This section is implemented in compliance with Legislative Decree No. 24 of March 10, 2023, which incorporates Directive (EU) 2019/1937 on "the protection of individuals who report violations of Union law and provisions regarding the protection of individuals who report violations of national regulations." The mentioned legislative measure came into effect on March 30, 2023, and the stipulated provisions will be effective from July 15, 2023. As a result, Scabec is obligated to establish internal reporting channels. Reports should pertain to behaviors, acts, or omissions that harm the public interest or the integrity of public administration or private entities, including: administrative, accounting, civil, or criminal offenses; significant unlawful conduct according to Legislative Decree No. 231/2001, or violations of the organizational and management models prescribed therein; infractions falling within the scope of European Union or national acts pertaining to the following sectors: public procurement; financial services, products, and markets, including prevention of money laundering and terrorist financing; product safety and compliance; transportation safety; environmental protection; radiological protection and nuclear safety; food and feed safety, animal health, and welfare; public health; consumer protection; privacy and personal data protection, as well as security of networks and information systems; acts or omissions that undermine the financial interests of the Union; acts or omissions concerning the internal market; acts or behaviors that defeat the purpose or intent of the provisions mentioned in Union acts.
Upon reporting to the judicial or accounting authority or public disclosure, the reporting person must have reasonable and well-founded grounds to believe that the information regarding the reported violations, publicly disclosed matters, or complaints is true and falls within the scope of the legislation. Internal and external reports, along with related documentation, will be retained for the necessary duration to process the report, but no longer than 5 years from the date of communicating the final outcome of the reporting procedure. This retention is in compliance with the confidentiality obligations specified in European and national legislation concerning the protection of personal data.
The identity of the reporting person cannot be revealed to anyone other than those competent to receive or pursue the reports. Reports must be made in the public interest or in the interest of maintaining Scabec's administrative integrity.
Scabec, as the data controller, will handle the processing of personal data related to the receipt and management of reports in accordance with European and national principles governing the protection of personal data. Scabec will provide appropriate information to reporting individuals and those involved in the reports and will adopt suitable measures to safeguard the rights and freedoms of the concerned parties. The rights granted under Articles 15 to 22 of Regulation (EU) 2016/679 can be exercised within the limits specified by Article 2-undecies of Legislative Decree No. 196 of June 30, 2003.
Platform: https://scabec.whistleblowing.it/