Reporting portal under the Whistleblower Protection Act (HinSchG)

We operate a reporting portal in accordance with the Whistleblower Protection Act (HinSchG). For this purpose, we utilise a service provided by bbg bitbase group GmbH, Am Heilbrunnen 47, 72766 Reutlingen.

Pursuant to Section 8 HinSchG, we handle reports confidentially as a matter of principle. The purpose of the reporting portal under the Whistleblower Protection Act (HinSchG) is to check and document reports for internal investigation and, where necessary, to pass them on to the authorised bodies, in order to remedy unlawful conduct at the company pursuant to Section 2 HinSchG. Whistleblowers have the option of registering on our website for use of the whistleblower portal. For registration, login and contact, we process data that is automatically transmitted by the internet browser and personal data that you can provide as a whistleblower: access data, title (if provided), first name and last name (if provided), contact details (e-mail address, telephone number or postal address, if provided), personal data in the report, if applicable, and, in particular, breaches of conduct with corresponding facts.

You have the option of registering anonymously. In doing so, you will receive a unique identification code that gives you access to a closed data protection room. Here you have the opportunity to submit your report. It will not be passed on to third parties outside your company without your consent, unless required by law or order such as Section 9 HinSchG. The data can then be passed on to investigative authorities or courts. The legal basis for the data processing in accordance with the HinSchG is the legal obligation pursuant to Art. 6 para. 1 sentence 1 (a) - (c) GDPR in conjunction with Section 12 HinSchG. If you provide particularly sensitive data, such as about your health, sexuality, origin or criminal offences, Art. 9 and 10 GDPR must also be observed. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. According to Section 11 HinSchG, this is usually the case after three years. Other retention obligations based on contractual relationships and processing to fulfil contractual or legal obligations, such as six- or ten-year retention obligations under commercial and tax law, remain unaffected. For further information, in particular on your rights as a data subject, please refer to the general Data Privacy Policy of bbg bitbase group GmbH.