Privacy Policy – Reporting Channel
Confidentiality and security are fundamental values of Process and Product Engineering – I-MAS, S.L. (I-MAS), Consequently, we are committed to ensuring the privacy of personal data belonging to our employees, clients, and suppliers at all times, and to refrain from collecting unnecessary information.
Below, we are providing you with all the necessary information about our Privacy Policy Regarding the personal data we collect, we will explain:
- Who is responsible for the processing of your data?
- What type of data do we handle?
- What is the purpose for which we are requesting your data?
- What is the justification for its treatment?
- For how long did we safeguard your data.
- To whom are your data being communicated?
- What are your rights?
Who is responsible for the processing of your data?
Company name: Process and Product Engineering – I-MAS, S.L.
NIF: ESB63729495
Address: C/ Castelló number 19, (08110) – Montcada i Reixac (Barcelona)
What types of data are being processed?
Through our Reporting Channel, we will address the following information:
- Identifying information: Name and surname (if provided by the complainant).
- Contact information: Email address
- Information regarding the reported incident
I-MAS will take all the necessary technical and organizational measures to ensure that the identity of the complainant cannot be disclosed or communicated to any third party, except in cases provided for by applicable regulations, and in all cases, in accordance with the regulations governing the protection of informant data.
If it is established that the information provided, or any part of it, is not accurate, it will be immediately removed as soon as this is confirmed. However, if this lack of accuracy constitutes a legitimate legal basis, the information will be retained for the duration of the legal proceedings.
What is the purpose for which we are requesting your data?
The information provided by the whistleblower will be handled with the aim of preventing, detecting, and correcting breaches of current regulations or internal policies, as well as processing and investigating the report, in accordance with the provisions of the Code of Conduct, based on the principles of compliance with article 31 bis of the Penal Code, Law 2/2023 of February 20 regulating the protection of individuals who report breaches of regulatory offenses and against corruption, and Law 10/2010 of April 28 on the prevention of money laundering and terrorist financing.
Access to the data you have provided through the reporting channel will be exclusive to personnel identified in Article 32 of Law 2/2023.
Under no circumstances will any data not necessary for the knowledge and investigation of the reported actions or omissions be processed. In such cases, this data will be immediately deleted. Furthermore, any data that has been communicated and relates to conduct not covered by the scope of this processing will also be deleted.
For how long were we safeguarding your data?
Your data will be stored within the system for three months from the date the data is entered, unless a formal investigation has been initiated. However, they may be retained for the purpose of documenting the operation of our crime prevention model. Communications that have not been formally acknowledged can only be recorded anonymously.
In cases where investigations have been initiated, the relevant information will be retained for the duration necessary for the investigation of the reported facts within another information system, and until the case is resolved (including any related legal proceedings where applicable).
To whom are your data being communicated?
Your data will not be disclosed unless this is necessary for an investigation or to meet a legal obligation, for example, disclosure to judicial or administrative authorities.
It will be permissible for other parties to process the data, or even to communicate it to third parties, when it is necessary for the entity to take corrective measures or to handle any related sanctioning or criminal proceedings. In all cases, the data provided will be used exclusively for managing and processing the received communication, and for carrying out any necessary investigative actions to determine whether the facts communicated, reported, or inquired about, are actually present.
What are your rights?
Any claimant will have the right to exercise the following rights:
- They will have the right to receive confirmation as to whether their data is being processed within I-MAS, as part of the management of the complaints channel, as well as to request access, rectification, deletion, restriction of processing, and opposition to inaccurate data. In cases where the data is no longer needed for the management of the complaints channel, they can also request its deletion.
- In certain circumstances, individuals will be able to object to the processing of their data.