Privacy Policy
Privacy notice – Web Site
(Art. 13 General Data Protection Regulation n. 679/2016)
This notice sets out the basis on which Limacorporate S.p.A., collects and processes personal data relating to the users who interact with the web services of Limacorporate S.p.A., accessible electronically from the address limacorporate.com corresponding to the home page of the site, in compliance with Regulation (EU) 2016/679 and all applicable EU or Member States data protection and privacy legislation or regulations (together "Data Protection Legislation").
The notice is provided only for the limacorporate.com site and not for the other websites that may be consulted by the user via links.
We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
1. Data Controller
Limacorporate S.p.A., P.I. 01427710304 - 33038 Villanova di San Daniele (UD) - Via Nazionale, 52, tel. 0432.945511 – fax 0432.945512, legaloffice@limacorporate.com. You can contact these addresses for everything concerning the processing of your personal data.
2. Data Protection Officer (DPO)
LimaCorporate has appointed the Data Protection Officer pursuant to art. 37 of Reg. 2016/679/UE in Villanova di San Daniele (UD) - Via Nazionale, 52 and may be contacted at: dpo@limacorporate.com.
3. Purpose of processing
The personal data you provide is aimed exclusively at:
a) administer our websites, our events and for internal operations, including troubleshooting, data analysis, testing, statistics, and surveys;
b) improve our websites so that content is presented in the most effective way for you and your device;
c) as part of our efforts to keep our websites secure;
d) for purposes disclosed to you at the time you submitted your personal data, for example to fulfil your “Request for Information”, to provide you with access to one of our webinars or whitepapers, or to provide you with information you have requested on our Services.
The legal basis for processing a) to c) is legitimate interest (Reg. EU 2016/679 Article 6.1f), while for processing d) is the execution of the service (Reg. EU 2016/679 Article 6.1f).
4. Type of personal data processed
As a general rule, LimaCorporate will only collect your personal data where necessary for our Services. For the interaction with the website, LimaCorporate may thus collect, use and disclose (i.e., process) the following types of personal data:
Navigation data
The computer systems and the software procedures used to operate this web site acquire, during their normal operation, certain personal data, which transmission is implicit in the use of Internet communication protocols.This information is not collected to be necessarily associated with identified individuals, but, by its very nature could, through processing and association with other data held by third parties, allow users to be identified.This category comprehend the IP addresses or the domain names of the computers used by the users who connect to the site, the addresses with URI (Uniform Resource Identifier) entry of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the IT environment of the user. This information is used only to acquire anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing.
Data could be used to ascertain responsibility in case of hypothetical cyber-crimes to the detriment of the site: with this exception, currently the data on web contacts are not stored more than seven days.
Data provided voluntarily by the user
The completely optional, explicit and voluntary sending of emails to the addresses listed on this site entails the subsequent acquisition of the address of the sender, necessary to comply with the requests, as well as possible other personal information included in the message. For this information no unauthorized communication to third parties, or disclosure, is expected.
Specific summarised information sheets will be progressively included and displayed on the sites page dedicated to particular services on request. For these other processing methods, information regarding the possible knowability by third parties will be provided in advance.
Cookies
Cookies are small text files that are sent to your computer by the web pages you visit, in order to provide useful information to make the site operate more efficiently and optimally.On our site we mainly use technical cookies to manage navigation. For more information and details on the use of cookies visit this page: https://limacorporate.com/en/cookie-policy.html
5. Methods of processing
Personal data is processed by LimaCorporate and by duly authorized employee responsible for the correct fulfilment of the purposes indicated in point 3) through electronic tools and paper files, using appropriate security measures to ensure the confidentiality of personal data and to avoid undue access to unauthorized parties. LimaCorporate does not use automated processes, including profiling, to achieve the purposes set out in this notice.
