In order to receive and process your complaint, you must confirm that you have read this Privacy Notice. If you do not accept the conditions set out in the notice, you will not be able to file the complaint.
Please note that this channel is not intended for reporting emergencies.
The whistleblowing channel is managed by Estibarna CPE (hereinafter, the COMPANY), using the Ithikios platform, owned by Digital Products Development SL, a company specialized in providing internal whistleblowing channel management systems for companies. Ithikios guarantees security and confidentiality for the purpose of the contracted processing.
Below we show you the basic information on how we handle your personal data:
Data Controller |
ESTIBARNA CENTRO PORTUARIO DE EMPLEO EN EL PUERTO DE BARCELONA S.A is the data controller responsible for processing the data subject’s personal data and informs you that such data will be processed in accordance with the applicable personal data protection legislation, namely Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD). |
Purpose of the processing |
The personal contact details and the reported facts will be processed for the purpose of managing and resolving the complaint received. |
Legal basis for the processing |
The legal basis for processing the data is the performance of a task carried out in the public interest, as well as compliance with a legal obligation. |
Data retention |
The data will be retained only for the time strictly necessary to determine whether or not an investigation into the reported facts should be initiated. In any event, after three months from the entry of the data, if the complaint has not been upheld, the data may be retained solely for the purpose of evidencing the existence of the system, in an anonymised form. If the complaint is upheld, the data will be deleted and blocked within the internal whistleblowing system and retained for a period not exceeding ten years. The data may continue to be processed by the competent authority or body in the event of an investigation into the reported facts. |
Disclosure of data |
The data may be disclosed to service providers linked to the Data Controller, who act as Data Processors. The data may be processed by data processors located outside the European Economic Area who guarantee an adequate level of protection through standard contractual clauses, ensuring secure data transfers. Data will only be disclosed to third parties where necessary for disciplinary measures or judicial proceedings, without prejudice to notification to the competent authority of any criminal or administrative offence |
Rights of data subjects |
Data subjects may exercise their rights of access, rectification, erasure and objection by contacting ESTIBARNA CENTRO PORTUARIO DE EMPLEO EN EL PUERTO DE BARCELONA S.A at: Ronda del Port, 424 – 08039 Barcelona, e-mail: [email protected] Data Protection Officer, e-mail: [email protected] Data subjects may also lodge a complaint with the Supervisory Authority if they consider that the processing does not comply with the applicable legislation. Rights include access, rectification, erasure or right to be forgotten, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority. |