The company Mafin Srl, in compliance with Legislative Decree No. 24/2023, in order to tackle conduct or events that may constitute a violation of laws or regulations (national or European Union) and to protect the public interest and the integrity of the entity itself, has set up a portal for reports of unlawful conduct that can be reached at:


The portal allows the reporter to proceed with a report anonymously or alternatively by providing his or her personal details, guaranteeing the confidentiality of the identity of the reporter, the person involved and anyone mentioned in the report, as well as the content of the report itself.
The service does not include tracking logs in order to prevent the possible identification of the reporter who wishes to remain anonymous.
For more information on how it works, please see the instructions.


Upon registration of the report, the service will issue the reporter with a unique 16-digit identification code (report receipt), which is necessary for subsequent access to the report and possible interaction with the manager.
Reports must be made in good faith and must be substantiated with information that is as precise as possible so as to be easily verifiable, they are taken over by a specially trained manager and are treated with the utmost discretion and confidentiality to protect the reporter from any risk of retaliation or repercussion.

Acknowledgement of receipt will be given to the reporter through the portal within 7 days from the date the report is sent.
Further information will follow within 3 months at the latest, again through the portal, until the investigation is completed.


No retaliation or discrimination, direct or indirect, may be suffered by anyone who has made a report in good faith. In accordance with the legislation, sanctions are provided for those who breach the measures for the protection of the whistleblower.

It should be noted that in the event of reports made with malice or gross negligence or which prove to be false, unfounded, defamatory or in any case made with the sole purpose of damaging the Company, the person reported or the persons concerned by the report, the entity may take the appropriate steps, including legal action.


All reports are strictly confidential. Any personal data contained in the report will be processed in compliance with the rules for the protection of personal data and with the GDPR Policy adopted by the Company.


For further information on the procedures and management of whistleblowing, please refer to the Whistleblowing protocol that can be downloaded here.
Please see the following link to send a report: