We take the protection of your personal data very seriously. The following data protection notice provides information about the personal data we process when you visit this website and when you submit a report.
Data controller as defined by Art. 4(7) GDPR
The party responsible for data processing as defined by Art. 4(7) GDPR is the party indicated as data recipient when you submit your report.
Provision of information via the online whistleblowing system/ contacting the compliance department
Purpose of data processing and legal basis
This online whistleblowing system was set up for reporting information on matters relating to compliance. You can use the system to provide reports about possible compliance infringements which could have serious results for the company. This includes criminal and administrative consequences.
The legal basis for this data processing is Art. 6(1) lit. f GDPR. We have a legitimate interest in receiving and processing reports and questions as mentioned above.
Type of data processed
Use of the online whistleblowing system is voluntary. The data processed by us depends on the nature of the information submitted by you. We regularly process the following data:
- Your name and your contact details, if you choose to disclose this information.
- Whether you work for us, if you wish to share this with us.
- Depending on your report, the names of persons or other personal data.
Recipients/ categories of recipients
Data that you make available to us is processed by the data controller, exclusively by its compliance department. We generally do not forward the data to third parties. We may, however, be required to forward the data submitted by you to other departments at the data controller or to companies of the Schwarz Group if this is necessary for purposes of investigation and in line with whistleblower protection laws.
Another potential recipient of your report is PreZero US, Inc., 2301 E. 7th Street, Suite A-337, Los Angeles, CA 90023.
Please note that the level of data protection in the USA is lower than in the EU/EEA, meaning that the rights of the data subject described below may not apply to the same extent. No adequacy decision has been issued thus far by the EU Commission with respect to the USA. The transfer of data to PreZero US, Inc. takes place on the basis of standard data protection clauses.
In exceptional cases, the data is also processed on our behalf by processors, such as the operator of the online whistleblowing system, EQS Group GmbH, Karlstr. 47, 80333 Munich, Germany. This processor and any other processors have been carefully selected in each case. They are also audited and under contractual obligation in accordance with Art. 28 GDPR.
We are legally obligated to inform accused parties of any reports received against them as soon as the disclosure of this information no longer jeopardises the investigation. Your identity as a whistleblower will not be disclosed unless we are legally bound to do so.
Storage period/ criteria for determining the storage period
The data will be stored for the period necessary for fulfilment of the above purposes or for finalisation of processing matters relating to compliance in the report, and as required within the framework of prevailing laws. Criteria in this regard include the complexity of the issue, the time required for clarification of the facts and the object of the accusation. The data will be deleted after fulfilment of the purpose.
Using the online whistleblowing system
Communication between your device and the online whistleblowing system takes place over an encrypted connection (SSL). Your IP address will not be stored. For purposes of connection to the online whistleblowing system only, a cookie is stored on your computer that contains a session ID (a so-called session cookie). This cookie is valid until the end of your session, after which it is deleted. The legal basis for data processing is Art. 6(1) lit. f GDPR. It is in our legitimate interest to ensure technical functionality of our online whistleblowing system.
Your rights as a data subject
You have the right to receive free information on your personal data stored at the data controller upon request in accordance with Art. 15(1) GDPR.
You also have the right to rectify, delete and restrict processing of your personal data on legal grounds.
If the data processing is based on Art. 6(1) e or f GDPR, you have a right of objection. Should you object to data processing, this will not take place in future unless the data controller can provide compelling and legitimate reasons, which outweigh the interests of the person, for continuing data processing.
If you are the provider of the processed data, you have a right to data transmission.
If the data processing is based on consent in accordance with Art. 6(1) a or Art. 9(2) a GDPR, you can revoke your consent at any time with effect for the future without impacting the lawfulness of the previous processing.
In all of the above cases, in the event of outstanding issues or in case of complaints, please contact the data protection officer/ data protection coordinator in writing or by email; see item 5.
You also have a right of appeal to the competent data protection supervisory authority.
Data protection officer's contact details
Should you have any further questions concerning the processing of your data or exercising of your rights, you can contact the data controller's responsible data protection officer/ data protection coordinator:
- PreZero Stiftung & Co. KG
- - Data Protection Officer -
- Stiftsbergstraße 1
- 74172 Neckarsulm
- E-Mail: datenschutz-stiftung@prezero.com
- PreZero Deutschland KG
- - Data Protection Officer –
- Kleiststraße 49
- 32457 Porta Westfalica
- E-Mail: datenschutz@prezero.com
- PreZero Polska Sp. z.o.o.
- - Data Protection Coordinator -
- ul. Kokotek 33
- PL-41-700 Ruda Śląska, Poland
- E-Mail: iod.pl@prezero.com
- PreZero Recycling AB
- - Data Protection Coordinator -
- Transportgatan 9
- SE-262 71 Ängelholm, Sweden
- E-Mail: dataskydd.se@prezero.com
- PreZero Polymers Austria GmbH
- - Data Protection Coordinator -
- Industriezone Ost 5
- A-9111 Haimburg, Austria
- E-Mail: polymers.privacy@prezero.com
- PreZero Polymers Italy S.P.A.
- - Data Protection Coordinator -
- Via dell´Artigianato 3
- 31010 Fonte (TV), Italy
- E-Mail: privacy.italy@prezero.com
- LAMESCH Exploitation S.A.
- - Data Protection Coordinator -
- 212, Z.A.E. Wolser B
- L-3452 Bettembourg, Luxembourg
- E-Mail: dp@lamesch-prezero.lu
- PreZero US, Inc.
- - Data Protection Coordinator -
- 2301 E. 7th Street, Suite A-337
- Los Angeles, CA 90023, USA
- PreZero Iberia, S.L.U.
- - Data Protection Officer -
- C/ ALBARRACIN 44
- 28037 DE MADRID, Spain
- PreZero Portugal S.A.
- - Data Protection Coordinator -
- Rua da Lionesa, 446 Edificio G39
- 4465-671 Leça do Balio, Portugal
- E-Mail: silvio.borges@prezero.pt
- PreZero Nederland
- - Data Protection Coordinator -
- Meester E.N. van Kleffensstraat 10
- 6842 CV Arnhem
- E-Mail: privacy.nl@prezero.com