Privacy

Note on data protection

Employees, customers or business partners of the company can use "Hinweisgeberexperte.de" to report violations of compliance regulations, such as antitrust or corruption law in particular ("Compliance" reporting channel), as well as certain violations of data protection regulations ("Data protection" reporting channel) or human rights ("Human rights" reporting channel).


The three systems for submitting reports are strictly separated. The "Compliance" reporting channel is operated by the company's Corporate Compliance department and only employees of this department have access to the reports. The "Data Protection" reporting channel is provided by the company's Data Protection department and only this department has access to the reports received via this channel. The "Human Rights" reporting channel is operated by the company's Human Rights department and only employees of this department have access to this reporting channel. Information is only exchanged between the departments if this is exceptionally necessary to process a specific case. The infrastructure of the system, including websites and database, is operated by the service provider iComply GmbH, based in 55116 Mainz, Große Langgasse 1A. iComply GmbH is contractually obliged to maintain strict confidentiality and to comply with all data protection requirements.


What personal data and information is collected and processed?

When reporting violations via "iWhistle", personal data is collected and processed: 

• of the person submitting a report (e.g. name, contact details) (optional/voluntary!) and
• the persons affected by an incident (e.g. description of the actions of the persons affected)

which are entered in the respective reporting form or transmitted via the protected mailbox, are collected and processed. The data is processed by the responsible department in order to review the reported incidents, initiate and conduct investigations and, if necessary, take remedial action.


As part of the checks, investigations and remedial measures to be taken, it may be necessary to pass on information about a reported incident to employees of other departments such as the HR department or to the management of the company, other companies, external advisors (e.g. legal advisors) or the competent authorities. We may also be obliged to report a reported incident to the competent authorities and the persons concerned.


How long will the personal data be stored?

The personal data and information you provide will be stored for as long as is necessary to process the report and, if applicable, to initiate sanctions or as long as the data must be stored by law. If a report proves to be unfounded, the report and the personal data it contains will be deleted immediately.