Privacy
Information on data protection
Employees, customers or business partners of the SBS Ecoclean Group can use “iWhistle” to report violations of compliance regulations, in particular antitrust or corruption law infringements (“Compliance” reporting channel), as well as certain violations of data protection regulations (“Data Protection” reporting channel) or human rights (“Human Rights” reporting channel).
Only the Corporate Compliance Department of the SBS Ecoclean Group has access to the reports.
Employees, customers or business partners of the SBS Ecoclean Group can use “iWhistle” to report violations of compliance regulations, in particular antitrust or corruption law infringements (“Compliance” reporting channel), as well as certain violations of data protection regulations (“Data Protection” reporting channel) or human rights (“Human Rights” reporting channel).
Only the Corporate Compliance Department of the SBS Ecoclean Group has access to the reports.
The infrastructure of the system, including websites and database, is operated by the service company iComply GmbH, located in 55116 Mainz, Große Langgasse 1A. iComply GmbH is contractually bound to maintain strict confidentiality and to comply with all data protection requirements.
Which personal data and information are collected and processed?
When reporting violations via “iWhistle”, personal data about the following persons are collected and processed:
Which personal data and information are collected and processed?
When reporting violations via “iWhistle”, personal data about the following persons are collected and processed:
· the person submitting the report (e.g. name, contact details) (optional/voluntary!), and
· the persons affected by the incident (e.g. description of the actions of affected persons),
which are entered in the respective reporting form or transmitted via the protected mailbox. The data is processed by the department concerned in order to review the reported incidents, initiate and conduct investigations, and take remedial action where required.
As part of the reviews, investigations and necessary remedial actions, information about a reported incident may need to be shared with employees in other departments, such as managerial staff, external advisors (e.g., legal counsel) or appropriate authorities. We may also be required to report a notified incident to the appropriate authorities and the individuals concerned.
How long will personal data be stored?
The personal data and information you provide will be retained for as long as knowledge of them is required to process the report and, if necessary, to initiate sanctions, or for as long as the data must be retained by law.
If a report proves to be unfounded, the report will be deleted immediately together with the personal data contained therein.