Privacy
AdvoWhistle is our whistleblowing system. Employees, customers, business partners or other whistleblowers can use AdvoWhistle to report suspected violations of laws and internal rules to the internal reporting centre. AdvoWhistle is part of our compliance management system.
Who is responsible for data processing?
The controller within the meaning of data protection laws is
The controller within the meaning of data protection laws is
Haefen und Gueterverkehr Koeln AG
Am Niehler Hafen 2
50735 Cologne
Am Niehler Hafen 2
50735 Cologne
If you have any questions or suggestions regarding data protection, you can also contact us by e-mail at presse(at)hgk.de.
You can reach our data protection officer as follows
Haefen und Gueterverkehr Koeln AG
Am Niehler Hafen 2
50735 Cologne
E-Mail adress: datenschutz(at)hgkgroup.de
Am Niehler Hafen 2
50735 Cologne
E-Mail adress: datenschutz(at)hgkgroup.de
What data is processed?
The use of AdvoWhistle is voluntary. The following personal data is processed in the case of notifications
The use of AdvoWhistle is voluntary. The following personal data is processed in the case of notifications
- Person providing the information:
- Name (if you disclose your identity),
- Contact details (if you provide them)
- Persons affected by incidents:
- First and last name,
- Information about incidents and suspected violations of laws and regulations
- Witnesses and/or third parties named in the notice (e.g. customers, suppliers, colleagues or business partners):
- First name and surname,
- Contact details
What do we process your data for and on what legal basis?
The above-mentioned data is processed for the purpose of detecting and preventing serious misconduct and avoiding and defending against particularly drastic or existence-threatening legal consequences and damage both for our organisation (criminal prosecution, claims for damages, reputational damage, supervisory measures) and for our employees. The legal basis for the processing is our legal obligation pursuant to Art. 6 para. 1 lit. c GDPR to comply with the provisions of Section 10 of the German Whistleblower Protection Act (HinSchG).
The above-mentioned data is processed for the purpose of detecting and preventing serious misconduct and avoiding and defending against particularly drastic or existence-threatening legal consequences and damage both for our organisation (criminal prosecution, claims for damages, reputational damage, supervisory measures) and for our employees. The legal basis for the processing is our legal obligation pursuant to Art. 6 para. 1 lit. c GDPR to comply with the provisions of Section 10 of the German Whistleblower Protection Act (HinSchG).
Who receives my data?
As part of the audits, investigations and remedial measures to be taken, it may be necessary to transmit information on a reported incident to external advisors (e.g. legal advisors) or to the competent authorities.
As part of the audits, investigations and remedial measures to be taken, it may be necessary to transmit information on a reported incident to external advisors (e.g. legal advisors) or to the competent authorities.
The technical operation of AdvoWhistle is carried out by the specialised software service provider iComply GmbH, Große Langgasse 1 a, 55116 Mainz, Germany, on our behalf.
What data protection rights are you entitled to?
You have the right, upon request and free of charge, to receive information about the personal data stored about you, its origin and recipients and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate reasons arising from your particular situation (right to object). In addition, you have the right to rectification of inaccurate personal data, the right to erasure of personal data, the right to restriction of processing of personal data and the right to data portability. You can contact us at any time with regard to this and other questions on the subject of personal data. Finally, you have the option of lodging a complaint with a data protection supervisory authority if you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way.
You have the right, upon request and free of charge, to receive information about the personal data stored about you, its origin and recipients and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing if there are legitimate reasons arising from your particular situation (right to object). In addition, you have the right to rectification of inaccurate personal data, the right to erasure of personal data, the right to restriction of processing of personal data and the right to data portability. You can contact us at any time with regard to this and other questions on the subject of personal data. Finally, you have the option of lodging a complaint with a data protection supervisory authority if you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way.
How long will the personal data be stored?
The documentation of reports and the personal data contained therein are generally deleted three years after the conclusion of the procedure. The documentation may be stored for longer in individual cases in order to fulfil the requirements of the German Whistleblower Protection Act (HinSchG) or other legal provisions, as long as this is necessary and proportionate. A final assessment is also stored for documentation purposes.
The documentation of reports and the personal data contained therein are generally deleted three years after the conclusion of the procedure. The documentation may be stored for longer in individual cases in order to fulfil the requirements of the German Whistleblower Protection Act (HinSchG) or other legal provisions, as long as this is necessary and proportionate. A final assessment is also stored for documentation purposes.