6. Data communication
The data collected may be communicated to external parties duly appointed as Data Processor, where necessary, who carry out activities on behalf of LimaCorporate such as by way of example: the providers of the website analysis, of the infrastructure that hosts the site or the providers of publishing services. LimaCorporate is a multinational organization, with branches, IT systems and processes that cross borders. The data collected may be shared with other Limacorporate entities in other jurisdictions for administrative or accounting purposes and will be effectively protected, where necessary also through specific standard contractual clauses to guarantee an adequate level of data protection.
LimaCorporate will not supply any data to any third party other than those identified above. Personal and sensitive data will not be disseminated in any way but may possibly be transmitted to the Public Authorities that expressly request for disclosure on the basis of administrative or institutional purposes, in compliance with current national and European legislation.
7. Data provision
You are under no statutory or contractual obligation to provide data to LimaCorporate. However, if you do not provide the information, we may not be able to use the requested services.
8. Data retention
LimaCorporate will keep your data for no longer than is necessary for the purposes for which the personal data are processed and, anyway, in compliance with the current legislation and no longer than 6 months and after that the personal data will be deleted from any electronic or paper archives of LimaCorporate, without prejudice to further legal obligations.
9. Rights
Users have the right to obtain, at any time, confirmation as to whether or not personal data concerning them exist, to know their content and source, verify that they are correct or obtain their integration, update or rectification. Users also have the right to obtain erasure, anonymization or blocking of data that have been processed unlawfully, as well as the right to object, in any case, on legitimate grounds, to the processing of personal data concerning you. Additionally, in compliance with the terms of the GDPR, users can (a) request the limitation of the processing of personal data in the event that (i) challenges the accuracy of personal data, for the period necessary to verify the accuracy of such personal data; (ii) the processing is unlawful and the user objects to the deletion of personal data and requests instead that its use be limited; (iii) although the data controller no longer needs it for processing, personal data is necessary for the user to ascertain, exercise or defend a right in court; (iv) users have opposed to the treatment pursuant to art. 21, paragraph 1, of the GDPR pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party; (b) oppose at any time to the processing of personal data; (c) request cancellation of personal data concerning him without undue delay; (d) obtain the portability of personal data concerning it.
If you would like to exercise any of these rights, or if you have any questions about this notice or our processing of your data more generally, please contact: the Controller Limacorporate S.p.A. - 33030 Villanova di San Daniele (UD) - Via Nazionale, 52 - Tel. +39.0432.945511 - Fax +39.0432.945512
sending an email to: legaloffice@limacorporate.com
If you believe that LimaCorporate has not complied with your data protection rights, you can complain to the supervisory authority for data protection, the Garante privacy, Piazza Venezia 11, 00187 – Roma, e-mail: protocollo@gpdp.it or the competent Authority of your Country.
10. Updates and amendments
This privacy notice may be modified or updated from time to time, users will be notified in the event of substantial changes. You can verify the last update of this Notice by checking the date at the bottom of this page. The user is required to periodically review this Notice.
FRM 38-26, rev.0 del 26/06/2023
Privacy notice – Medical Education Event participation
(art. 13 general data protection regulation n. 679/2016)
This notice sets out the basis on which Limacorporate S.p.A, collects and processes Your personal data, in order to manage the registration, booking and participation procedures for on line and in-person events of interest, in compliance with Regulation (EU) 2016/679 and all applicable EU data protection and privacy legislation or regulations (together "Data Protection Legislation").
We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
1. Data Controller
Limacorporate S.p.A., P.I. 01427710304 - 33038 Villanova di San Daniele (UD) - Via Nazionale, 52, tel. 0432.945511 – fax 0432.945512, legaloffice@limacorporate.com. You can contact these addresses for everything concerning the processing of your personal data;
2. Data Protection Officer (DPO)
LimaCorporate has appointed the Data Protection Officer pursuant to art. 37 of Reg. 2016/679/UE in Villanova di San Daniele (UD) - Via Nazionale, 52 and may be contacted at: dpo@limacorporate.com
3. Purpose of processing
The personal data you provide are aimed exclusively at:
a) Registration and participation in events.
b) Booking of accommodation, services and means of transport related to the above-mentioned events.
c) Sending information relating to events or services, subject to your consent that can be revoked anytime.
d) Usage analysis and training curriculum.
