Privacy
iWhistle is our whistleblowing system. Employees, customers, business partners or other partners can use iWhistle to report suspected violations of laws and internal rules to the internal compliance team. iWhistle is part of our compliance management system.
Who is responsible for data processing?
The person responsible for the processing of your personal data is (hereinafter also Organization):
Döhler GmbH, Riedstraße 7-9, 64295 Darmstadt.
What data is processed?
The use of iWhistle is on a voluntary basis. In the case of reports, the following personal data is processed
Whistleblower: name (if you disclose your identity), contact details (if you provide them).
Persons affected by incidents: First and last name, information about incidents and suspected violations of laws and regulations
Witnesses and/or third parties named in the notice (e.g., customers, suppliers, colleagues or business partners): first and last name, contact information
For what and on what legal basis do we process your data?
The above-mentioned data is processed for the purpose of uncovering and preventing serious wrongdoing, both for our organization (criminal prosecution, claims for damages, damage to our image, supervisory measures) and for our employees. The legal basis for the processing is a legal obligation pursuant to Art. 6 DSGVO to comply with the requirements under the EU Whistleblower Directive of 23.10.2019 (EU 2019/1937) and the national implementing laws in this regard.
Who receives my data?
iWhistle is operated by the specialized software service provider iComply GmbH, Große Langgasse 1a, DE-55116 Mainz, on our behalf.
As part of the audits, investigations and remedial actions to be taken, it may be necessary to transfer information about a reported incident to external advisors (e.g. legal advisors) or to public authorities.
What data protection rights do you have?
You have the right, upon request and free of charge, to receive information about the personal data stored about you, its origin and recipient and the purpose of data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate grounds arising from your particular situation (right of objection). In addition, you have the right to correct incorrect personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to data portability. In this regard, as well as other questions on the subject of personal data, you can contact us at any time. Finally, you have the option of filing a complaint with the supervisory authority if you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way.
How long will personal data be stored?
Personal data will be stored for as long as clarification and final assessment require or this is required by law. Afterwards, this data is deleted in accordance with the legal requirements. If a report proves to be unfounded, the report together with the personal data it contains will be deleted immediately. Reports are regularly deleted after 6 months. For documentation purposes, a final assessment is also stored.
Who is responsible for data processing?
The person responsible for the processing of your personal data is (hereinafter also Organization):
Döhler GmbH, Riedstraße 7-9, 64295 Darmstadt.
What data is processed?
The use of iWhistle is on a voluntary basis. In the case of reports, the following personal data is processed
Whistleblower: name (if you disclose your identity), contact details (if you provide them).
Persons affected by incidents: First and last name, information about incidents and suspected violations of laws and regulations
Witnesses and/or third parties named in the notice (e.g., customers, suppliers, colleagues or business partners): first and last name, contact information
For what and on what legal basis do we process your data?
The above-mentioned data is processed for the purpose of uncovering and preventing serious wrongdoing, both for our organization (criminal prosecution, claims for damages, damage to our image, supervisory measures) and for our employees. The legal basis for the processing is a legal obligation pursuant to Art. 6 DSGVO to comply with the requirements under the EU Whistleblower Directive of 23.10.2019 (EU 2019/1937) and the national implementing laws in this regard.
Who receives my data?
iWhistle is operated by the specialized software service provider iComply GmbH, Große Langgasse 1a, DE-55116 Mainz, on our behalf.
As part of the audits, investigations and remedial actions to be taken, it may be necessary to transfer information about a reported incident to external advisors (e.g. legal advisors) or to public authorities.
What data protection rights do you have?
You have the right, upon request and free of charge, to receive information about the personal data stored about you, its origin and recipient and the purpose of data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate grounds arising from your particular situation (right of objection). In addition, you have the right to correct incorrect personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to data portability. In this regard, as well as other questions on the subject of personal data, you can contact us at any time. Finally, you have the option of filing a complaint with the supervisory authority if you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way.
How long will personal data be stored?
Personal data will be stored for as long as clarification and final assessment require or this is required by law. Afterwards, this data is deleted in accordance with the legal requirements. If a report proves to be unfounded, the report together with the personal data it contains will be deleted immediately. Reports are regularly deleted after 6 months. For documentation purposes, a final assessment is also stored.