Privacy
Safe!hints is our whistleblowing system. Through Safe!hints, staff, clients, service providers or other whistleblowers can report suspected breaches of laws and internal rules to the internal reporting office. Safe!hints forms part of our Compliance Management System.
Who is responsible for data processing?
The controller responsible for processing your personal data is (hereinafter also referred to as the ‘Organisation’):
Gütersloh Institute for Social Pedagogy e. V. & subsidiaries
Verler Straße 6, 33332 Gütersloh, info@spi-gt.de,
Executive Board: Frank Kahle-Klusmeier
In accordance with our legal obligation, we have appointed a Data Protection Officer whom you can contact at any time with questions regarding data protection.
You can contact them at Biehn & Professionals
Wiesenstraße 32
33397 Rietberg-Mastholte
Telephone: +49 2944 – 979 71 0
datenschutz@biehn-und-professionals.de
What data is processed?
When reporting breaches via “safe!hints”, personal data (e.g. name, contact details, photographs, details of the reported incident, etc.)
• of the person making the report (whistleblower)
• of the person affected by a report (reported person)
• and of any other persons named in a report (e.g. witnesses and/or third parties) entered into the relevant reporting form.
For what purpose and on what legal basis do we process your data?
The data mentioned above is processed for the purpose of detecting and preventing serious misconduct, and of avoiding and warding off particularly severe or existence-threatening legal consequences and damages, both for our organisation (criminal prosecution, claims for damages, damage to reputation, supervisory measures) and for our employees.
The legal basis for the processing is compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR in conjunction with Section 10 of the HinSchG. In the case of a report under the LkSG, the processing is lawful as it is necessary to fulfil a legal obligation pursuant to Article 6(1)(c) of the GDPR in conjunction with Section 8 of the LkSG.
Who receives my data?
In the course of audits, investigations and the remedial measures to be taken, it may be necessary to disclose information relating to a reported incident to external advisers (e.g. legal advisers) or to the competent authorities. Personal data will only be disclosed to the extent permitted under Section 9 of the HinSchG.
The system’s infrastructure, including websites and the database, is operated on our behalf by Biehn & Professionals GmbH, Wiesenstraße 32, 33397 Rietberg-Mastholte, in accordance with Article 28 of the GDPR; the latter, in turn, engages a specialised software service provider as a sub-processor. Biehn & Professionals GmbH is contractually bound to strict confidentiality and to comply with all data protection requirements.
What data protection rights do you have?
You have the right, upon request and free of charge, to obtain information about the personal data stored about you, its origin and recipients, and the purpose of the data processing. Where we process your data on the basis of our legitimate interest, you have the right to object to the processing (right to object) if there are legitimate grounds arising from your particular situation. In addition, you have the right to have inaccurate personal data rectified, the right to erasure of personal data, the right to restriction of processing of personal data, and the right to data portability. You may contact us at any time regarding this or any other questions relating to personal data. Finally, you have the option of lodging a complaint with the supervisory authority if you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been infringed in any way.
How long is personal data retained?
Personal data is retained for as long as is necessary for the investigation and final assessment, or as required by law. Reports and notifications are deleted in accordance with legal requirements three years after the conclusion of the proceedings.