BASIC INFORMATION ON DATA PROTECTION: WHISTLEBLOWING CHANNEL

Data Controller
NUTRIEXPERTS, SL is the data controller of the data subject’s personal data and informs that such data will be processed in accordance with the applicable personal data protection regulations, Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

Purpose of processing
We will process the personal contact data and the reported facts for the purpose of managing and resolving the received report.

Legal basis for processing
The legal basis for processing is the performance of a task carried out in the public interest, as well as compliance with a legal obligation.

Data retention
The data will be kept only for the period necessary to decide whether or not to initiate an investigation into the reported facts. In any case, after three months from the introduction of the data, if the report has not progressed, the data may be retained solely for the purpose of providing evidence of the system, in anonymised form. If the report has progressed, the data will be deleted and blocked in the internal reporting system, and kept for no longer than ten years. The data may continue to be processed by the competent authority or body in the event of an investigation into the reported facts.

Data communication
The data may be disclosed to service providers linked to the Controller acting as Data Processors. Likewise, the data may be processed by processors located outside the European Economic Area who guarantee an adequate level of protection under standard contractual clauses, ensuring a safe data transfer. Data will only be communicated to third parties when necessary for the adoption of disciplinary measures or for the processing of legal proceedings, where applicable, without prejudice to notifying the competent authority of facts that may constitute a criminal or administrative offence.

Rights of the data subject
Data subjects are informed that they may exercise their rights of access, rectification, erasure and objection with NUTRIEXPERTS, SL at the following address: C/ Vallespir, 19, 3rd Floor, Office 5, 08173 Sant Cugat del Vallès (Barcelona). E-mail: gdpr@nutriexperts.eu. Likewise, you may lodge a complaint with the Supervisory Authority at www.aepd.es if you consider that the processing does not comply with applicable regulations.