Information Sheet according to Art. 13 and 14 DSGVO

A.      Name of Controller

Reporting office is UIMCert GmbH.

B.      Contact details controller

Otto-Hausmann-Ring 113, 42115 Wuppertal

C.     Contact details data protection official

datenschutz@uimcert.de

D.     Categories of personal data

Data of whistleblower, data of reported parties and data of third parties as well as description of reported violation and measures taken

E.      Purpose of data processing

Uncovering violations of legal requirements, also to avert damage to the company

F.      Legal basis for data processing

Processing of data by reporting office and investigating bodies pursuant to Article 6(1) lit. f DSGVO in conjunction with Articles 2, 8, 9, 16, 18 Whistleblower Directive (EU Directive 2019/1937).

Disclosure of identity outside legal necessity only with consent pursuant to Art. 6 (1) lit. a DSGVO

G.     For legitimate interest: legitimate interests of controller

Uncovering violations of legal requirements, also to avert damage to the company

H.     Recipients/categories of recipients

Company affected by the report;

Law enforcement authorities, if applicable

I.        Possible third country transfer

./.

J.      Adequate level of data protection in the case of third country transfers

./.

K.      Retention period

3 years from claim or knowledge of the violation, if the report falls within the scope of the whistleblower reporting procedure (otherwise usually 2 months)

L.      Necessity to provide the personal data (where data are collected from the data subjects)

   by consent

   required by law

   required by contract

   required for the conclusion of a contract

   Obligation to provide the data.

In case of non-provision, these consequences are possible:
[bitte ausfüllen]

A.      Origin of the data (where personal data have not been collected from the data subjects)

Whistleblower, data collected in the course of a further research

B.      Automated decision making

   no              yes