Data protection declaration whistleblower reporting point

Person responsible for data processing

The person responsible within the meaning of the GDPR is

Naturana Dölker GmbH & Co

Limited partnership

72810 Gomaringen

Germany

You can reach our data protection officer as follows: datenschutzanwalt@naturana.de

When you use our website, certain information is collected. In addition to these data protection information, the provisions of our general data protection declaration also apply. If you use one of the reporting channels we provide for whistleblower reports, the following special provisions also apply:

What types of personal data are processed?

The use of our reporting systems is voluntary. When you report through our channels provided, we collect personal data and information that you provide to us:

Data about the reporting process (such as the selected channel and time of the report),
Whistleblower data (name and contact information if you identify yourself or provide this information),
Professional data (position in the company, job title, professional contact information),
Contents of the report (details of the matter reported, possibly names and other personal data of people mentioned in the report).

For what purposes is personal data processed?

Your data will be processed in accordance with applicable laws for the following purposes:

Checking the validity of information (Art. 6 Para. 1 lit. f GDPR)
Fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR in conjunction with HinSchG)
Detection of misconduct (§ 26 para. 1 sentence 2 BDSG, Art. 6 para. 1 lit. c GDPR)
Exercise of rights (Art. 6 Para. 1 lit. f GDPR)
Prevention (Art. 6 Para. 1 lit. f GDPR)

Will your personal data be passed on to third parties?

We will only pass on your data to third parties as part of educational measures if this is legally justified or if we have obtained your consent to the data transfer. Possible recipients of the data in the context of educational measures can be:

Processors who are bound by instructions (Article 28 GDPR),
works councils,
Naturana Group companies,
Courts, authorities and other public institutions.

Will your personal data be transferred to third countries?

A transfer of your personal data to third countries or international organizations does not take place and is not planned.

How long is personal data stored?

The documentation of the individual reports will be deleted 3 years after the completion of the procedure in accordance with Section 11 Para. 5 HinSchG Whistleblower Protection Act. The documentation may be retained for a longer period in order to comply with the requirements of this Act or other legislation, as long as this is necessary and proportionate.

Rights of those affected

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 GDPR:

Right to information in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to deletion in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
Right to complain in accordance with Art. 77 GDPR.

The data protection supervisory authority responsible for NATURANA Dölker GmbH & Co Kommanditgesellschaft is:

The State Commissioner for Data Protection and Freedom of Information

House address:

Königstrasse 10 a

70173 Stuttgart

Tel.: 0711/615541-0

Fax: 0711/615541-15

Email: poststelle@lfdi.bwl.de

Postal address:

PO Box 10 29 32

70025 Stuttgart

https://www.baden-wuerttemberg.datenschutz.de