Whistleblower complaint form
WHISTLEBLOWER COMPLAINT FORM
Information about the methods for submitting reports of legal violations at SPRING-WAD ROMAN KSIĄŻEK, headquartered in Wadowice.
Reports of legal violations can be submitted by whistleblowers only through a dedicated channel, i.e., electronically by completing the WHISTLEBLOWER COMPLAINT FORM according to the template available below and sending it as a scanned document to the following email address:
The subject of the email should read: REPORT OF LEGAL VIOLATION.
Please provide as detailed and accurate information as possible, as this will enable a thorough analysis of the reported event and assist in resolving the issue.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR), we inform you that:
The controller of your personal data is SPRING-WAD Roman Książek, headquartered in Wadowice (hereinafter referred to as the "Controller").
The Controller has appointed a Data Protection Officer (DPO) whom you can contact regarding any matters related to personal data protection by writing to the following address: marketing@sprezyny-wadowice.pl.
Your personal data will be processed for the following purposes:
1. To fulfill legal obligations imposed on the Controller, such as collecting reports to prevent the commission of crimes and responding to illegal actions – based on Article 6(1)(c) of the GDPR in connection with the Act of June 14, 2024, on the protection of whistleblowers.
2. To communicate with you regarding the message you have sent as part of the report – based on Article 6(1)(f) of the GDPR, i.e., based on the legitimate interest of the Controller, which is communication with the person who initiated contact with the Controller.
3. Potentially to determine, assert, or defend claims between you and the Controller – based on Article 6(1)(f) of the GDPR, i.e., based on the legitimate interest of the Controller, which is the ability to assert claims.
Providing your personal data is voluntary, but necessary for contacting the Controller (failure to provide the data will result in the inability to receive a response from the Controller).
Your personal data may be made available to entities and authorities authorized to process this data in accordance with the law.
The Controller does not intend to transfer your personal data to countries outside the European Economic Area or to international organizations. Data processed based on Article 6(1)(c) and (f) of the GDPR will be processed until the completion of the proceedings, and in the event of a violation of the law, until the statute of limitations for employment or contractual liability expires, or until the completion of criminal or other administrative or judicial proceedings related to that liability.
After the above period, your personal data will be stored until the statute of limitations for any claims.
You have the right to: access your personal data, rectify your personal data, erase your personal data, restrict the processing of your personal data, object to the processing of your personal data, port your personal data.
Additionally, you have the right to lodge a complaint with the supervisory authority responsible for data protection (the President of the Personal Data Protection Office) if you believe that the processing of your data violates the GDPR.
To exercise the rights mentioned above, please contact the Controller or the Data Protection Officer (contact details provided above).
Wadowice, 2.01.2025.
Approved by: Roman Książek
DOWNLOAD THE FORM