The legal basis for processing a) and b) is the execution of the service (Reg. UE 2016/679 Art. 6.1b), for processing c) is consent (Reg. UE 2016/679 Art. 6.1a), while for processing d) is the controller’s legitimate interest (Reg. UE 2016/679 Art. 6.1f).
4. Type of personal data processed
As a general rule, LimaCorporate will only collect your personal data where necessary for our Services. Depending on your use of our Services, LimaCorporate may thus collect, use and disclose (i.e., process) the following types of personal data: contact information, such as your name, surname, residence address, country of residence, e-mail address, telephone number, company name, identity document, possible specific preferences / requests / needs.
5. Methods of processing
Personal data is processed by LimaCorporate and by duly authorized employee responsible for the correct fulfilment of the purposes indicated above through electronic tools and paper files, as well as by using appropriate security measures to ensure the confidentiality of personal data and to avoid undue access to unauthorized parties. LimaCorporate does not use automated processes, including profiling, to achieve the purposes set out in this statement.
6. Data communication
The data collected may be communicated to external parties duly appointed as Data Processor, where necessary, who carry out activities on behalf of LimaCorporate such as by way of example: Information Technologies suppliers, Travel Agency, Hotels, Transport services. LimaCorporate is a multinational organization, with branches, IT systems and processes that cross borders. The data collected may be shared with other LimaCorporate entities in other jurisdictions, for administrative or accounting purposes where necessary through specific standard contractual clauses to ensure an adequate level of data protection. LimaCorporate will not supply any data to any third party other than those identified above. Personal and sensitive data will not be disseminated in any way but may possibly be transmitted to the Public Authorities that expressly request for disclosure on the basis of administrative or institutional purposes, in compliance with current national and European legislation.
7. Data provision
You are under no statutory or contractual obligation to provide data to LimaCorporate. However, if you do not provide the information, we may not be able to execute the Service.
8. Data retention
LimaCorporate will keep your data for no longer than is necessary for the purposes for which the personal data are processed and, anyway, in compliance with the current legislation and no longer than 12 months and after that the personal data will be deleted from any electronic or paper archives of LimaCorporate, without prejudice to further legal obligations. The data relating to participation in each event is instead kept for a period of 15 years to support your training.
9. Rights
As a person, you have several rights. You can access and obtain a copy of your data on request, require changing incorrect or incomplete data, to delete or stop processing your data, object to the processing of your data, and ask us to transfer your data to another organization.If you would like to exercise any of these rights, or if you have any questions about this notice or our processing of your data more generally, please contact:
the Controller Limacorporate S.p.A. - 33030 Villanova di San Daniele (UD) - Via Nazionale, 52 - Tel. +39.0432.945511 - Fax +39.0432.945512 or sending an email to: legaloffice@limacorporate.com.
If you believe that the company has not complied with your data protection rights, you can complain to the supervisory authority for data protection, the Garante privacy, Piazza Venezia 11, 00187 – Roma, e-mail: protocollo@gpdp.it or the competent Authority of your Country.
FRM 38-22 rev.1 dated 06/03/2023
Privacy notice - Job applicant
(Art. 13 General Data Protection Regulation n. 679/2016)
This notice sets out the basis on which Limacorporate S.p.A., Via Nazionale 52, Villanova di San Daniele del Friuli, (UD) (referred to as the “Controller” or "the company" throughout this notice) collect and process personal data relating to job applicants as part of our recruitment process, in compliance with Regulation (EU) 2016/679 ("GDPR") and all applicable EU data protection and privacy legislation or regulations (together "Data Protection Legislation").
