Privacy
iWhistle is our whistleblowing system. Employees, customers, business partners or other whistleblowers can use iWhistle to report suspected violations of laws and internal rules to the internal reporting office. iWhistle is part of our compliance management system.
Who is responsible for data processing?
Responsible for the processing of your personal data is:
ecovium Holding GmbH
Justus-von-Liebig-Strasse 3
31535 Neustadt
GERMANY
Phone: +49 211 8492 0
Mail: privacy@ecovium.com
What data is processed?
The use of iWhistle is on a voluntary basis. In the case of tips, the following personal data is processed
a) whistleblower: name (if you disclose your identity), contact details (if you provide them).
b) persons affected by incidents: First name and surname, information about incidents and suspicions of violations of laws and regulations
c) Witnesses and/or third parties named in the notice (e.g. colleagues, customers, suppliers or business partners): first and last name, contact details.
What do we process your data for and on what legal basis?
The above-mentioned data are processed for the purpose of uncovering and preventing serious wrongdoing and avoiding and averting particularly drastic or existence-threatening legal consequences and damages both for our organisation (criminal prosecution, claims for damages, damage to our image, supervisory measures) and for our employees. The legal basis for the processing is a legal obligation pursuant to Art. 6 para 1 lit c DSGVO to comply with the requirements under the EU Whistleblower Directive of 23.10.2019 (EU 2019/1937) as well as the national implementing laws in this regard.
Who receives my data?
As part of the audits, investigations and remedial actions to be taken, it may be necessary to share information about a reported incident with external advisors (e.g. legal advisors) or the relevant authorities. iWhistle is operated by the specialised software service provider iComply GmbH, Große Langgasse 1a, 55116 Mainz, Germany, on our behalf.
What data protection rights do you have?
You have the right to request information free of charge about the personal data stored about you, its origin and recipient and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate grounds arising from your particular situation (right of objection). In addition, you have the right to correct incorrect personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to data portability. You can contact us at any time about this and other questions on the subject of personal data. Finally, you have the option of lodging a complaint with the supervisory authority if you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way.
How long will personal data be stored?
Personal data is stored for as long as clarification and final assessment requires or as required by law. Afterwards, this data will be deleted in accordance with the legal requirements. If a tip proves to be unfounded, the tip together with the personal data it contains will be deleted immediately. The tips and reports are regularly deleted after 6 months. For documentation purposes, a final assessment is also stored.
Data protection officer
We have appointed an external data protection officer:
Stefan Pietsch
Reachable via:
Pietsch IT GmbH
Wilhelmshöher Street 1, 34590 Wabern, Germany
Phone: 05683-923440
Mail: datenschutz@pietsch-it.de
Internet: www.pietsch-it.de
Who is responsible for data processing?
Responsible for the processing of your personal data is:
ecovium Holding GmbH
Justus-von-Liebig-Strasse 3
31535 Neustadt
GERMANY
Phone: +49 211 8492 0
Mail: privacy@ecovium.com
What data is processed?
The use of iWhistle is on a voluntary basis. In the case of tips, the following personal data is processed
a) whistleblower: name (if you disclose your identity), contact details (if you provide them).
b) persons affected by incidents: First name and surname, information about incidents and suspicions of violations of laws and regulations
c) Witnesses and/or third parties named in the notice (e.g. colleagues, customers, suppliers or business partners): first and last name, contact details.
What do we process your data for and on what legal basis?
The above-mentioned data are processed for the purpose of uncovering and preventing serious wrongdoing and avoiding and averting particularly drastic or existence-threatening legal consequences and damages both for our organisation (criminal prosecution, claims for damages, damage to our image, supervisory measures) and for our employees. The legal basis for the processing is a legal obligation pursuant to Art. 6 para 1 lit c DSGVO to comply with the requirements under the EU Whistleblower Directive of 23.10.2019 (EU 2019/1937) as well as the national implementing laws in this regard.
Who receives my data?
As part of the audits, investigations and remedial actions to be taken, it may be necessary to share information about a reported incident with external advisors (e.g. legal advisors) or the relevant authorities. iWhistle is operated by the specialised software service provider iComply GmbH, Große Langgasse 1a, 55116 Mainz, Germany, on our behalf.
What data protection rights do you have?
You have the right to request information free of charge about the personal data stored about you, its origin and recipient and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate grounds arising from your particular situation (right of objection). In addition, you have the right to correct incorrect personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to data portability. You can contact us at any time about this and other questions on the subject of personal data. Finally, you have the option of lodging a complaint with the supervisory authority if you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way.
How long will personal data be stored?
Personal data is stored for as long as clarification and final assessment requires or as required by law. Afterwards, this data will be deleted in accordance with the legal requirements. If a tip proves to be unfounded, the tip together with the personal data it contains will be deleted immediately. The tips and reports are regularly deleted after 6 months. For documentation purposes, a final assessment is also stored.
Data protection officer
We have appointed an external data protection officer:
Stefan Pietsch
Reachable via:
Pietsch IT GmbH
Wilhelmshöher Street 1, 34590 Wabern, Germany
Phone: 05683-923440
Mail: datenschutz@pietsch-it.de
Internet: www.pietsch-it.de