Privacy Policy

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

Dear "Data Subject", we would like to inform you that the "EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of Personal Data and on the free movement of such data" (hereinafter "GDPR") provides for the protection of persons and other subjects with regard to the processing of personal data.

DATA CONTROLLER

Finmasi Group, the "Data Controller" of personal data processing, informs you, pursuant to Article 13 of the GDPR, that it will process the personal data provided by you in the following ways:

The data provided at the time of registration and in the reports will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality and rights, yours and those of all interested parties, in compliance with the confidentiality obligations imposed by privacy legislation and the Whistleblowing Act.

LEGAL BASIS OF THE PROCESSING

The processing of personal data is necessary to comply with a legal obligation to which the data controller is subject. Personal data are processed by the Whistleblowing Officer of Finmasi Group in the performance of his/her duties or in any case in connection with the exercise of his/her powers, with particular reference to the task of investigating any wrongdoing reported in the interest of Finmasi Group, pursuant to the applicable Whistleblowing legislation.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

The data provided by the whistleblower for the purpose of communicating alleged unlawful conduct of which he/she has become aware by reason of his/her service relationship with Finmasi Group committed by persons interacting with the latter in various capacities, are processed for the purpose of carrying out the necessary investigative activities aimed at verifying the grounds of the fact being reported and the adoption of the consequent measures.

DATA PROCESSING METHODS

The personal data collected are processed by the staff of Finmasi Group, acting on the basis of specific instructions provided regarding the purposes and methods of data processing.

The data will be processed using computer and telematic tools with organisational and processing logics strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures envisaged by the provisions in force. 

RETENTION PERIOD

Personal data relating to reports shall be kept and maintained for as long as necessary to fulfil the reporting procedure and kept on file.

RIGHTS OF THE DATA SUBJECTS

Data subjects have the right to obtain from Finmasi Group, in the cases provided for, access to their personal data and the rectification or cancellation thereof or the restriction of the processing that concerns them or to object to the processing (Art. 15 et seq. of the Regulation). 

Data subjects who consider that the processing of personal data relating to them carried out through this platform is in breach of the provisions of the Regulation have the right to lodge a complaint, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).