Information Sheet according to Art. 13 and 14 DSGVO

Information Sheet according to Art. 13 and 14 DSGVO

Whistleblowing Reporting Channels

A.      Name of Controller

Reporting office is UIMCert GmbH.

B.      Contact details controller

Otto-Hausmann-Ring 113, 42115 Wuppertal

C.     Contact details data protection official

D.     Categories of personal data

Data of whistleblower, data of reported parties and data of third parties as well as description of reported violation and measures taken

E.      Purpose of data processing

Uncovering violations of legal requirements, also to avert damage to the company

F.      Legal basis for data processing

Processing of data by reporting office and investigating bodies pursuant to Article 6(1) lit. f DSGVO in conjunction with Articles 2, 8, 9, 16, 18 Whistleblower Directive (EU Directive 2019/1937).

Disclosure of identity outside legal necessity only with consent pursuant to Art. 6 (1) lit. a DSGVO

G.     For legitimate interest: legitimate interests of controller

Uncovering violations of legal requirements, also to avert damage to the company

H.     Recipients/categories of recipients

Company affected by the report;

Law enforcement authorities, if applicable

I.        Possible third country transfer


J.      Adequate level of data protection in the case of third country transfers


K.      Retention period

3 years from claim or knowledge of the violation, if the report falls within the scope of the whistleblower reporting procedure (otherwise usually 2 months)

L.      Necessity to provide the personal data (where data are collected from the data subjects)

   by consent

   required by law

   required by contract

   required for the conclusion of a contract

   Obligation to provide the data.

In case of non-provision, these consequences are possible:
[bitte ausfüllen]

A.      Origin of the data (where personal data have not been collected from the data subjects)

Whistleblower, data collected in the course of a further research

B.      Automated decision making

   no              yes

We hereby inform you that pursuant to Article 15 et seq. DSGVO, you have the right to obtain information about the personal data in question, as well as the right to rectification, erasure or restriction of processing, the right to object to processing and the right to data portability. You also have the right of complaint to a data protection supervisory authority pursuant to Article 77 GDPR if you consider that the processing of your personal data concerning infringes this Regulation. If the processing is based on your consent (cf. Art. 6(1) lit. a, Art. 9(2) lit. a DSGVO), you also have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.