privacy policy for whistleblowers according to Art. 13 GDPR.
Purposes of data processing:
We process your personal data for the purpose of detecting, evaluating and clarifying misconduct according to the Whistleblower Protection Act (HinSchG). When you submit a notification, you are free to choose whether to submit it by name or anonymously. Please note that we may have to disclose your name to the person you are accusing or to authorities due to legal requirements. If possible, please do not include sensitive personal data such as racial and ethnic origin, health data, political opinions, religious beliefs, trade union membership, health data or data on sexual life in your report.
Sofern Sie uns Daten per Kontakt-Formular senden, werden diese Daten im Zuge der Datensicherung auf unseren Servern gespeichert. Ihre Daten werden von uns ausschließlich zur Bearbeitung Ihres Anliegens verwendet. Ihre Daten werden streng vertraulich behandelt. Eine Weitergabe an Dritte erfolgt nicht.
Legal basis
We process your personal data pursuant to Art. 6 para. 1, lit. b GDPR in order to fulfill our obligations according to the Whistleblower Protection Act (HinSchG) by receiving information about malpractices via a technically implemented notification channel (by mail or telephone) in order to evaluate them and to fulfill our further obligations according to the HinSchG. You have the right to object to the processing of your personal data.
Recipient
We will keep information concerning you confidential where possible and permissible. Your information may be forwarded to the leadership of the company where defendants work for further investigation. We may also be required to inform the defendant who provided the information about him or her. Further recipients may be authorities and other bodies, insofar as this should be necessary for criminal prosecution or to protect legal interests.
Storage period
Personal data will be stored for as long as it is required for the above-mentioned purposes or for as long as required by legal retention periods (3 years).
Your rights as a data subject
As a data subject, you are entitled to the following rights, as long as the legal requirements are met:
- Right to information, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure, Art. 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to data portability, Art. 20 GDPR
- Right to object, Art. 21 GDPR
Insofar as the data processing is based on a consideration of legitimate interests, you have the right to object to this processing of the data. For this, there must be legitimate reasons arising from your particular situation. You also have the right to complain to the data protection supervisory authority about the data processing.
Person responsible for data processing
Responsible party:
Ratisbona Compliance GmbH
Trothengasse 5
93047 Regensburg
T +49 941 2060384-1
M info@ratisbona-compliance.de
All interested parties and visitors to our website can contact us regarding data protection issues at:
Nico Becker
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
T +49 941 2986930
F +49 941 29869316
M n.becker@projekt29.de
W www.projekt29.de