We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
1. Data Controller
Limacorporate S.p.a., P.I. 01427710304 - 33038 Villanova di San Daniele (UD) - Via Nazionale, 52, tel. 0432.945511 – fax 0432.945512, legaloffice@limacorporate.com. You can contact these addresses for everything concerning the processing of your personal data;
2. Data Protection Officer (DPO)
The Controller has appointed the Data Protection Officer pursuant to art. 37 of Reg. 2016/679/UE in Villanova di San Daniele (UD) - Via Nazionale, 52 and may be contacted at : dpo@limacorporate.com
3. Purpose of processing
The personal data you provide in your application and as part of the recruitment process will only be held and processed to facilitate the selection process and in connection with any subsequent employment. Your personal data may be used to assess your application for employment at Limacorporate, to verify your information, to conduct reference checks, to communicate with you and to inform you of further career opportunities. The legal basis for processing is the implementation of pre-contractual measures (Article 6.1b GDPR)
4. Type of personal data processed
As a general rule, LimaCorporate will only collect your personal data where necessary for our Services. For the submission of an application for job positions, LimaCorporate may therefore collect, use and communicate (e.g. process) the following types of personal data: contact information, such as name, surname, postal address, an email address and a telephone number; data relating to identity such as tax code, date and place of birth, documents certifying identiy; data relating to qualifications and work experience, details relating to education, training courses taken and any other information contained in the CV.
5. Methods of processing
Personal data is processed by LimaCorporate and by duly authorized persons responsible for the correct fulfillment of the purposes indicated in point 3) through electronic tools and paper files, using appropriate security measures to ensure the confidentiality of personal data and to avoid undue access to unauthorized parties. LimaCorporate does not use automated processes, including profiling, to achieve the purposes set out in this statement.
6. Data communication
The data collected may be communicated to external parties duly appointed as Data Processor, where necessary, who carry out activities on behalf of LimaCorporate such as by way of example: consultant companies in the HR field for the evaluation and screening of profiles, employment consultant, etc. Personal data relating to means of communication (telephone, e-mail, etc.) will be used by duly appointed internal subjects.
LimaCorporate is a global organization, with branches, IT systems and processes that cross borders. The data collected may be shared with other Limacorporate entities in other jurisdictions, for employment consideration purposes, and it will be adequately protected, where necessary also through specific standard contractual clauses to ensure an adequate level of data protection.
LimaCorporate will not supply any data to any third party other than those identified above. Personal and sensitive data will not be disseminated in any way but may possibly be transmitted to the Public Authorities that expressly request for disclosure on the basis of administrative or institutional purposes, in compliance with current national and European legislation.
7. Data provision
You are under no statutory or contractual obligation to provide data to Limacorporate. However, if you do not provide the information, we may not be able to process your application properly or at all. We may collect special categories of data that are relevant for the evaluation of your profile, your skills and your professional capacity to the extent that such information is necessary in relation to a possible business relationship or partnership, and to the recruitment process.
8. Data retention
LimaCorporate will keep your data for no longer than is necessary for the purposes for which are processed and, anyway, in compliance wiht the current legislation and no longer than 5 years. After that, the personal data will be deleted from any electronic or pater achives of LimaCorporate, without prejudice to further legal obligations.
9. Rights
As a person, you have several rights. Shortly you can access and obtain a copy of your data on request, require changing incorrect or incomplete data, to delete or stop processing your data, object to the processing of your data, and ask us to transfer your data to another organization according to the provision of the articles from 15 to 22 of EU Regulation 2016/679 GDPR.
If you would like to exercise any of these rights, or if you have any questions about this notice or our processing of your data more generally, please contact:
the Controller Limacorporate S.p.A. - 33030 Villanova di San Daniele (UD) - Via Nazionale, 52 - Tel. +39.0432.945511 - Fax +39.0432.945512
or sending an email to: legaloffice@limacorporate.com.
If you believe that the company has not complied with your data protection rights, you can complain to the supervisory authority for data protection, the Garante privacy, Piazza Venezia 11, 00187 – Roma, e-mail: protocollo@gpdp.it or to the competent Authority of your Country.
FRM 38-27 rev.0 dated 26/06/2023
Privacy notice – Suppliers - Business Partners
(Art. 13 General Data Protection Regulation n. 679/2016)
This notice sets out the basis on which Limacorporate S.p.A., collects and processes your personal data relating to the performance of a contract or in order to take steps at your request prior to entering into a contract, in compliance with Regulation (EU) 2016/679 and all applicable EU data protection and privacy legislation or regulations (together "Data Protection Legislation").
