Privacy notice — Whistleblowing

Version 2.0 — editorial update 2026-09-09.

1. Controller and purpose

Italimpianti S.r.l., Piazza del Duomo 16, 20123 Milan, Italy, VAT no. 03981190162, processes data to receive, assess and handle reports under Italian Legislative Decree 24/2023. Legal basis: legal obligation, Article 6(1)(c) GDPR. Privacy contact: DA DEFINIRE; DPO or privacy contact person: DA DEFINIRE. You may also write to the registered office.

2. Data and limits

Processing may include the reporting person's optional identity and contacts, persons concerned, relevant facts and documents. Anonymous reporting is possible; an optional contact enables feedback and communication within the available channel. Do not provide manifestly unnecessary data; such data collected accidentally must be deleted without undue delay. Where applicable, special-category and criminal data are covered by Articles 9(2)(g) and 10 GDPR and Articles 2-sexies and 2-octies of the Italian Privacy Code; applicable specific conditions and measures: DA DEFINIRE.

3. Confidentiality and recipients

Channel manager: DA DEFINIRE. Persons authorised to investigate and relevant recipients: DA DEFINIRE. The reporting person's identity is protected under the limits and conditions of Article 12 of Legislative Decree 24/2023. Disclosures to ANAC, competent authorities or advisers are limited to necessary cases permitted by law; data are not intended for public disclosure. Verified technical safeguards and actual access restrictions: DA DEFINIRE. DPIA status and date: DA DEFINIRE. International transfers and safeguards: DA DEFINIRE.

4. Retention and rights

Reports and documents are kept as necessary and in any event no longer than five years after notification of the procedure's final outcome. Rights under Articles 15–22 GDPR may be exercised within legal limits; restrictions under Article 2-undecies of the Italian Privacy Code may protect confidentiality and investigations. Remedies through the Italian Data Protection Authority remain available. Do not request information about a report through ordinary contact forms.

5. Available channels

See the whistleblowing procedure. Availability of secure attachments, a confidential code and follow-up portal: DA DEFINIRE. This notice does not activate those functions. Further information is in the Privacy Policy.