It is recommended to describe the following:
Categories of Personal Data Collected
📊 What personal data is recorded when someone submits a complaint, and for what purpose is this information required?
Purpose of Use of Personal Data
🔄 How is the data used for processing the complaint and monitoring the procedure, in accordance with legal requirements?
Access to Personal Data
🔑 Which employees or external partners (e.g., public authorities) are allowed to access the data and under what circumstances?
Personal Data Protection Measures
🔐 What technical and organizational protection measures have been taken to ensure the integrity and security of your data?
Retention Period of Personal Data
⏳ How long is personal data retained by the organization, and what are the procedures for retaining or destroying it?
Individuals’ Rights Regarding Their Personal Data
✍️ How can someone request access to their personal data, correct it, or have it deleted?
Contact for Complaints and Information
📞 What are the ways to contact the Reports Receipt and Monitoring Officer or other competent authorities to submit complaints or requests?
Updates to the Data Protection Policy
📝 What procedures are in place to inform users about changes to the Data Protection Policy?