Privacy policy in the whistleblowing system of the G. Englmayer Group
1. responsibility
Responsibility for the whistleblowing system within the meaning of the GDPR lies with G. Englmayer, Spedition GmbH and its subsidiaries (hereinafter also referred to as the Group). All locations and contact details can be found at: https://www.englmayer.net/de/unternehmen/standorte/
2 Purpose of the whistleblowing system and legal basis
The purpose of the whistleblowing system is to enable the confidential receipt and processing of (suspected) grievances/legal violations within the Englmayer Group. Data processing as part of the whistleblowing system is based on the legitimate interest of the Englmayer Group in the detection / prevention of grievances / legal violations within the meaning of Art. 6 para. 1 lit. f GDPR. In addition, the EU Whistleblower Directive requires the establishment of an internal reporting channel. If a report concerns an employee in the group of companies, the processing also aims to prevent criminal offenses / violations of the law in connection with the employment relationship.
3. processing of your personal data
Use of the whistleblowing system is voluntary. If you submit a report, we will process the information provided:
You also have the option of transmitting files via the reporting channel. Please pay particular attention to the fact that these may contain hidden personal data.
The submitted data is stored with multi-level password protection and restricted to a narrow circle of authorized, non-instructed compliance employees (entire compliance committee) of the Group, who always treat the data confidentially in the course of clarifying the facts.
4. transmission and disclosure of your data
The persons accused in the report will only be informed about the allegations if there is an obligation under data protection law and if it is objectively clear that the provision of information can no longer compromise the investigation. Your identity as the reporting person will also be protected as far as possible and it will be ensured that no conclusions can be drawn about your identity.
If required for the processing / clarification of the report, data will be passed on to other employees of the group of companies or to external consultants (e.g. auditors, interpreters). The data will only ever be transmitted to persons who are absolutely necessary for the processing / clarification of the report. All persons who receive the data are obliged to maintain confidentiality. The transfer of data to authorities and courts is based on legal provisions or enforceable orders.
5. retention periods
The personal data will be stored until the report has been finally clarified or the storage is required by a justified interest of the group of companies / a legal requirement.
6. rights of data subjects
The notifying person and the persons named in the notification have the right to information, correction, deletion, restriction of processing and a right to object to the processing of their personal data. If you exercise your right to object, the stored data will be checked immediately and the data no longer required for processing the report will be deleted without delay.
You also have the right to lodge a complaint with the Austrian data protection authority (https://www.dsb.gv.at/).
7. contact
If you have any questions or wish to assert your rights, you can contact the Englmayer Group's data protection officer at datenschutz@at.englmayer.net.
Status: August 2023