Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679
Dear "Data Subject",
we would like to inform you that the "EU Regulation 2016/679 of April 27, 2016, on the Protection of Individuals with regard to the Processing of Personal Data and on the free movement of such data" (hereinafter "GDPR"), provides for the protection of individuals and other subjects with regard to the processing of personal data.
DATA CONTROLLER
Toscana Aeroporti S.p.A., "Data controller", informs you that it will proceed to the processing of the personal data provided by you in the manner set out below.
The data indicated at the time of registration and included in the reports will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality and rights, yours and of all interested parties, in compliance with the confidentiality obligations imposed by the privacy legislation and the law on whistleblowing.
LEGAL BASIS FOR PROCESSING
The processing of personal data is carried out by Toscana Aeroporti S.p.A. for purposes related to the receipt, acceptance and subsequent management of reports of unlawful conduct received in accordance with applicable legislation. Pursuant to Article 6(1)(c) and (f) of the GDPR, all personal data collected as part of this processing is strictly functional and necessary to fulfill a legal obligation to which the data controller is subject and for the pursuit of the legitimate interest of the data controller.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
The data provided by you in the computer platform dedicated to the receipt of reports (including any documentation attached to it) - for the purpose of reporting alleged illegal conduct of which you have become aware by reason of your working relationship with Toscana Aeroporti S.p.A. committed by persons who for various reasons interact with the same and which damage the integrity of the company - are processed in order to carry out the necessary investigative activities aimed at verifying the validity of the facts reported and the adoption of any measures.
As part of the reports are processed, in addition to the data of the reporter (where not anonymously), also data relating to the reported person (person identified as a possible perpetrator of the reported illegal conduct) or other persons in various capacities involved in the report and may concern - depending on the content of the report - both "common" data (name, surname, job role, etc.. ), so-called "special" data (data relating to health conditions, sexual orientation or trade union membership, referred to in Article 9 GDPR) and personal data relating to criminal convictions and offenses (referred to in Article 10 GDPR).
If necessary, the Company may process the personal data you provide as part of the report for the activation of judicial and/or disciplinary protection related to the report received, if the relevant conditions are met.
DATA PROCESSING MODALITIES
The personal data provided within the framework of the report and collected are processed by the Supervisory Board ex D. Lgs. 231/01 of Toscana Aeroporti S.p.A. concerned by the report, as well as by company personnel (acting as "person authorized to process") adequately instructed as to the purposes and methods of processing in compliance with the principle of confidentiality and more generally with the regulations on the protection of personal data.
The processing will be carried out with computer and telematic tools with logics of organization and processing strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organizational, physical and logical measures provided for by the provisions in force.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Data processed for the above purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organizations.
DATA RETENTION
Personal data will be retained for as long as necessary for the processing of the report and, in any case, no longer than five years from the date of communication of the final outcome of the reporting procedure in compliance with the obligations of confidentiality and the principle of minimization referred to in Article 5(1)(c) of the GDPR as well as the legal obligations to which the Data Controller is bound as a result of the report itself.
RIGHTS OF THE DATA SUBJETCT
The data subjetcts have the right to obtain from Toscana Aeroporti S.p.A., in the cases provided for, access to their personal data and the rectification or cancellation thereof or the limitation of the processing that concerns them or to oppose the processing (Articles 15 et seq. of the Regulations).
The data subjects who believe that the processing of personal data relating to them carried out through this platform is in violation of the provisions of the Regulation, have the right to lodge a complaint, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation
CONTACTS
The "Data Controller" of the data processing is Toscana Aeroporti S.p.A. with registered office in Via del Termine, 11 - 50127 Florence.
The "Data Protection Officer" whom you can contact to exercise your rights under Art. 13 and/or for any clarifications regarding the protection of personal data can be reached at the company's registered office (regular mail) or at the email address: privacy@toscana-aeroporti.com.
