Privacy

1. NAME AND CONTACT DATA OF THE PERSON RESPONSIBLE FOR THE PROCESSING AND THE DATA PROTECTION OFFICER:
 
If you choose the option of submitting your report to the external ombudsman's office, the data will be transmitted directly there. In this case, the responsible body in terms of data protection law is: 

PARK | Wirtschaftsstrafrecht PartG mbB, Rheinlanddamm 199, 44139 Dortmund, Germany 
E-mail: kanzlei@park-wirtschaftsstrafrecht.de 
Fon: +49 231 9580680 
Fax: +49 231 95806899 
represented by: Prof. Dr. Tido Park, Dr. Tobias Eggers, Ulf Reuker LL.M. and Dr. Malte Cordes 

The company data protection officer of PARK | Wirtschaftsstrafrecht can be reached at the above address or at kanzlei@park-wirtschaftsstrafrecht.de.   
If you send your report to the company, the responsible body in the sense of data protection law is 

C.D. Wälzholz GmbH & Co. KG, Feldmühlenstr. 55, 58093 Hagen, Germany 
E-mail: info@waelzholz.com 
Fon: +49 2331 964-0 
Fax: +49 2331 964-2100 

You can reach the data protection officer at the following contact details: E-mail: dataprotection@waelzholz.com
 

2. TYPE OF PERSONAL DATA AND CATEGORIES OF DATA SUBJECTS:

If you opt out of submitting a tip anonymously and opt in to submitting a tip confidentially, your first name, surname and email address will be collected when you submit your tip. In addition, data is processed when the whistleblower submits a report on the whistleblower portal. Within the whistleblowing process (whistleblowing text), the processing of special categories of personal data within the meaning of Article 9 of the General Data Protection Regulation cannot be excluded.

The categories of data subjects affected by the processing (may) include:

·        Employees of the principal 
·        Business partners of the principal
·        Customers of the principal
·        Whistleblowers 
·        Persons affected by the information.


 3. PURPOSE OF USE OF PERSONAL DATA AND LEGAL BASIS

The information you provide in the whistleblower system will be used by us for the purpose of verifying and documenting the reports. The data will only be passed on to third parties by us (in particular to our client) with your express consent. After the data has been passed on to our client, it will also be used there for the purpose of checking and documenting the reports, for internal investigations (including passing on to external lawyers, auditors or other professionals who are bound to secrecy by professional law as well as to affected group companies) and, if necessary, for passing on to government agencies (such as the police, public prosecutor's office or courts). All whistleblowers are assured of confidential processing.

Your personal data will be processed on the basis of the consent you gave when reporting via the PARK. Whistleblower Solution (Article 6(1)(a) of the General Data Protection Regulation). Furthermore, your and other personal data will be processed insofar as this is necessary for the fulfilment of legal obligations (Article 6(1)(c) of the General Data Protection Regulation). This includes, in particular, notifications of facts relevant under criminal law, competition law and labour law. A legal obligation to set up and operate a whistleblower system also follows from Sections 12 et seq. of the German Whistleblower Protection Act. Whistleblower Protection Act. Furthermore, the processing of personal data is based on the legitimate interest in the detection and prevention of wrongdoing and the associated prevention of damage and liability risks of our client pursuant to Article 6(1) page 1 letter f of the General Data Protection Regulation. Finally, data processing may be based on Section 26(1) of the Federal Data Protection Act to the extent that it serves to uncover criminal offences in the employment relationship.


4. DURATION OF STORAGE

Personal data will only be stored for as long as is necessary for the processing of the notice or if there is a legitimate interest in storing the personal data. Storage may take place beyond this if this has been provided for by the European or national legislator for the fulfilment of legal obligations, such as retention obligations. Subsequently, all personal data will be deleted. The duration of storage depends in particular on the severity of the suspicion and the reported possible breach of duty. 

 
5. DATA SUBJECT RIGHTS

According to European data protection law, you and the persons named in the notice have the right to information, correction, deletion, restriction of processing and, in certain cases, the right to data transfer.

You may also object to the processing of your personal data on grounds relating to your particular situation, provided that the data processing is carried out in the public interest or on the basis of a balance of interests. The objection can be made form-free and should, if possible, be sent to the contact details listed in this data protection notice.

If the right of objection is exercised, the extent to which the stored data is still required, in particular for the processing of a notice, will be checked immediately. Data that is no longer required will be deleted immediately.

You can also revoke your consent at any time. In this context, please note the information under "Purpose of use regarding personal data and legal basis".

You also have the right to lodge a complaint with a competent supervisory authority.