Who is responsible for the personal data collected from you?
Formel D Group (Formel D GmbH, including all of its subsidiaries and affiliates “Formel D”) is responsible for accepting, reviewing and investigating reports of compliance concerns.
You can contact us here.
You can contact our Data Privacy Officer at:
Claus Wissing
Sachverständigenbüro Muelot GmbH
Grüner Weg 80
48268 Greven
data-privacy@formeld.com
Telefon: 02571-5402-0
- What is the purpose and legal basis of the processing?
Formel D processes your data in order to review and process your report and to conduct any necessary investigations. The processing of your personal data is based on our legal obligation and our legitimate interests to identify, process, rectify and sanction any violations of the law and severe breaches of duty by employees and business partners company-wide.
- Collection and processing of personal data
Reporting a compliance case through Navex Global or directly to the local or the global Chief Compliance Officer at Formel D is voluntary. The personal data and other information collected during the reporting procedure will be processed in accordance with applicable data privacy laws.
You have the option of submitting your report without giving your name. The information you transmit will be treated confidentially in any case.
Whenever you report an incident to the local compliance officer, the Chief Compliance Officer or to Navex Global, the following personal data and other information will be collected:
- your name and contact details, unless you want to remain anonymous;
- whether you are or were employed at Formel D or, if this is not the case, your relationship with Formel D; (business partner etc);
- the name and job title, hierarchy and location for the individuals upon which the report is based and any other individuals involved in the incident (i.e., witnesses etc);
- a description of the conduct being reported and a description of the situation surrounding the incident, including the time and place of the incident, details about the affected department at Formel D, details about any facts known to management;
- Any personal data included in the questions you might have.
- Processing of personal data after the report is submitted
All personal data and other information contained in your report may be stored in the database used by Navex Global and the internal systems of Formel D Group, accessible only by those responsible for handling your case.
Navex Global’s database is operated by Pulsant Ltd., located at Unit 50, Suttons Business Park, Reading, West Berkshire RG6 1AZ, UK.
- Access to your personal data
The personal data and other information you disclose may be viewed, processed and used in order for your report to be processed by the Chief Compliance Officer concerned, the Compliance Board and also by the departments assigned thereby to clarify the procedure and/or assist in review of reported cases, if necessary and required, or by technical personnel at Navex Global.
If there is a corresponding legal obligation or Formel D has a legitimate interest in investigating the report, additional recipients of your personal data can also be transmitted to the respective investigative authorities, attorneys or auditors engaged by Formel D.
Please note that all persons whose identity you disclose as part of a compliance report can be notified that a report about them has been received at any time. Your identity will not be disclosed.
In the event, international transfers of data, are required, they shall be made in accordance with applicable laws and regulations, including, without limitation, the European Union’s General Data Protection Regulation 2016/679 (“GDPR”). When transferring data outside of your home country, adequate safeguards will be used, such as including standard contractual clauses issued by the European Commission, where applicable.
- Your rights
You may be entitled to certain rights pertaining to your data under applicable data protection laws.
You may have the right to:
- Access and obtain a copy of your data on request;
- Require Formel D to change incorrect or incomplete data;
- Require Formel D to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
- Object to the processing of your data where the Company is relying on its legitimate interests as the legal ground for processing;
- Ask Formel D to stop processing data for a period
- Receive your Personal Data and have the right to transmit that data to another company;
- Withdraw your consent to the processing of your data, where data processing is based on consent.
The ability to comply with your request may be limited on Formel D´s legal obligations. In order to exercise your rights, please contact the Data Privacy Officer listed above.
You also have the right to lodge a complaint with your local supervisory authority.
- Retention period of personal data and other information
The personal data you disclose will be retained until such times as the knowledge thereof is required to process the report, including the conducting of investigations by the departments and authorities responsible, or for as long as the data has to be retained by law.
Please note that the specified options for reporting a case above can be used only to report compliance cases. In case of emergency, or if you require any other kind of support, please refer to the Formel D Intranet (if internal) or your point of contact at Formel D.