We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
1. Data Controller
Limacorporate S.p.A., P.I. 01427710304 - 33038 Villanova di San Daniele (UD) - Via Nazionale, 52, tel. 0432.945511 – fax 0432.945512, legaloffice@limacorporate.com. You can contact these addresses for everything concerning the processing of your personal data;
2. Data Protection Officer (DPO)
LimaCorporate has appointed the Data Protection Officer pursuant to art. 37 of Reg. 2016/679/UE in Villanova di San Daniele (UD) - Via Nazionale, 52 and may be contacted at: dpo@limacorporate.com
3. Purpose of processing
The personal data you provide is aimed exclusively at:
a) the execution of a contract of which you are a part or to fulfill, before the execution of the contract, your explicit requests;
b) management of business partners (administration, contracts, orders, shipments and invoices, reliability and solvency checks);
c) fulfillment of legal obligations, regulations, community legislation;
d) management of litigation (contractual breaches, warnings, transactions, debt collection, arbitrations, judicial disputes).
The legal basis for processing a) to b) is the performance of a contract (Reg. EU 2016/679 Art. 6.1a); for processing c) is for compliance with a Controller’s legal obligation (Reg. EU 2016/679 Art. 6.1c); for processing d) is the legitimate interests pursued by the controller (Reg. EU 2016/679 Art. 6.1f).
4. Type of personal data processed
As a general rule, LimaCorporate will only collect your personal data where necessary for the execution of the contract. Depending on your use of our Services, LimaCorporate may thus collect, use and disclose (i.e., process) the following types of personal data: contact information, such as your name, surname, a postal address for billing and delivery purposes, a fiscal identification or VAT number, an e-mail address, and a telephone number.
5. Methods of processing
Personal data is processed by LimaCorporate and by duly authorized employees responsible for the correct fulfilment of the purposes indicated in point 3) through electronic tools and paper files, as well as by using appropriate security measures to ensure the confidentiality of personal data and to avoid undue access to unauthorized parties. LimaCorporate does not use automated processes, including profiling, to achieve the purposes set out in this notice.
6. Data communication
The data collected may be communicated to external parties, duly appointed as Data Processor, where necessary, who carry out activities on behalf of LimaCorporate such as by way of example: freight transport company; banks and credit institutions; debt collection companies; legal, tax or commercial consultancy firms; insurance companies, IT service providers. LimaCorporate is a multinational organization, with branches, IT systems and processes that cross borders. The data collected may be shared with other LimaCorporate entities in other jurisdictions, for administrative or accounting purposes where necessary through specific standard contractual clauses to ensure an adequate level of data protection. LimaCorporate will not supply any data to any third party other than those identified above. Personal and sensitive data will not be disseminated in any way but may possibly be transmitted to the Public Authorities that expressly request for disclosure on the basis of administrative or institutional purposes, in compliance with current national and European legislation.
7. Data provision
The provision of your personal data is conditioning the ability to effectively carry out our contractual obligations and/or answer to your requests, so that the refusal to supply it or the opposition to the processing will make it impossible to effectively fulfil our contractual obligations and or to answer to the mentioned requests.
8. Data retention
LimaCorporate will keep your data for no longer than is necessary for the purposes for which the personal data are processed and, anyway, in compliance with the current legislation and no longer than the mandatory retention periods required by law and according to the statute of limitation period arising from the execution of the contract. After that the personal data will be deleted from any electronic or paper archives of LimaCorporate, without prejudice to further legal obligations.
9. Rights
As a person, you have several rights. You can access and obtain a copy of your data on request, require changing incorrect or incomplete data, to delete or stop processing your data, object to the processing of your data, and ask us to transfer your data to another organization.If you would like to exercise any of these rights, or if you have any questions about this notice or our processing of your data more generally, please contact:
the Controller Limacorporate S.p.A. - 33030 Villanova di San Daniele (UD) - Via Nazionale, 52 - Tel. +39.0432.945511 - Fax +39.0432.945512 or sending an email to: legaloffice@limacorporate.com.
