Data Controller:

The Data Controller is Eurosirel S.p.A., headquartered in Cusago (MI), Viale Europa 30. Any requests for information and/or clarification regarding the processing of personal data may be addressed by sending an email to: fornitori2@eurosirel.it

Data Processing and Purposes

The Data Controller wishes to inform you that, should you submit a report not in ANONYMOUS form but by providing your personal details, your personal data (identification and contact information such as name, surname, telephone number, email address, qualification or professional position) will be collected and processed in order to comply with the provisions of EU Regulation 2019/1937 and Legislative Decree 24/2023, and to carry out the necessary investigative activities aimed at verifying the validity of the reported facts and adopting any resulting measures.

Processing carried out using paper and/or electronic tools does not involve automated decision-making processes.

Legal Basis of Processing

Processing is carried out to fulfil legal obligations under EU Regulation 2019/1937 and Legislative Decree 24/2023.

Provision of Data

The provision of data is optional, as reports may also be submitted anonymously.

Data Disclosure and Scope of Communication

Data will be processed only by individuals expressly authorized by the Data Controller and may be transmitted to the Judicial Authority in compliance with the protection and confidentiality of the whistleblower.

Data will not be disseminated nor transferred to third countries.

Data Retention Period

The whistleblower’s data will be retained for the time strictly necessary to achieve the purposes outlined in this notice.

Data will be deleted within 12 months if the whistleblowing procedure concludes with the dismissal of the report.

In all other cases, the maximum retention period is determined by the duration of any related criminal, disciplinary, or other proceedings.

Rights of the Data Subject

You are granted the full right to request from the Data Controller access to your personal data, as well as its rectification or deletion (right to be forgotten – Art. 17), or restriction of processing, or to object to the processing, along with the right to data portability. This right may be exercised by sending an email to: fornitori2@eurosirel.it
Furthermore, the Data Controller will cease processing as soon as your request is received.

Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Supervisory Authority if their requests for information addressed to the Data Controller have not resulted in satisfactory responses.

The competent authority is the Italian Data Protection Authority:

http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524