Privacy
1 Purpose of data processing
1.1 In accordance with our obligation under the Whistleblower Protection Act (HinSchG), we have established a digital internal reporting office. The internal reporting office is part of our compliance management system.
1.2 Employees, customers, business partners or other persons providing information can use it to report suspected violations of laws and internal rules securely and confidentially. This is intended to promote the detection and prevention of significant breaches of rules and to avert considerable risks and damage.
2 Responsibility
2.1 The person responsible for the processing of your personal data is (hereinafter also organisation):
Location Berlin
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Oliver Kispert, LL.M.
Taubenstraße 20–22, 10117 Berlin, Germany
Phone: +49 30 88 00 783–0
Fax: +49 30 88 00 783–99
Mail: berlin@bskp.de
Location Chemnitz
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Bernd Morgenroth
Uhlichstraße 13, 09112 Chemnitz, Germany
Phone: +49 371 836524–0
Fax: +49 371 836524–19
Mail: chemnitz@bskp.de
Location Dortmund
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Can Christopher Senuysal
Weißenburger Straße 37, 44135 Dortmund, Germany
Phone: +49 231 477 0427
Fax: +49 231 477 0428
Mail: dortmund@bskp.de
Location Dresden
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Sebastian Kaufmann
Fetscherstraße 29, 01307 Dresden
Phone: +49 351 318 90–0
Fax: +49 351 318 90–99
Mail: dresden@bskp.de
Location Frankfurt am Main
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Sylvia Klapschus
Paul-Gerhardt-Ring 32, 60528 Frankfurt am Main, Germany
Phone: +49 69 96 78 08–0
Fax: +49 69 96 78 08–26
Mail: frankfurt@bskp.de
Location Freiberg
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Sven Peitzsch
Kaufhausgasse 3, 09599 Freiberg, Germany
Phone: +49 3731 26 60–0
Fax: +49 3731 26 60–60
Mail: freiberg@bskp.de
Location Friedrichshafen
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Markus Fröhlich
Otto-Lilienthal-Straße 6, 88046 Friedrichshafen, Germany
Phone: +49 7541 7008–70
Tel.: +49 7541 7008–78
Mail: friedrichshafen@bskp.de
Location Heilbronn
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Tax Consultant Hermann Hess
Moltkestraße 6–8, 74072 Heilbronn, Germany
Phone: +49 7131 59 76–0
Fax: +49 7131 59 76–18
Mail: heilbronn@bskp.de
Location Ludwigsburg
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Tax Consultant Mark Lehmann
Alleenstraße 6, 71638 Ludwigsburg, Germany
Phone: +49 7141 643 84–0
Fax: +49 7141 643 84–66
Mail: ludwigsburg@bskp.de
Location Magdeburg
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Tax Consultant Jens Vogler
Hegelstraße 39, 39104 Magdeburg, Germany
Phone: +49 391 53 56 78–0
Fax: +49 391 53 56 78–8
Mail: magdeburg@bskp.de
Location Riesa
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Lawyer Sebastian Lohse
Hauptstraße 44, 01589 Riesa, Germany
Phone: +49 3525 50 32–0
Fax: +49 3525 50 32–99
Mail: riesa@bskp.de
Location Stuttgart
Dr. Broll · Schmitt · Kaufmann & Partner
Steuerberater · Wirtschaftsprüfer · Rechtsanwälte
Tax Consultant Ursula Kerstin Metter
Kleiner Schlossplatz 13–15, 70173 Stuttgart, Germany
Phone: +49 711 722 33 96–0
Fax: +49 711 722 33 96–6
E‑Mail: stuttgart@bskp.de
2.2 As part of the processing of notices and follow-up measures to be taken, it may be necessary to provide information on a reported incident to legal advisors or competent authorities.
2.3 If you have any questions regarding data protection, please contact our data protection officer Wolfgang Matzke, KLW GmbH, Parkweg 4, 74360 Ilsfeld at datenschutz@klw.de or phone +49 7062 915910.
3 Technical Infrastructure
3.1 The internal reporting office is operated with the whistleblower system software AdvoWhistle of the technical service provider iComply GmbH, Große Langgasse 1A, 55116 Mainz, Germany.
3.2 Personal data and information entered into the whistleblower system will be stored in a database operated by the technical service provider in an ISO/IEC 27001 certified data centre. Access to the data is only possible for expressly authorised processors. End-to-end encryption of all data, multi-level password protection, technical and organisational measures and regular certification ensure that technical service providers, the data centre operator and other third parties have no access to the data.
4 Legal basis
4.1 The legal basis for the processing of information that falls within the scope of the Whistleblower Protection Act is the legal obligation pursuant to Art. 6 para. 1 c) DSGVO in conjunction with Section 10 of the Whistleblower Protection Act (HinSchG).
4.2 The legal basis for the processing of reports relating to breaches of internal rules is the overriding legitimate interest in the detection and prevention of material breaches of rules and the associated prevention of risks and damage pursuant to Art. 6 (1) f) DSGVO.
5 Use of the reporting portal
5.1 The use of AdvoWhistle is on a voluntary basis. When submitting a report, AdvoWhistle collects the following personal data and information:
- Person providing information: name (if you disclose your identity), contact details (if you provide them)
- Persons affected by incidents: First name and surname, information about incidents and suspicions of violations of laws and regulations
- Witnesses and/or third parties named in the notice (e.g. customers, suppliers, colleagues or business partners): first and last name, contact details.
5.2 File attachments may be sent when submitting a report and sending supplements. If anonymity is to be maintained, hidden personal data must be removed before sending. If this is not possible, only the text from these files can be copied into the digital report form, or printouts of these files can be sent to the postal address of the persons responsible.
6 Confidentiality
Incoming reports are received by a small group of expressly authorised persons and are always treated confidentially. The persons in charge examine the facts and, if necessary, carry out a further case-related clarification of the facts. Any person who has access to the data is obliged to maintain confidentiality.
7 Rights of data subjects
7.1 Persons whose personal data are processed (data subjects) have the right to receive, upon request and free of charge, information about the personal data stored about them, their origin and recipients and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate grounds arising from your particular situation (right of objection).
7.2 In addition, data subjects have the right to correct inaccurate personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to data portability.
7.3 Data subjects also have the right to complain to a supervisory authority. Data subjects may contact the supervisory authority of their usual place of residence or workplace for this purpose.
8 Retention period of data
The documentation of reports and the personal data contained therein are generally deleted three years after the conclusion of the procedure. The documentation may be kept longer in individual cases in order to fulfil the requirements under the Whistleblower Protection Act (HinSchG) or other legal provisions, as long as this is necessary and proportionate. A final assessment is also stored for documentation purposes.