PROTECTION OF PERSONAL DATA OF THE WHISTLEBLOWING CHANNEL
In accordance with current legislation on data protection, Regulation 2016/679, General Data Protection Regulation and Law no. 58/2019, of 8 August, that ensures the implementation in national law of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Data Controller of the complaints channel of all companies that make up the emeis iberia Group is, emeis iberia S. A.U. (hereinafter, emeis), with CIF A82571399, with registered office at Paseo del General Martínez Campos, 46, 7ª Planta, 28010 Madrid, Spain, and the contact address of the Data Protection Officer is: dpo-pt@emeis.com.
Personal data are processed by emeis to manage and process the complaints submitted through the Channel, for the purposes of detecting, investigating and evaluating possible breaches, in accordance with the procedure described in the internal regulations of the Whistleblowing Channel.
The legitimate basis for the processing for the purposes described is the fulfillment of a legal obligation applicable to the responsible party. The data may be transferred to the Courts and Tribunals, the Public Prosecutor's Office or the competent Public Administrations as a result of the criminal, disciplinary or sanctioning investigation that may be launched. emeis Group has contracted the professional reporting platform (SaaS Signalement.Net) with the company Valeur & Conformité SAS, based in France, which carries out international data transfers outside the EU. These transfers are carried out on the basis of standard contractual data protection clauses that guarantee a level of protection of your personal data equivalent to that provided in EU countries.
You may exercise your rights of access, rectification and deletion, as well as the other rights explained in the additional information, by writing to emeis at the address indicated in the heading or by sending your letter to the email address dpo-pt@emeis.com. In this regard, it should be noted that the informant's identity shall never be subject to the right of access to personal data and the possibility of communicating said identity is limited only to the judicial authority, the Public Prosecutor's Office or the competent administrative authority. In the event of any violation of your rights, you may file a complaint with the Portuguese Data Protection Agency (https://www.cnpd.pt/), under the terms indicated by the latter. For further information, please refer to the additional information in the Personal Data Protection section of the Procedure for collecting and managing reports
