Whistleblowers

The document applies to those who use the internal reporting procedure for breaches of the law and others involved in the process in connection with such reporting.

Data controller

The controller of your personal data is Future Processing S.A.. with the registered office in Gliwice, ul. Bojkowska 37A, 44-100 Gliwice, recorded in the Register of Entrepreneurs maintained by the District Court in Gliwice, X Commercial Division of the National Court Register under number KRS 0000817352, Tax ID No. (NIP) 634-25-32-128.

Data Protection Officer

You can contact our Data Protection Officer by sending an e-mail to the following address: gdpr@future-processing.com.

Purposes and legal basis of the data processing

PURPOSE OF PROCESSING

LEGAL BASIS

Analysis of the report of breach of law and undertaking follow-up actions

Art. 6 Paragraph 1 point c) GDPR Compliance with a legal obligation

Record keeping of the reports

Art. 6 Paragraph 1 point c) GDPR Compliance with a legal obligation

Establishment, exercise or defence of legal claims

Art. 6 Paragraph 1 point f) GDPRLegitimate interest (defence of legal claims against controller)

The scope of data

In connection with analyzing your request and conducting follow-up actions, we will process your identification data (at least name and email) and any other data indicated by you or others, in relation to your report and in the course of collecting them as part of follow-up actions. The scope may vary depending on the specific incident.

Recipients of the personal data

With your consent, we may pass on your data to witnesses or other persons associated with the report, if it is essential to clarify the report. If you do not agree to this, we will keep your data confidential.

If in the course of analyzing the report we come to the conclusion that the case should be reported to state authorities, your data, along with the details of the case, will also be passed to the appropriate authority (e.g. police).

Period of data processing

We record each notification in the internal reports register, and personal data and other information will be kept for a period of 3 years after the end of the calendar year in which the which the follow-up activities were completed, or after the completion of the proceedings initiated by these activities.

If we determine that the collected data is not relevant to the analysis of a particular notification, it will be deleted within 14 days.

Your rights

Due to the fact that we process your personal data you can at any time:

  • request access to your data and to rectify it
  • lodge a complaint with the competent supervisory authority if you think that we are processing your personal data with a violation of applicable regulations.

Necessity to provide personal data

Providing your personal data is voluntary but necessary to analyze the circumstances of your notification and undertake follow-up actions.

Automated decision-making

We will not use your data for automated decision-making, including profiling.

More information

Procedure for internal reporting of breaches of law is available on our website at https://www.future-processing.com/whistleblowers/.