Data Privacy Information
Please read this data protection notice for "Tell ams OSRAM" carefully before reporting an incident.
What is “Tell ams OSRAM” and what purpose does it serve?
“Tell ams OSRAM” is a web-based application offered by ams OSRAM for employees, customers, suppliers and other business partners to report non-compliant behaviour by ams OSRAM employees, customers, suppliers and business partners.
“Tell ams OSRAM” is made available by ams OSRAM AG, Tobelbader Straße 30, 8141 Premstätten, Austria („ams OSRAM“). The websites on which you can report an incident, and the database upon which information and personal data is saved, are operated by EQS Group GmbH, Bayreuther Str. 35, 10789 Berlin.
What kind of misconduct can be reported?
Only cases of misconduct described in the below list can be reported via “Tell ams OSRAM” for person and companies described in Section 1:
- Corruption/ bribery;
- Anti-competitive practices and insider trading;
- Offences against accounting practices;
- Asset/ property crimes;
- Offences against customs and foreign trade legislation;
- Violations of occupational safety regulations;
- Violations of environmental protection regulations;
- Other serious violations of the law
Misconduct in other areas should be reported by the usual internal reporting lines. Reporting any of the above-named incidents via “Tell ams OSRAM” should be seen as an addition to other existing reporting lines and not in any way as a substitute for them.
What personal data and information is collected and processed?
When using “Tell ams OSRAM” for reporting breaches of regulations, the following personal data and information provided by you is collected, processed and used:
- your name, your contact details and whether you are an ams OSRAM employee;
- the name and other personal data of the accused person(s) stated in your report in as far as you can make such information available (e.g. their contact data or job description);
- a description of the behaviour in question as well as a description of the facts and circumstances surrounding the incident, a statement regarding the affected ams OSRAM department, a statement regarding the knowledge of management and whether anonymity is desired or not.
How and where is personal data and information processed after reporting, and who has access to it?
All personal data and information stated in your report is saved in the “Tell ams OSRAM” database. This database is secured by means of stringent technical and organisational measures. EQS Group GmbH has no access to this data.
Only employees of the Compliance Office within ams OSRAM AG have access to data held within “Tell ams OSRAM”. They review this information, carry out investigations, take corrective measures if necessary and/or impose sanctions.
Depending on the content of the report, employees within HR, auditing, legal or security departments, or the management from ams OSRAM AG or associated companies as well as external advisers (e.g. legal advisers) may be given access to this data. In justified cases it may also be necessary to forward the facts of the case to the competent authorities.
If necessary, data may be forwarded to the police and/or other investigative authorities or other relevant authorities.
The locations, within which the personal data and information is received and processed, could be located in the USA or another country where the level of data protection legislation is not comparable with that of the EU.
In certain cases we are legally bound to inform the accused within a reasonable timeframe that we have received an allegation about them. Such person will then have the possibility to comment on the facts and circumstances described in the report. ams OSRAM will not reveal your identity to the accused.
How long will the personal data be stored?
The personal data made available by yourself is kept as long as is necessary to process your report, and if necessary until sanctions are imposed or if the law states that it should be kept for a certain period of time. If a report is shown to be unfounded then it will be deleted immediately along with any personal data contained within.