In order to receive and process your complaint, you must confirm that you have read the information on the processing of personal data. If you do not confirm that you have been informed, you will not be able to file a complaint.
1. Responsible for the treatment
The data, within the framework of the complaint channels enabled, will be processed by the Vilafranca del Penedès Social and Health Consortium, CIF Q0801154F, with address at Avenida Garraf 3, 08720, Vilafranca del Penedès, as the data controller. The data controller has designated a data protection officer who can be contacted at the email address [email protected].
2. Purpose of the treatment
The data will be processed in order to receive and manage the complaints that are made, and in order to investigate and adopt the appropriate preventive and corrective measures in relation to regulatory compliance. The data will be kept for the minimum time necessary to achieve the aforementioned purposes. In any case, complaints will not be kept for a period of more than three months in the whistleblowing channel management systems, without prejudice to the fact that they may be kept within the framework of investigations or actions carried out by the competent regulatory compliance bodies. . The complaints filed will be recorded in an internal registry and the information related to filed complaints will be kept anonymous in order to prove the operation of the internal complaints channel.
3. Legitimation of the treatment
The data will be processed in accordance with the legal obligation established in Directive (EU) 2019/1937 of the European Parliament and of the Council, of October 23, regarding the protection of persons who report violations of Union Law and the national regulations that transpose it. Likewise, the data is processed by virtue of the legal authorization established in article 24 of Organic Law 3/2018, of December 5, on the protection of personal data and guarantee of digital rights.
4. Recipients of the data
The data provided through the reporting channels will not be provided to third parties, unless there is a legal obligation to notify the public, police or judicial authorities in relation to the nature of the reported facts. The data may be communicated to external service providers to whom the entities delegate or entrust support in relation to the appropriate measures to be adopted within the framework of the investigation or correction of the illegal conduct reported. Likewise, the data may be provided to the people department when the facts denounced and investigated lead to the adoption of disciplinary measures of a labor nature.
5. Rights of interested persons
The interested parties can exercise the right of access, rectification, deletion and portability of the data, as well as the opposition, limitation and portability of the treatment, by sending an email to the address [email protected]. In the event that the interested party considers that their rights have been violated, they can file a claim with the Catalan Data Protection Authority (www.apdcat.cat).
6. Data not obtained directly from the interested party
The data of the data subjects treated that are not provided directly by them will be obtained through the information or communications provided by the altering persons or users of the complaint channels enabled. The data provided may include the identification of the person, the position or professional category, data on their behavior and other information on their activity in relation to their work, professional activity or within the framework of their relationship with the CSC entities. Due to the nature of the complaints channel, data related to administrative or criminal offenses may be included.