subject pursuant to Art. 6, paragraph 1 letter a) of the GDPR.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

The data provided by you on the computer platform dedicated to receiving reports (including any documentation attached thereto) - for the purpose of reporting alleged unlawful conduct of which you have become aware committed by persons who interact with the Company in various capacities and which undermine the Company's integrity - are processed for the purpose of carrying out the necessary investigative activities aimed at verifying the grounds of the facts reported and the adoption of any measures.

In addition to the data of the person making the report (where not anonymised), reports also include data relating to the reported person (a person identified as possibly responsible for the reported unlawful conduct) or to other persons involved in the report for various reasons.), so-called 'special' data (data relating to health conditions, sexual orientation or trade union membership, under Article 9 GDPR) and personal data relating to criminal convictions and offences (under Article 10 GDPR).

If necessary, the Company may process the personal data provided by you in the context of the report for the purposes of activating the judicial and/or disciplinary protection related to the report received, where the relevant prerequisites are met.

DATA PROCESSING METHODS

The personal data provided in the context of the report and collected are processed by company staff (acting as 'authorised persons') who have been adequately instructed as to the purposes and methods of processing in compliance with the principle of confidentiality and, more generally, with the legislation on the protection of personal data.

The processing will be carried out using computer and telematic tools with organisational and processing logics strictly related to the purposes indicated above and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures provided for by the provisions in force.

DATA TRANSFER TO THIRD COUNTRIES

Data processed for the above-mentioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations.

RETENTION PERIOD

Personal data will be retained for as long as necessary for the processing of the report and in any case no longer than five years from the date of communication of the final outcome of the reporting procedure, in compliance with the confidentiality obligations and the principle of minimisation referred to in Article 5(1)(c) of the GDPR as well as the legal obligations to which the Data Controller is bound as a result of the report itself.

RIGHTS OF THE INTERESTED PARTIES

Interested parties have the right to obtain from the Company, in the cases provided for, access to their personal data and the rectification or cancellation thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation).

Data subjects who consider that the processing of personal data relating to them carried out through this platform is in breach of the provisions of the Regulation have the right to lodge a complaint, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).

CONTACTS

The "Data Controller" is Lpm S.p.A. with registered office in Via Egidio Berto, 24 35024 Bovolenta (PD) P. Iva 03431820285, which can be contacted at privacy@lpm-it.com.

 

 

WHISTLEBLOWING' PRIVACY POLICY

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

 

Dear 'Interested',

We would like to inform you that the "EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data" (hereinafter "GDPR") provides for the protection of persons and other subjects with regard to the processing of personal data.

DATA CONTROLLER

Unimolds S.r.l., the "Controller" of personal data processing, hereinafter also "the Company", informs you that it will process the personal data you provide in the manner set out below.

The data indicated at the time of registration and included in the reports will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality and rights, yours and of all those concerned, in compliance with the confidentiality obligations imposed by the privacy legislation and the law on whistleblowing.

LEGAL BASIS FOR PROCESSING

The processing of personal data is carried out by the Company for purposes related to the receipt, acceptance and subsequent management of reports of unlawful conduct received in accordance with applicable legislation. Pursuant to Article 6(1)(c) of the GDPR, all personal data collected as part of this processing are strictly functional and necessary to fulfil a legal obligation to which the data controller is subject. Should the reporting party be identified, the consent of the latter will be requested as provided for by the applicable legislation; the legal basis for this processing is in the consent freely provided by the data subject pursuant to Art. 6, paragraph 1 letter a) of the GDPR.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

The data provided by you on the computer platform dedicated to receiving reports (including any documentation attached thereto) - for the purpose of reporting alleged unlawful conduct of which you have become aware committed by persons who interact with the Company in various capacities and which undermine the Company's integrity - are processed for the purpose of carrying out the necessary investigative activities aimed at verifying the grounds of the facts reported and the adoption of any measures.

In addition to the data of the person making the report (where not anonymised), reports also include data relating to the reported person (a person identified as possibly responsible for the reported unlawful conduct) or to other persons involved in the report for various reasons.), so-called 'special' data (data relating to health conditions, sexual orientation or trade union membership, under Article 9 GDPR) and personal data relating to criminal convictions and offences (under Article 10 GDPR).

If necessary, the Company may process the personal data provided by you in the context of the report for the purposes of activating the judicial and/or disciplinary protection related to the report received, where the relevant prerequisites are met.

DATA PROCESSING METHODS

The personal data provided in the context of the report and collected are processed by company staff (acting as 'authorised persons') who have been adequately instructed as to the purposes and methods of processing in compliance with the principle of confidentiality and, more generally, with the legislation on the protection of personal data.

