Model 231

The Legislative Decree no. 231 dated June 8, 2001 has introduced administrative liability for legal entities, companies and associations to the Italian legal framework.
The Decree provides for the application of restrictive sanctions against the entity/company whose individuals in senior positions or employees, in performing their activities, have committed certain offences on the entity’s behalf and/or to its advantage.

For ISSEL NORD the introduction of the Decree represented an opportunity to reaffirm in its Code of Ethics those principles of loyalty, faithfulness, and honesty that have always distinguished its modus operandi.

To comply with the requirements of Legislative Decree 231/2001 (art.6 II°c.) “[…] the models must meet the following demands:

identify activities where crimes may be committed;
establish specific protocols aimed at planning how the Board’s decisions are to be developed and implemented in relation to the crimes to be prevented;
identify ways to manage appropriate financial resources to prevent crimes from being committed;
establish information obligations as regards the Board responsible for overseeing how the models function and are complied with;
introduce an appropriate disciplinary system for issuing sanctions for non-compliance with the measures specified in the model […].”

Parte Generale

Modello di Organizzazione, Gestione e Controllo, parte generale

Parte Speciale A

Reati contro la Pubblica Amministrazione

Parte Speciale B

Reati informatici

Parte Speciale C

Reati di criminalità organizzata

Parte Speciale D

Reati in materia di salute e sicurezza sui luoghi di lavoro

Parte Speciale E

Reati societari

Parte Speciale F

Reati di ricettazione, riciclaggio e impiego di denaro, beni o utilità di provenienza illecita, nonché autoriciclaggio

Parte Speciale G

Reati in materia di violazione del diritto d’autore

Parte Speciale H

Reati ambientali

Parte Speciale I

Reati tributari

Right of access: (Article 15 of the Regulation)	confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, the right to obtain, among other things, access to your personal data and information regarding the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipient to whom the personal data have been or will be disclosed.
Right to rectification: (Article 16 of the Regulation)	(i) rectification without undue delay of inaccurate personal data concerning you and (ii) completion of your personal data, where incomplete.
Right to erasure («right to be forgotten»): (Article 17 of the Regulation)	erasure of personal data concerning you without undue delay (the Data Controller has the obligation to erase personal data without undue delay in the cases set out in Article 17 of the Regulation).
Right to restriction of processing: (Article 18 of the Regulation)	restriction of processing in the cases set out in Article 18 of the Regulation.
Right to data portability: (Article 20 of the Regulation)	receipt in a structured, commonly used and machine-readable format of personal data concerning you; the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases set out in Article 20 of the Regulation.
Right to object for processing carried out under Article 6(1)(e) or (f): (Article 21 of the Regulation)	right to object, at any time, on grounds relating to your particular situation, to processing of personal data concerning you based on point (e) or (f) of Article 6(1), including profiling based on those provisions.