Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter: GDPR), Team Office S.r.l. (“the Company”), with registered office at Via Durban, 2, 00144 Rome (RM), Italy, as the data controller, hereby informs potential reporters, reported individuals, facilitators, and any other natural person potentially involved in the handling of reports that the processing of personal data may involve various categories of information relating to natural persons, including, at least potentially, special categories of personal data (Art. 9, GDPR) and personal data relating to criminal convictions and offenses (Art. 10, GDPR).

The legal bases justifying the processing are compliance with a legal obligation (Art. 6, paragraph 1, letter c), GDPR) and, with regard to special categories of data and criminal data, the provisions of Art. 9, paragraph 2, letter g) and Art. 10, respectively, in conjunction with Art. 2-octies of Legislative Decree 196/2003.

The reporting individual’s identifying information will be visible exclusively to the specialized external company acting as a data processor pursuant to Article 28 of the GDPR and its technology or telecommunications sub-processors, unless the reporting individual provides express consent. No other instances of personal data disclosure are provided for, except in cases where the rights of the data controller, the data processor, or third parties are exercised to assert or defend a legal claim. No personal data will be transferred or stored outside the European Economic Area.

Personal data that is clearly not relevant to the processing of a specific report is not collected; if collected accidentally, it is deleted immediately. In any case, the data will be retained for a period not exceeding five years from the date of notification of the final outcome of the reporting procedure.

Every data subject is entitled to the rights set forth in Articles 15 and following of the GDPR, subject to the limitations provided for in letter f, paragraph 1, Article 2-undecies of Legislative Decree 196/2003. Therefore, the rights referred to in the aforementioned articles may not be exercised if exercising such rights could result in actual and concrete harm to the confidentiality of the whistleblower’s identity. This is without prejudice to the right to withdraw any consent previously given.

The data subject also has the right to contact the Italian Data Protection Authority.

← Back to Whistleblowing