The processing will be carried out using computer and telematic tools with organisational and processing logics strictly related to the purposes indicated above and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures provided for by the provisions in force.

DATA TRANSFER TO THIRD COUNTRIES

Data processed for the above-mentioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations.

RETENTION PERIOD

Personal data will be retained for as long as necessary for the processing of the report and in any case no longer than five years from the date of communication of the final outcome of the reporting procedure, in compliance with the confidentiality obligations and the principle of minimisation referred to in Article 5(1)(c) of the GDPR as well as the legal obligations to which the Data Controller is bound as a result of the report itself.

RIGHTS OF THE INTERESTED PARTIES

Interested parties have the right to obtain from the Company, in the cases provided for, access to their personal data and the rectification or cancellation thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation).

Data subjects who consider that the processing of personal data relating to them carried out through this platform is in breach of the provisions of the Regulation have the right to lodge a complaint, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).

 

CONTACTS

The "Data Controller" is Unimolds S.r.l. with registered office in Via Egidio Berto, 24 35024 Bovolenta (PD) P. Iva 04423340282, contactable at privacy@unimolds-it.com.

 

WHISTLEBLOWING' PRIVACY POLICY

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

 

Dear 'Interested',

We would like to inform you that the "EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data" (hereinafter "GDPR") provides for the protection of persons and other subjects with regard to the processing of personal data.

DATA CONTROLLER

Gfs Gravity S.r.l., the "Data Controller" of personal data processing, hereinafter also "the Company", informs you that it will process the personal data provided by you in the manner set out below.

The data indicated at the time of registration and included in the reports will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality and rights, yours and of all those concerned, in compliance with the confidentiality obligations imposed by the privacy legislation and the law on whistleblowing.

LEGAL BASIS FOR PROCESSING

The processing of personal data is carried out by the Company for purposes related to the receipt, acceptance and subsequent management of reports of unlawful conduct received in accordance with applicable legislation. Pursuant to Article 6(1)(c) of the GDPR, all personal data collected as part of this processing are strictly functional and necessary to fulfil a legal obligation to which the data controller is subject. Should the reporting party be identified, the consent of the latter will be requested as provided for by the applicable legislation; the legal basis for this processing is in the consent freely provided by the data subject pursuant to Art. 6, paragraph 1 letter a) of the GDPR.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

The data provided by you on the computer platform dedicated to receiving reports (including any documentation attached thereto) - for the purpose of reporting alleged unlawful conduct of which you have become aware committed by persons who interact with the Company in various capacities and which undermine the Company's integrity - are processed for the purpose of carrying out the necessary investigative activities aimed at verifying the grounds of the facts reported and the adoption of any measures.

In addition to the data of the person making the report (where not anonymised), reports also include data relating to the reported person (a person identified as possibly responsible for the reported unlawful conduct) or to other persons involved in the report for various reasons.), so-called 'special' data (data relating to health conditions, sexual orientation or trade union membership, under Article 9 GDPR) and personal data relating to criminal convictions and offences (under Article 10 GDPR).

If necessary, the Company may process the personal data provided by you in the context of the report for the purposes of activating the judicial and/or disciplinary protection related to the report received, where the relevant prerequisites are met.

DATA PROCESSING METHODS

The personal data provided in the context of the report and collected are processed by company staff (acting as 'authorised persons') who have been adequately instructed as to the purposes and methods of processing in compliance with the principle of confidentiality and, more generally, with the legislation on the protection of personal data.

The processing will be carried out using computer and telematic tools with organisational and processing logics strictly related to the purposes indicated above and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures provided for by the provisions in force.

DATA TRANSFER TO THIRD COUNTRIES

Data processed for the above-mentioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations.

RETENTION PERIOD

Personal data will be retained for as long as necessary for the processing of the report and in any case no longer than five years from the date of communication of the final outcome of the reporting procedure, in compliance with the confidentiality obligations and the principle of minimisation referred to in Article 5(1)(c) of the GDPR as well as the legal obligations to which the Data Controller is bound as a result of the report itself.

RIGHTS OF THE INTERESTED PARTIES

Interested parties have the right to obtain from the Company, in the cases provided for, access to their personal data and the rectification or cancellation thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation).

Data subjects who consider that the processing of personal data relating to them carried out through this platform is in breach of the provisions of the Regulation have the right to lodge a complaint, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).

CONTACTS

The "Data Controller" of the data processing is Gfs Gravity S.r.l. with registered office in Via Egidio Berto, 24 35024 Bovolenta (PD) P. Iva 04737880288, contactable at privacy@gfsgravity.com.