If you believe that the company has not complied with your data protection rights, you can complain to the supervisory authority for data protection, the Garante privacy, Piazza Venezia 11, 00187 – Roma, e-mail: protocollo@gpdp.it or the competent Authority of your Country.
FRM 38-12 rev.0 dated 26/01/2023
Privacy notice – Whistleblowing
(Art. 13 General Data Protection Regulation n. 679/2016)
Limacorporate S.p.A. (hereinafter also referred to as the "Company" or the "Controller") has established several channels to allow the reporting of violations pursuant to Legislative Decree 24/2023 (hereinafter also referred to as the "Reports") by various individuals, as identified from time to time by the applicable legislation ("Whistleblowers").
These channels also enable the transmission of Reports in an anonymous form. However, should the Whistleblower choose to submit the Report in a non-anonymous format, and if the Report contains personal data relating to the Whistleblower and/or third parties, the Company will process the personal data contained therein. Therefore, this information outlines the methods by which Limacorporate S.p.A. collects, stores, and uses your personal data for the management of the Reports, in accordance with the provisions of Regulation (EU) 2016/679 (the "GDPR") and in compliance with any other applicable European Union or Member State regulations on privacy (together, the "Privacy Legislation").
In this regard, the Controller invites you to carefully read this notice (hereinafter, the "Notice"), as it contains important information about the protection of personal data and the security measures taken to ensure its protection in full compliance with the GDPR.
1. Data Controller
Limacorporate S.p.A., P.I. 01427710304 - 33038 Villanova di San Daniele (UD) - Via Nazionale, 52, tel. 0432.945511 – fax 0432.945512, legaloffice@limacorporate.com. You can contact these addresses for everything concerning the processing of your personal data.
2. Data Protection Officer (DPO)
LimaCorporate has appointed the Data Protection Officer pursuant to art. 37 of Reg. 2016/679/UE in Villanova di San Daniele (UD) - Via Nazionale, 52 and may be contacted at: dpo@limacorporate.com
3. Type of personal data processed
The Controller processes the personal data that may be contained in the Reports received or in documentation attached to them and/or collected during the activities of managing and verifying such Reports. This may include, for example, personal identification data, contact information, data related to work activities, and, in some cases, data concerning criminal convictions or offenses, data belonging to special categories (e.g., health data, political opinions, union membership, etc.).
Furthermore, it should be noted that, in the case of an oral Report, with the prior consent of the Whistleblower, the Report may be documented by the relevant personnel through recording on a suitable device for preservation and listening or by means of minutes that will be submitted to the Whistleblower for any corrections. In any case, the Company guarantees the confidentiality of the Whistleblower's identity and all the protections provided by law for the benefit of the Whistleblower.
The personal data may pertain to the Whistleblower, the reported individual, and/or third parties.
4. Purpose of processing
The collection and processing of personal data are carried out solely for the following purposes:
a) The proper and complete management of the Reports in compliance with the current legislation on whistleblowing, including conducting necessary investigative activities to verify the validity of the reported matter and taking appropriate measures accordingly, and responding to any requests from Authorities.
b) To ascertain, exercise, or defend in judicial and/or extrajudicial proceedings the rights or interests of the Controller or third parties.
5. Legal basis of the processing and nature of data provision
The legal basis for the processing concerning the purpose outlined in point 3.1 is Article 6(1)(c) of the GDPR - "compliance with a legal obligation to which the Controller is subject."
Regarding the purpose mentioned in point 3.2, the legal basis for the processing is Article 6(1)(f) of the GDPR - "pursuit of the legitimate interests of the Controller or third parties."
Regarding the purpose based on the legitimate interest of the Controller or third parties, according to Article 6(1)(f) of the GDPR, it is specified that the Controller's legitimate interest in processing the data is fairly balanced with your fundamental interests, rights, and freedoms. The processing based on the legitimate interest of the Controller is not mandatory, and you have the right to object to such processing as described in this Information. In such a case, the Controller will not process personal data for this purpose unless it demonstrates compelling legitimate ground.
