Whistleblowing
1. information obligations according to Art. 13 and 14 of the EU GDPR: Whistleblower system
The access link to the whistleblower system can be found below under point 2
1.1 Who is responsible for data processing?
The controller within the meaning of data protection law is:
BUZIL-WERK Wagner GmbH & Co. KG
Fraunhoferstraße 17
87700 Memmingen
Phone: +498331 930 0
Email: info@buzil.de
Contact details of the data protection officer:
walliser consulting gmbh
datenschutz@buzil.de
+49 (0) 7121 / 69 702-26
1.2 Which of your data do we process?
The following data is processed as part of the whistleblower system: Details of the accused person, in particular surname, first name, title, contact details, position and employment details, details of the alleged breaches of conduct and the relevant facts. As the reporting procedure stipulates that reports can be made anonymously, no personal data is collected unless the whistleblower states otherwise. Otherwise, personal data such as the name of the reporting person, their contact details and, if applicable, the circumstances of their observation may be considered.
1.3 What are the purposes of data processing?
The purpose of data processing in the context of the whistleblower system is to receive and clarify serious suspicions of breaches of regulations, in particular criminal offences in the area of white-collar crime and corruption.
1.4 What is the legal basis for data processing?
As a rule, the whistleblower's personal data is only processed with their consent (Art. 6 para. 1 lit. a GDPR). In other cases, the processing of personal data in the whistleblower system is based on Art. 6 para. 1 lit. f to protect the overriding legitimate interest of the controller. This legitimate interest lies in preventing and combating corruption and in processing serious suspected cases of other breaches of regulations and protecting the controller and its employees from potential damage. As reporting violations helps to avoid legal consequences such as criminal prosecution, claims for damages and immense damage to the company's image, the interests of the data subjects worthy of protection in the exclusion of processing or use do not outweigh these interests.
1.5 How long will the data be stored?
Personal data will be stored for as long as is necessary to clarify and conclusively assess the report. Once the investigation has been completed, the personal data will be deleted in accordance with legal requirements. In the event that judicial and/or disciplinary proceedings are initiated, the data may be retained until the conclusion of the proceedings or until the expiry of the time limits for legal remedies. Personal data in connection with unfounded reports will be deleted immediately.
1.6 To which recipients is the data passed on?
The controller ensures that personal data is only accessible to a limited number of authorised persons who need to know this data in order to provide the above-mentioned processing purposes. If necessary to clarify the matter, personal data may be forwarded to individual, carefully selected persons or to an (also external) ombudsman's office of the controller to the extent necessary. Every person who receives access to the data is obliged to maintain confidentiality. Your personal data will not be passed on or otherwise transferred to third parties unless this is necessary for the purposes of criminal prosecution. Personal data may be disclosed to third parties if this is required by law or by order of government bodies.
1.7 Where is the data processed?
Your personal data is processed by us exclusively in Germany. The controller uses technical and organisational measures to protect the personal data to be managed through the use of the whistleblowing system from unauthorised access, disclosure, misuse, manipulation, loss and destruction during its collection, processing and use. The service providers used by the controller are obliged to the same extent.
1.8 Your rights as a data subject
As a data subject, you have the right to information about the personal data stored about you. The identity of the whistleblower is generally excluded from this right to information. If the exercise of this right jeopardises the clarification of the facts or the securing of necessary evidence, the controller is permitted to comply with the right at a later date. If the legal requirements are met, you also have the right to have incorrect data corrected, amended, blocked or deleted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority for data protection at any time. The data subject can address enquiries regarding the exercise of data subject rights in accordance with Art. 15-21 GDPR to one of the responsible offices
Contact person of the controller:
Dr Daniel Schühle
daniel.schuehle@buzil.de
1.9 Where can you lodge a complaint?
You have the option of lodging a complaint with the data protection officer named above or with a data protection supervisory authority. The data protection supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
House address
Promenade 18, 91522 Ansbach
Telephone 0981 / 180 093 - 0
E-mail: poststelle@lda.bayern.de
2. anonymous reporting option
To ensure that the whistleblowing system cannot be traced, you will not find a clickable link to the page here, but only the Internet address. Please copy this link
"https://wbs.sycobase.app/case?refId=JQY6IBP6FOSIV3OXQQ63DZM4QB4FKLHW"
completely into the address line of your private browser and use one of the following search terms to find our company: "BUZIL, BUZIL-WERK Wagner GmbH & Co. KG, BUZIL-WERK Wagner, BUZIL-WERK"