WHISTLEBLOWING INFORMATION

INFORMATION FOR THE PROCESSING OF PERSONAL DATA RELATING TO REPORTS

 

Dear Sir/Madame,
the company F.lli Pisa Srl, in harmony with the ethical principles, implementing the commitment to legality, recognizing the high social function inherent in the reports, in compliance with the current legislation on whistleblowing, as prescribed by European Regulation 679/ 2016, provides you with the following information.

1. Data Controller and Data Protection Officer.
   The Data Controller, i.e. the person responsible for decisions regarding the purposes, methods and security of personal data, is the company Fratelli Pisa Srl with headquarters in Milan – postal code 20121, via Montenapoleone n. 9, corner of via P. Verri, tel. 0276021998, PEC f.llipisa@legalmail.it, email privacy@pisa1940.com.
   The Data Protection Officer, also known by the acronym DPO, monitors compliance with the legislation on the protection of personal data and cooperates with the supervisory authority (the Guarantor for the Protection of Personal Data).
   The Data Protection Officer can be reached:
   • by email to dpo@pisa1940.com 
   • by traditional paper mail to the registered office address
   • physically at the office by appointment
2. Purposes and legal bases of the processing.
   The personal data that you provide to us with the report and the additional data that may be collected in following up the report will be processed for the purposes according to the legal bases indicated below:

PURPOSE (Why we process your data)	LEGAL BASIS (Based on which legal provision we treat them.)	CONSEQUENCES (What happens if you refuse to provide personal data and/or authorize processing)
To follow up on reports received.	Art. 6, Par. 1, Letter c) GDPR (processing is necessary for the fulfillment of the obligations imposed on the Company by Legislative Decree 24/2023 and subsequent amendments).	Reports can also be sent anonymously.

3. Recipients and categories of data processed.
   The personal data provided by you and any subsequent data acquired during the service will be processed exclusively by personnel authorized for this purpose or by data controllers designated for this purpose. Further information on designees, data controllers and system administrators can be requested from the Human Resources Office.
   Your data may be communicated, in addition to the subjects expressly delegated by you, to the following recipients:

PURPOSE	DATA CATEGORY	RECIPIENTS
To respond to orders or requests from the AG	Identification data, reporting data.	Judicial Authorities
To satisfy the request for access in order to defend your rights in the event of disciplinary measures.	Identification data, reporting data.	Persons involved in the report with their consent.
To follow up on the report.	Identification data, reporting data.	Recipients of F.lli Pisa Srl

4. Transfer abroad – automated processes
   Your personal data are not transferred outside the European Union, nor are they processed in automated decision-making processes.
5. Personal data retention period and criteria used
   The reports are kept for a period of 5 years starting from closure, unless an extension is necessary due to legal obligations.
6. Rights of the interested party
   Interested parties have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 et seq. of the Regulation). The specific request is submitted by contacting the Data Protection Officer (DPO) at the contact points indicated above.
7. Right to complain
   Interested parties who believe that the processing of personal data relating to them carried out by us occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by the art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).
8. Collaboration
   The protection of data concerning you and compliance with the principles established by law, with particular reference to the principle of transparency, are values ​​of primary importance for us; We will be grateful if you would like to help us by reporting any misunderstandings of this document or suggesting improvements to the Data Controller's contact details as indicated above.