Information on the rules of procedure and data protection

Together with our legal department and the according specialist departments, we review all reports and check whether our Code of Conduct and/or the Act on Corporate Due Diligence Obligations for the Prevention of Human Rights Violations in Supply Chains (Supply Chain Due Diligence Act) have been violated. You will receive a notification after successfully submitting the application form. Subsequently, we will validate and evaluate your report by collecting further information (e.g., through our employees or business partners) in order to obtain substantiated knowledge of the reported situation. If there is a concrete suspicion of violation after our first investigations, we will undertake further investigations (e.g. by on-site audits). If the results of these investigations prove that a violation has indeed occurred, we will define appropriate corrective measures and apply these. We will immediately inform you about the results of our investigation as well as the measures taken and their results.

Potential violations against our Code of Conduct or against the Supply Chain Due Diligence Act are for instance: violations against Human Rights and/or the environment, such as child labor, forced labor, all forms of slavery, unequal treatment of employees because of disabilities, age, gender, religion, etc., water or air pollution.

We receive reports about potential violations in our own business area as well as our direct and indirect suppliers’ business areas.

The time needed to process your report may vary depending on the severity of the alleged violations. Severe violations will be processed with highest priority, and we will keep you informed.

When submitting your report, please provide as much information as possible. Please also be available for further questions in the course of our investigations. This way, we can achieve the best results and can take appropriate measures.

Confidentiality and Data Protection

1. Responsible for data protection

Memodo GmbH

Authorized Managing directors: Enrico Brandmeier, Daniel Schmitt, Tobias Wenleder

Eichenstraße 11 a-d
85445 Oberding
Deutschland
Phone: +49 (0)89 9041015-00
E-Mail: info@memodo.de

USt-IdNr.: DE318463541
Register Court: Amtsgericht München
Register Number: HRB 202913

Contact details of our data protection officer:
E-Mail: datenschutz@memodo.de

2. Categories of personal data and purpose of their data processing

Collecting, processing and using your personal data, that you submit with this form, complies with legal requirements and this data protection declaration. Your establishment of contact with us is always voluntary. We collect, save and use your data to get in contact with you, according to art. 6 (1) lit. f GDPR.

The report you submit, will exclusively be processed by our Compliance department in cooperation with the specialist department “Strategic Procurement”.

Your personal data will be saved for the purpose of establishing contact as requested.

3. Recipient of personal data

As long as it is necessary in order to resolve the matter, personal data can be forwarded (to the required extent) to individuals within the Memodo GmbH or – if they are also concerned – to its subsidiaries. Every individual with access to these data, is obliged to confidentiality.

Further disclosure or other transfer of your personal data to third parties will not take place, except for law enforcement purposes. If legal requirements or directives of government bodies request your personal data, they will be disclosed with them.

4. Duration of data storage

Personal data will be stored for the duration needed to resolve and evaluate the submitted report. After the completion of the investigations, personal data will be deleted within a period of one month, according to legal provisions. In case of the introduction of legal and/or disciplinary proceedings, personal data can be stored until the closure of mentioned proceedings. Personal data related to invalid reports will be deleted immediately.

5. Automated decision-making

In the scope of this whistleblower system an automated decision-making does not take place according to art. 22 GDPR.

6. Rights of the persons affected

As an affected person, you have the right to request your personal data stored with us. The whistleblower’s identity remains unaffected by this. If exercising the right to resolution puts fact-finding or the preservation of necessary evidence at risk, Memodo GmbH is entitled to comply with this law at a later time. Furthermore, when legal preconditions are present, they have the right to let wrong data be corrected, changed, closed or deleted. You continue having the right to appeal with the responsible supervisory authority for data protection

Requests to exercise the right of persons affected according to art. 15-21 GDPR can be addressed via e-mail datenschutz@memodo.de or via mail to

Memodo GmbH

To the Data Protection Officer

Eichenstraße 11 a-d
85445 Oberding
Deutschland

Further information on your rights and remedies resulting from the GDPR can be found in the General data protection declaration of Memodo GmbH https://www.memodo.de/datenschutz