Data protection information for the compliance reporting form pursuant to Art. 13 GDPR
1. How does the reporting form work?
This reporting form is solely for the secure transmission of reports to the whistleblower office appointed by Herrmann Ultraschall GmbH & Co. KG:
STR Rechtsanwaltsgesellschaft mbH
Byk-Gulden-Straße 2a
78467 Konstanz, Germany
hinweisgeber@str-recht.de
After you submit your report, the data you enter will be processed briefly on our systems, or those of our website service provider, for the purposes of technical transmission only. The report will then be transmitted immediately to the lawyer appointed as the whistleblower office.
Please note that in the case of technical transmission via the web form, the data entered will be processed briefly on the systems of the website operator. For technical reasons, administrative access by authorized persons cannot be completely ruled out. Therefore, the completely technically anonymous transmission of the data cannot be guaranteed via the web form itself.
The substantive review and processing of the report is carried out exclusively by the lawyer acting as the whistleblower office. Herrmann Ultraschall does not receive the report directly.
The whistleblower office will inform management about the reported matter to the extent necessary for the processing of the report. The report will generally be transmitted without disclosing the identity of the whistleblower. Personal data will only be disclosed if it has been provided voluntarily and its disclosure is legally permissible or necessary for processing the report.
If you wish to avoid processing via the web form, you can also submit your report directly by e-mail or post to the appointed whistleblower office specified above.
2. Data controller
Herrmann Ultraschalltechnik GmbH & Co. KG
Descostr. 3-9
76307 Karlsbad, Germany
E-mail: info@herrmannultraschall.com
3. Contact details of the data protection officer
ENSECUR GmbH
Kaiserstr. 86
76133 Karlsruhe, Germany
E-mail: dsb-herrmannultraschall@ensecur.de
4. Purpose and legal basis of the processing
Personal data is processed for the purpose of technically providing the whistleblower form, providing a secure reporting channel, receiving and securely transmitting your report to the whistleblower office appointed by us, and for fulfilling our statutory obligations under the Whistleblower Protection Act.
The legal basis for the processing is Art. 6 (1) (c) GDPR in conjunction with Sections 10 and 12 et seq. of the German Act for the Better Protection of Whistleblowers (HinSchG).
5. Which data is processed?
In general, only a description of the matter in question is required to submit a report. Providing further personal data, in particular your name, e-mail address, or telephone number, is voluntary and generally not necessary.
Please only provide personal data that is necessary for describing the matter in question.
6. Data recipients
The personal data entered via the form will initially be processed by our website service provider as part of the technical operation of our website. This provider hosts the website, including the reporting form, and processes the data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Upon receipt of the report, it will be transmitted to the whistleblower office appointed by us (STR Rechtsanwaltsgesellschaft mbH). The law firm processes the transmitted personal data in its capacity as an appointed whistleblower office and under its own responsibility according to data protection law.
To the extent necessary for processing the report and insofar as permitted by law, the information required for this purpose – where possible in anonymized form – will be transmitted to the responsible decision makers in our company. In individual cases, personal data may also be transmitted to courts, law enforcement agencies, or other legally competent bodies, provided that there is a legal basis for doing so.
7. Storage period
The data processed as part of the technical provision of the web form will only be stored for as long as is necessary for its technical transmission and to ensure operation. It will then be deleted unless statutory retention obligations apply. Reports are erased 3 years after the conclusion of the relevant proceedings.
8. Rights of the data subject
As a data subject, you have the right at any time to access, rectify, and delete your data, as well is to restrict its processing. You also have the right to data portability. To exercise these rights, please contact the controller using the contact details provided.
9. Right to lodge a complaint
As a data subject, you may at any time lodge a complaint with the competent Baden-Württemberg state commissioner for data protection and freedom of information.
10. Obligation to provide data
The use of the reporting form is voluntary. There is no requirement to provide your personal data. You alone decide whether to submit a report, whether to reveal your identity, and what the report contains. Providing your contact details is also voluntary. Without this information, it may not be possible to ask follow-up questions or provide information on the progress of the proceedings.
If you wish to avoid processing of your data via the web form, you can also submit your report directly by e-mail or post to the appointed whistleblower office:
STR Rechtsanwaltsgesellschaft mbH
Byk-Gulden-Straße 2a
78467 Konstanz, Germany
hinweisgeber@str-recht.de