Information Sheet according to Art. 13 and 14 DSGVO Whistleblowing Reporting Channels

A.     Name of Controller Reporting office is UIMCert GmbH.
B.     Contact details controller Otto-Hausmann-Ring 113, 42115 Wuppertal
C.    Contact details data protection official datenschutz@uimcert.de
D.    Categories of personal data Data of whistleblower, data of reported parties and data of third parties as well as description of reported violation and measures taken
E.     Purpose of data processing Uncovering violations of legal requirements, also to avert damage to the company
F.     Legal basis for data processing Processing of data by reporting office and investigating bodies pursuant to Article 6(1) lit. f DSGVO in conjunction with Articles 2, 8, 9, 16, 18 Whistleblower Directive (EU Directive 2019/1937).

Disclosure of identity outside legal necessity only with consent pursuant to Art. 6 (1) lit. a DSGVO
G.    For legitimate interest: legitimate interests of controller Uncovering violations of legal requirements, also to avert damage to the company
H.    Recipients/categories of recipients Company affected by the report;

Law enforcement authorities, if applicable
I.      Possible third country transfer ./.
J.     Adequate level of data protection in the case of third country transfers ./.
K.     Retention period 3 years from claim or knowledge of the violation, if the report falls within the scope of the whistleblower reporting procedure (otherwise usually 2 months)
L.     Necessity to provide the personal data (where data are collected from the data subjects) by consent

required by law

required by contract

required for the conclusion of a contract

Obligation to provide the data.

In case of non-provision, these consequences are possible:
A.     Origin of the data (where personal data have not been collected from the data subjects) Whistleblower, data collected in the course of a further research
B.     Automated decision making no

yes

We hereby inform you that pursuant to Article 15 et seq. DSGVO, you have the right to obtain information about the personal data in question, as well as the right to rectification, erasure or restriction of processing, the right to object to processing and the right to data portability. You also have the right of complaint to a data protection supervisory authority pursuant to Article 77 GDPR if you consider that the processing of your personal data concerning infringes this Regulation. If the processing is based on your consent (cf. Art. 6(1) lit. a, Art. 9(2) lit. a DSGVO), you also have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.