Concerning personal data falling under special categories processed for the above-mentioned purposes, the legal basis for the processing is Article 9(2)(b) of the GDPR, which states that "processing is necessary for carrying out the obligations and exercising specific rights of the Controller or the data subject in the field of employment and social security and social protection law, insofar as it is authorized by Union or Member State law or a collective agreement pursuant to Member State law, and providing for appropriate safeguards for the fundamental rights and the interests of the data subject." Additionally, the legal basis is also Article 9(2)(f) of the GDPR, which states that "processing is necessary for the establishment, exercise, or defense of legal claims or whenever courts are acting in their judicial capacity."
Furthermore, in cases as provided for in Article 12 of Legislative Decree 24/2023, the identity of the Whistleblower and any other information from which their identity can be directly or indirectly inferred may only be disclosed with the explicit consent of the Whistleblower to persons other than those competent to receive or follow up on the Reports, expressly authorized to process such data pursuant to Articles 29 and 32(4) of the GDPR and Article 2-quaterdecies of the data protection code referred to in Legislative Decree 30 June 2003, no. 196.
It is reminded, in any case, that the Report can be submitted anonymously; however, submitting a non-anonymous Report facilitates the management of the Report itself.
Personal data is processed by LimaCorporate and by duly authorized employee responsible for the correct fulfilment of the purposes indicated in point 3) through electronic tools and paper files, using appropriate security measures to ensure the confidentiality of personal data and to avoid undue access to unauthorized parties
6. Automated Decisions
LimaCorporate does not use automated processes, including profiling, to achieve the purposes set out in this notice.
7. Communication and Transfer of Data
Your personal data may be shared with:
• Functions involved in the activity of managing the Reports, conducting investigations/verification of the reported matters;
• System administrators responsible for maintaining the platform for receiving Reports;
• External consultants, such as legal firms, who may be involved in the investigative and management phase of the Reports;
• Entities, bodies, institutions, or Authorities to whom communication is mandatory under the provisions of laws or regulations.
The entities belonging to the above-mentioned categories, where necessary, will be duly appointed, depending on the cases, as data processors according to Article 28 of the GDPR or authorized to process data under Article 29 of the GDPR and Article 2 quaterdecies of Legislative Decree 196/2003. A list of appointed data processors is available at the Data Controller's office.
8. Data retention
LimaCorporate will process and retain your personal data for the time necessary to fulfil the purposes mentioned above, and in any case, not exceeding five years from the date of communication of the final outcome of the reporting procedure. After this period, your data will be deleted, subject to any further legal obligations.
9. Rights
As a person, you have several rights. Shortly you can access and obtain a copy of your data on request, require changing incorrect or incomplete data, to delete or stop processing your data, object to the processing of your data, and ask us to transfer your data to another organization according to the provisions of the articles from 15 to 22 of EU Regulation 2016/679 GDPR.
If you would like to exercise any of these rights, or if you have any questions about this notice or our processing of your data more generally, please contact: the Controller Limacorporate S.p.A. - 33030 Villanova di San Daniele (UD) - Via Nazionale, 52 - Tel. +39.0432.945511 - Fax +39.0432.945512
sending an email to: legaloffice@limacorporate.com
or consulting our website at https://limacorporate.com/en/about-us/privacy-policy.html.
If you believe that LimaCorporate has not complied with your data protection rights, you can complain to the supervisory authority for data protection, the Garante privacy, Piazza Venezia 11, 00187 – Roma, e-mail: protocollo@gpdp.it or the competent Authority of your Country.
Finally, we remind you that the rights provided from Articles 15 to 22 of the GDPR cannot be exercised by contacting the Data Controller or by filing a complaint with the supervisory authority under Article 77 of the GDPR if exercising those rights could result in an actual and concrete prejudice to the confidentiality of the Whistleblower's identity.
FRM 38-30, rev.0 del 25/09/2023