Your report has been sent successfully and has been received by us.
Please make a note of your individual identifier. With the identifier and your chosen password, you can log in via the entry page and check the status of the processing.
Privacy policy
As of: Nov. 2023
Scope of application
Provision of the Reporting Portal
Controller:
Responsible for the processing of personal data in the log files of web servers and the session cookie is the:
Neues handeln AG
Lindenstraße 20
50674 Köln
+49 221 160820
koeln@neueshandeln.de
Contact details of our data protection officer:
datenschutz@hagen-consulting.de
Data processing on these websites:
Hosting & logfiles:
When you visit and use these websites, we must temporarily process your IP address and other information (date and time of access, request method & requested files, data volume, status code, user agent [information about operating system, browser type and version]). Your web requests are stored in the log files of our web servers for security purposes.
The legal basis for the processing of personal data for the technical delivery of these websites & storage in the log files is Article 6(1)(f) GDPR.
The log files are automatically deleted after 7 days.
Portal operator:
Riske IT GmbH
Keldenicher Straße 23
50389 Wesseling
E-Mail: datenschutz@riske-it.de
Cookies:
Cookies are small files that are automatically created and stored in the web browser of the visitor's device for each website visited. Cookies can, for example, store information about preferred settings.
When using these websites, a session cookie ('PHPSESSID') is stored on your end device to maintain the current session.
Insofar as personal data is processed by technically necessary cookies as part of the delivery of these websites, Article 6(1)(f) GDPR is the legal basis.
Reporting process in the sense of the German Whistleblower Protection Act (HinSchG):
Controller:
If you disclose your identity, the following entities are jointly responsible for the processing of your personal data:
Neues handeln AG
Lindenstraße 20
50674 Köln
+49 221 160820
koeln@neueshandeln.de
- hereinafter referred to as 'Controller A‘ -
Hagen Consulting & Training GmbH
Luisenstraße 95
53721 Siegburg
Tel.: 0 22 41/3 97 47-0
E-Mail: info(at)hagen-consulting.de
- hereinafter referred to as 'Controller B‘ –
Contact details of the Data Protection Officer Controller A:
You can reach the Data Protection Officer of Controller A at: datenschutz@hagen-consulting.de
Contact details of the Data Protection Officer Controller B:
You can reach the Data Protection Officer of Controller B at:
Riske IT GmbH
Herr Pascal Riske
Keldenicher Straße 23
50389 Wesseling
E-Mail: datenschutz@riske-it.de
Purpose and legal basis of the processing:
The purpose of data processing is the provision of an online whistleblower system as well as the receipt and processing of reports according to the HinSchG.
Controller A processes your personal data in accordance with Article 6(1)(c) of the General Data Protection Regulation (DS-GVO) in conjunction with Sections 10 and 12 of the HinSchG.
If you submit your input or make a report under the HinSchG, Controller B processes the data you provide for the purpose of contract execution and service provision according to Article 6(1)(b) of the General Data Protection Regulation (DS-GVO) and the associated legal obligation under Article 6(1)(c) DS-GVO in conjunction with Sections 10 and 16 to 18 of the HinSchG.
If you are in an employment relationship with Controller A, the legal basis for the processing of your personal data in the context of processing or further investigation of the reported matter is either § 26(1) sentence 1 BDSG or § 26(1) sentence 2 BDSG, as well as Article 6(1)(f) of the General Data Protection Regulation (DS-GVO).
If you consent and disclose your identity, Controller B will reveal and share your identity, which is the subject of a report. Exceptions to this are cases under § 9 HinSchG ('Exceptions to the Confidentiality Requirement').
Categories of data:
The following categories of personal data are processed:
Categories of Data Subjects:
Retention Period:
In accordance with the provisions of § 11(5) HinSchG, the documentation of a report under HinSchG is deleted three years after the completion of the process. However, the possibility of longer retention exists if it is necessary and proportionate to fulfill the requirements under HinSchG or other legal regulations.
Rights of the data subject:
In accordance with Art. 15 GDPR, you have the right to request information about your personal data that we process.
If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 GDPR.
If the legal requirements are met, you have the right to erasure or restriction of processing of the data concerned (Art. 17 and Art. 18 GDPR).
Under the conditions of Art. 20 GDPR, you have a right to data portability.
You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
In accordance with Art. 21 GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation.
In accordance with Art. 77 GDPR, you have the right to lodge a complaint. You can exercise this right with the competent supervisory authority: www.ldi.nrw.de
You can assert your rights with both responsible parties in the context of your report under the HinSchG.