For the management of activities related to so-called "whistleblowing", it is necessary to process the data of the reported persons and of the reporting person in compliance with the legal obligation pursuant to Legislative Decree 24/2023.

The data of non-anonymous whistleblowers and reported persons will be managed with a guarantee of absolute confidentiality through the platform and will be accessed and transmitted only to the subjects appointed to manage the reports by means of the abovementioned platform

The data will be kept for five years from the closure of the report as required by current legislation.

Interested parties, in compliance with the rules established by Legislative Decree 24/2023 on whistleblowing, may exercise their rights of access, rectification, limitation of processing and request for cancellation, by contacting the Organismo di Vigilanza directly, without prejudice for Certiquality, Data Controller, the obligation to comply with legal obligations.

However, interested parties always have the right to lodge a complaint with the to the Data Protection Authority according to the procedures described on the website www.garanteprivacy.it