INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF USERS AS PER ART. 13 OF REG. (EU) 2016/679 ("GDPR") - ‘STAFF REPORTS’.
Name, surname, telephone number, e-mail address.
Data relating to health issues, when provided.
Processing of Data
PURPOSES OF THE PROCESSING (A)
1) Personal data you provided when filling in the online form will be processed by AdB to deal with your suggestions about: safety at work (suggestion for improvement; spill of any dangerous or potentially dangerous substance (oil, fuel, liquid waste; suggestion for improvement; non-compliance; near-miss; accident) and of service quality (suggestion for improvement; non-compliance).
LEGAL BASIS OF THE PROCESSING (A)
PERIOD OF STORAGE (A)
Such data will be stored for the time necessary in order to deal with your suggestion. Once such time has expired, and anyway once the request has been dealt with, data will be kept for a maximum of 10 years, except for any case of litigation, where the deadline is the final judicail ruling.
PURPOSES OF THE PROCESSING (B)
Any specific category of data you might have provided (formerly ‘sensitive’ data) when filling in the online form will be dealt with to handle your requests.
LEGAL BASIS OF THE PROCESSING (B)
Consent (optional and revocable at any time).
PERIOD OF STORAGE (B)
Such data will be stored for the time necessary in order to deal with your request, except in case of withdrawal of consent.
Personal data may be processed by third parties operating as Controllers such as, i. e. Authorities and control bodies and in general, public or private subjects who are entitled to request those data. Personal data may also be processed, on behalf of AdB, by external parties designated as Processor who are given appropriate operating instructions.
Authorized subjects to the processing
Personal Data may be processed by employees of the corporate functions responsible for the pursuit of the purposes, who have been authorized to process and who have been received adequate operating instructions.
Rights of the data subject - the right to lodge a complaint with a supervisory authority
By contacting Quality office at the following e-mail address firstname.lastname@example.org, data subjects have the right to ask the Controller to access to data concerning themselves, the right to rectifications; erasure; to restriction of processing as per art. 18 GDPR; right to data portability; right to object and others, as well as the opposition to the process in the hypothesis of legitimate interest of the Controller.
Data subjects, furthermore, if the data processing is based on consent or on a contract, and it is processed with automated tools, shall have the right to receive their personal data in a structured, commonly used and machine-readable format, as well as, if technically possible, have the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided – so called Right to portability as per art. 20 GDPR.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the European State in which they reside habitually or work, or the State in which the alleged data breach has occurred.
All concerned have the right to withdraw their consent at any time and to oppose the processing of their personal data processed for the same purposes.