Privacy

Safe!hints is our whistleblower system. Employees, customers, business partners or other persons providing information can use safe!hints to report suspected legal violations and internal rules to the internal reporting office. Safe!hints is part of our compliance management system.
 
 Who is responsible for data processing?
The controller for the processing of your personal data is (hereinafter also referred to as the organization):

Christian Pfeiffer Maschinenfabrik GmbH, Sudhoferweg 110-112, 59269 Beckum, office.de@christianpfeiffer.com; vertreten durch Ing. Dietmar Freyhammer.

In order to comply with our legal obligations, we have appointed a data protection officer who you can contact at any time with questions about data protection. You can reach him/her at

Christian Pfeiffer Maschinenfabrik GmbH
Sudhoferweg 110-112
59269 Beckum
Telefon: +49 (0) 2521 849-360
E-Mail: datenschutz@christianpfeiffer.de

What data is processed?
When reporting violations via "safe!hints", personal data (e.g. name, contact details, photos, reported facts, etc.) of

·     the person submitting a report (whistleblower)

·     the person affected by a report (reported person)

·     and the other persons named in a report (e.g. witnesses/third parties)


 who are entered in the respective report form, are processed.
 
 For what purpose and on what legal basis do we process your data?
The above-mentioned data is processed for the purpose of detecting and preventing serious misconduct and avoiding and defending against particularly drastic or existence-threatening legal consequences and damage both for our organization (criminal prosecution, claims for damages, reputational damage, supervisory measures) and for our employees.

The legal basis for the processing is a legal obligation pursuant to Art. 6 para. 1 lit c GDPR to comply with the requirements of the EU Whistleblower Directive of 23.10.2019 (EU 2019/1937) and § 10 of the Whistleblower Protection Act (HinSchG).

Who will receive my data?
As part of the checks, investigations and remedial measures to be taken, it may be necessary to transmit information on a reported incident to external advisors (e.g. legal advisors) or to the competent authorities.

The infrastructure of the system, including websites and database, is operated by Biehn & Professionals GmbH, Wiesenstraße 32, 33397 Rietberg-Mastholte, Germany, on our behalf in accordance with Art. 28 GDPR, which in turn uses a specialized software subcontractor. Biehn & Professionals GmbH is contractually obliged to maintain strict confidentiality and to comply with all data protection requirements.

What data protection rights are you entitled to?
You have the right, upon request and free of charge, to receive information about the personal data stored about you, its source and recipients and the purpose of the data processing. If we process your data on the basis of our legitimate interest, you have the right to object to the processing on legitimate reasons arising from your particular situation (right to object). In addition, you have the right to correct incorrect personal data, the right to delete personal data, the right to restrict the processing of personal data and the right to data portability. You can contact us at any time with regard to this and other questions on the subject of personal data. Finally, you have the option of making a complaint to the supervisory authority if you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way.

How long will the personal data be stored?
Personal data is stored for as long as required for clarification and final assessment or as required by law. The information and reports are deleted in accordance with the legal requirements 3 years after completion of the case.