1. The safeguards in place to avoid data breaches, leakages or unauthorised disclosure are the following: restriction of access rights to electronic folders and to the functional mailbox for submission of complaints, cupboards secured with keys, and specific training of the persons handling the information on confidentiality.
2. The controller of these processing operations is the SRB, here represented by the SRB Ethics and Compliance Officer, respectively the SRB Data Protection Officer.
3. The personal data collected are stored and retained in accordance with the SRB rules on retention of documents. The retention period respects the principle of retention no longer than necessary for the fulfilment of the purpose of the processing operation, and eventually, to allow judicial or administrative disputes.