Blow the Whistle:

A direct link to Vitec's anonymous Whistleblowing channel

.....

 

PRIVACY POLICY

regarding the Whistleblowing channel

 

Controller

Vitec Raisoft Oy
VAT number: FI16159825
https://www.raisoft.com
Vaasantie 6 C (iPark)
67100 Kokkola
Tel: +358 207 789567

Data Protection Officer

Marica Sundström
Tel: +358 40 481 4004
[email protected]
[email protected]

Purpose of processing of personal data regarding the Whistleblowing channel

When using the Whistleblowing channel one can submit a complaint anonymously.

However, if someone wants to disclose his/her personal information while submitting a complaint, (s)he can do that. In that case, we process personal data when (s)he is using the Vitec Software Group's Whistleblowing channel and submitting his/her personal information. https://www.vitecsoftware.com/en/about-vitec/whistleblowing/

We gather the information from the data subject (whistleblower) him/herself in a case when a data subject chooses to reveal his/her personal information to the Vitec Software Group's internal compliance committee, that handles the cases.

The controller does not have any access to the personal data, only the Vitec Software Group's internal compliance committee will have access to the information. The people in the group are bound by confidentiality obligation (please refer to the Whistleblower Protection Act) and are not allowed to disclose any personal information to outsiders (the Controller included).

We process the following information:
- name
- phone number
- e-mail address

Disclosure of data

Only the Vitec Software Group's internal committee has the right to process personal data. Personal data will not be disclosed to third parties.

Transfer of personal data to a third country

Personal data will not be transferred outside EEA.

Retention period

We store personal data to comply with our legal obligations. Personal information is stored until a case is closed, after which the personal data is deleted within one (1) month.
Atypically personal data can be stored for up to two (2) years, but in that case the data subject will be informed of this.

Rights of the data subject

Data protection legislation guarantees the data subject the rights described below. These rights strengthen privacy and allow you to control the processing of your personal data.
- the right to access personal data
- the right to rectification
- the right to erasure of data
- the right to restrict processing
- the right to object processing of data
- the right to transfer data from one system to another

If you want to use your rights, you can contact the Vitec Software Group's internal committee:
- Head of HR Anna Andersson ([email protected])
- or the CFO Sara Nilsson ([email protected])

You also have the right to lodge a complaint with the supervisory authority.

If you believe that the processing of your personal data has violated your rights under the data protection legislation and, in particular, your rights under the General Data Protection Regulation, you can lodge a complaint with the Office of the Data Protection Ombudsman.

Security of processing personal data

Personal data is stored in a database that is protected from unauthorized use. The database can only be accessed by people who need it for their duties. Proper protection of data is carried out by using strong authentication logging. The information is protected by appropriate technical solutions.

The DPO has carried out a Data Protection Impact Assessment (DPIA) that is mandatory in Finland, regarding use of the Whistleblowing channel.