Whistleblower

The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to your application, the controller is

isel Germany GmbH
Bürgermeister-Ebert-Straße 40
36124 Eichenzell
Germany

Email: info[at]isel.com
Phone: +49 6659 / 981-0
Fax: +49 6659 / 981-776

You can find further information about our company, details of the authorised representatives and other contact options in the legal notice on our website:

https://www.isel.com/impressum

The following data is processed as part of the whistleblower system:
Information about the persons affected by the report (e.g. first name, surname, title, contact details, position and employment details), information about the (alleged) breaches of conduct and the relevant facts, if applicable, information about the whistleblower = the reporting person (e.g. first name, surname, contact details such as e-mail address). Information about the whistleblower = the reporting person (e.g. first name, surname, contact details such as e-mail address).
As the reporting procedure of isel Germany GmbH stipulates that reports can also be made anonymously, no personal data about the whistleblower will be collected unless the whistleblower states otherwise. Otherwise, personal data such as the name of the reporting person, their contact details and, if applicable, the circumstances of their observation may be considered.

The purpose of data processing as part of the whistleblower system is to receive and clarify serious suspicions of breaches of regulations at isel Germany GmbH, in particular criminal offences in the area of white-collar crime and corruption.

No automated decision-making pursuant to Art. 22 GDPR takes place as part of the whistleblower system.

Personal data of the whistleblower is generally processed on the basis of Art. 6 para. 1 subpara. 1 lit. c GDPR inconjunction with Section 12 HinSchG.

In other cases, the processing of personal data in the whistleblower system is carried out on the basis of Art. 6 para. 1 subpara. 1 lit. f GDPR to safeguard the overriding legitimate interest of isel Germany GmbH. This legitimate interest lies in preventing and combating corruption and in processing serious suspected cases of other rule violations in connection with isel Germany GmbH and protecting isel Germany GmbH and its employees from possible damage. Since reporting violations helps to avoid legal consequences such as criminal prosecution, claims for damages and immense damage to image, the interests of the data subjects worthy of protection in the exclusion of processing or use do not prevail.

Personal data will be retained for the period necessary to clarify and finalise the assessment of the report. Once the investigation has been completed, the personal data is deleted within a reasonable period of time and in accordance with the legal requirements.

In accordance with Section 11 (5) HinSchG, the documentation on reports is deleted three years after the conclusion of the procedure. The documentation may be retained for longer in order to fulfil the requirements of this Act or other legal provisions as long as this is necessary and proportionate.

In the event of the initiation of legal and/or disciplinary proceedings, the data may be retained until the conclusion of the proceedings or until the expiry of the time limits for appeals.

Personal data in connection with unfounded reports will be deleted immediately.

isel Germany GmbH ensures that your personal data is only accessible to a limited number of authorised persons who need to know this data for the provision of the above-mentioned processing purposes.

If it should be necessary to clarify the facts of the case, personal data may be forwarded to individual, carefully selected persons of isel Germany GmbH or, if they are also affected by the facts in question, to subsidiaries of isel Germany GmbH to the extent necessary. Every person who receives access to the data is obliged to maintain confidentiality.

Your personal data will not be passed on or otherwise transferred to third parties unless this is necessary for the purposes of criminal prosecution. If required by law or orders from government bodies, personal data may be disclosed to them.

The data is processed in the online whistleblowing system "audatis MANAGER" of "audatis Services GmbH" (Luisenstraße 1, D-32052 Herford).

Technical and organisational measures are used to protect the personal data to be managed by using the whistleblowing system from unauthorised access, disclosure, misuse, manipulation, loss and destruction during its collection, processing and use. Service providers used are obliged to the same extent.

You have the right to information(Art. 15 GDPR) about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be

Furthermore, you have a right to rectification(Art. 16 GDPR) or erasure(Art. 17 GDPR) or to restriction(Art. 18 GDPR) of processing, insofar as you are legally entitled to do so.

YOU ALSO HAVE THE RIGHT TO OBJECT(ART. 21 GDPR) TO PROCESSING WITHIN THE SCOPE OF THE STATUTORY PROVISIONS. The same applies to the right to data portability(Art. 20 GDPR).

We have appointed a data protection officer in our company in accordance with Art. 37 GDPR. You can reach him under the following contact options

isel Germany GmbH

- To the data protection officer -

Bürgermeister-Ebert-Straße 40, D-36124 Eichenzell
Email: datenschutz[at]isel.com

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

We revise this data protection information in the event of changes in the processing procedure or other occasions that make this necessary. The current version can always be found on this website.

Status: 29/04/2024