Here you can read about how we process your personal data when you report to Whistle Tools’ whistleblower system. According to Article 13 of the General Data Protection Regulation, we must provide you with certain information when we receive information from you in connection with a report.

WE ARE THE DATA CONTROLLER – HOW TO CONTACT US?

Whistle Tools is the data controller for the processing of the personal data you have submitted to us. Our contact details are as follows: 

Whistle Tools ApS

Hindegade 6

1303 Copenhagen K

Denmark

Email: contact@whistle.tools

CONTACT DETAILS OF OUR GDPR ADVISOR

If you have any questions about our processing of your personal data, you are always welcome to contact our GDPR advisor: dpo@whistle.tools

PURPOSES AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We process your personal data in order to perform the necessary case processing of your report. We also process the data to achieve efficient and rational case management and to keep track of which cases we have processed. The processing of your personal data is based on Article 6(1)(c) and (e) of the General Data Protection Regulation. If you have sent us sensitive information, this will be processed in accordance with Article 9(2)(g) of the General Data Protection Regulation.

RECIPIENTS OF YOUR PERSONAL DATA

If you have made a report to Whistle Tools, we will forward it to the workplace to which it relates to the extent that the workplace is a customer of ours. If this is not the case, the report will be deleted. 

Information is also shared with the external specialists who are part of the team handling the report in question. 

Communication with you as a whistleblower is handled exclusively via our whistleblower system. In connection with your report, you will be given a key code that can be used to log in to the system again and see the status of your report, including whether we have any further questions for you. 

STORAGE OF INFORMATION ABOUT YOU

Information about you is encrypted in our whistleblower system.

The necessary technical and organisational measures have been taken to prevent personal data processed in connection with a report from being accidentally or illegally destroyed, lost or impaired and to prevent unauthorised access or misuse. The handling of personal data is subject to controls and procedures and therefore complies with legislation on the processing of personal data and good practice in the field.

YOUR RIGHTS

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you. If you wish to exercise your rights, please contact us.

RIGHT TO SEE INFORMATION (RIGHT OF ACCESS)

You have the right to access the data we process about you and a range of additional information.

RIGHT TO RECTIFICATION (RECTIFICATION)

You have the right to have incorrect information about yourself corrected.

RIGHT TO ERASURE

In exceptional cases, you have the right to have information about you erased before the time for our general erasure occurs.

RIGHT TO RESTRICTION OF PROCESSING

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restrict processing, we may in future only process the data – with the exception of storage – with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests. 

RIGHT TO OBJECT

In certain cases, you have the right to object to our otherwise lawful processing of your personal data.

COOKIES

We do not use cookies.