HINT

I. We want to enable you to provide us with tips and information on violations of legal regulations and thus support us in uncovering the causes:

1. Compliance with legal regulations is our top priority. We want to identify violations at an early stage in order to initiate appropriate and effective countermeasures and immediately prevent any harm to employees, clients, contractors, business partners, as well as the environment and human rights.
    
2. In order to receive timely notification of serious violations and to be able to properly investigate valuable tips, we have implemented a neutral reporting office:
   MisterData® Datenschutz & Consulting UG
   Schwalbenweg 61/1,  69123 Heidelberg 
   Mobil: 0176 727 11 014, E-Mail: misterdata-consulting@outlook.de 
    
3. Of course, you can also provide an anonymous tip. However, in this case, we kindly ask you to be very specific so that we can investigate the suspicion appropriately.
    
4. We guarantee the highest level of confidentiality and fairness towards all informants. We also guarantee that there will be no employment-related consequences if you work for us.
    
5. If you make a corresponding report:

• a) The internal reporting office will acknowledge receipt of the report within 7 days if you did not submit it anonymously.
• b) The internal reporting office must respond to reports from whistleblowers with "appropriate follow-up measures"; a "physical meeting" will be arranged within a reasonable time frame if you wish.
• c) The internal reporting office must provide you (the informant/whistleblower) with feedback on measures/actions taken in response to the report within a "reasonable time frame". A maximum of 3 months after the acknowledgment of receipt is considered reasonable if the report was not submitted anonymously.
• d) Both we and the internal reporting office guarantee compliance with the data protection regulations of the General Data Protection Regulation and the Federal Data Protection Act.

II.    Data protection information when submitting REPORTS concerning violations of the law:

1. If you would like to submit a report regarding violations of the law, such as human rights violations within our company, the following confidential and anonymous reporting channel is available to you:
   MisterDATA®
   Datenschutz & Consulting UG (haftungsbeschränkt)
   Schwalbenweg 61/1, 69123 Heidelberg
   Tel.: 06221 7271238, Mobile-Nr.: 0176 727 11 014, E-Mail: misterdata-consulting@outlook.de
    
2. This reporting channel is available to both EMPLOYEES of our company and third parties (such as CUSTOMERS, BUSINESS PARTNERS, SUPPLIERS) for reporting concerns.
    
3. We use modern data storage and security techniques to protect your data. All systems in which your personal data is stored are protected against unauthorized access, entry, and usage and are only accessible to a specific group of people with special authorization.
    
4. When submitting the report, you should provide a specific and detailed account of the situation. Only personal data that you disclose non-anonymously, such as: name, email address, telephone number, and other personal data that arise as part of the description of the report, will be collected.
    
5. This reporting channel is intended for the receipt and investigation of serious suspicions of violations of laws, in particular EU Directive 2019/1937 concerning criminal acts that may jeopardize our company, as well as for reporting general process deficiencies and vulnerabilities that require appropriate action.
    
6.  We are responsible for the data processing within the reporting channel
    
7. As a whistleblower and as a person mentioned in the report, you have the following rights:

• a) Right to information, Art. 15 GDPR.
• b) Right to rectification, Art. 16 GDPR.
• c) Right to erasure, Art. 17 GDPR.
• d) Right to restriction of processing, Art. 18 GDPR.
• e) Right to object to processing, Art. 21 GDPR.
• f) Right to withdraw consent, Art. 7 GDPR.
• g) Right to lodge a complaint, Art. 77 GDPR.