Whistleblowing
Welcome to the whistleblower system of Hörnlein Umformtechnik GmbH.
We treat your information as strictly confidential. This applies in particular to your contact details.
You can set up your own protected mailbox for your report with a service such as ProtonMail, which does not allow any conclusions to be drawn about your identity.
You will receive feedback from us via this service, can answer questions if necessary and will be informed about the progress of your report. You will receive answers without being identified. As part of this communication, you decide on the further type of communication; confidential personal meetings with our ombudsperson are also possible here. It is also possible to communicate in encrypted form by e-mail; please let us know if you wish to do so.
​
E-mail address: Hinweisgeber@hoernlein.com
Note on your report:
​
Please describe the incident to be reported as precisely as possible (what, who, when, frequency) and state only facts as far as possible. If you wish to make an assumption, please label it explicitly as an assumption.
Data protection information:
​
Responsibility:
Hörnlein Umformtechnik GmbH
P.O. Box 1520 I Perlenweg 6
D-73525 Schwäbisch Gmünd
Phone: +49 (0) 7171 10 09-0
Fax: +49 (0) 7171 10 09-10
Email: info@hoernlein.com
Contact details of the data protection officer
Süddeutsche Datenschutzgesellschaft mbH
Contact Maximilian Mayer
Von-Brettreich-Straße 4
93049 Regensburg
Tel: +49 (0) 941 - 38177070
Mail: verwaltung@sddsg.de
Legal basis and purpose
Your data is processed on the basis of your voluntary information as a whistleblower and for the purpose of fulfilling the legal obligation to provide a whistleblower portal, Art. 6 para. 1 sentence 1 lit. a), lit. c) GDPR in conjunction with § 10 HinSchG. If the whistleblower system is made available without a legal obligation, your data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR.
You only have to provide the data that is absolutely necessary to clarify the matter. This is an e-mail address, which you can only set up for this purpose and which does not allow us to draw any conclusions about your identity.
​
Categories of personal data and origin
Contents of the report by the whistleblower
Documentation of the report by the ombudsperson
If applicable, verbatim record of the (remote) verbal report and, if applicable, content record of the (remote) verbal report, if applicable, audio recording of the report or meeting and, if applicable, perceptions at a meeting created by the ombudsperson
Categories of persons concerned
Whistleblowers, employees and employers, other persons mentioned in the report
Categories of recipients
The information provided to us will only be passed on to those persons who must be involved in the processing of your report, insofar as this is absolutely necessary for the investigation of the facts. The persons employed for this purpose are obliged to maintain confidentiality. The name of the reporting person will not be passed on, even if this has been communicated for contact purposes. However, depending on the offence you have reported, we may be legally obliged to pass on your report and any other data to third parties (e.g. authorities) for the purposes of criminal prosecution
Transfers of personal data to a third country or to an international organisation
Are currently not planned
Planned deadlines for the deletion of data
Three years after conclusion of the procedure
​
Rights of data subjects
With regard to the processing of your personal data, you as a data subject have the following rights in accordance with Art. 15 et seq. GDPR:
You can request information as to whether we process your personal data. If this is the case, you have a right to information about this personal data and to further information related to the processing (Art. 15 GDPR).
In the event that personal data concerning you is not (or no longer) accurate or incomplete, you may request that this data be rectified and, if necessary, completed (Art. 16 GDPR).
If the legal requirements are met, you can request the erasure of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR).
For reasons arising from your particular situation, you can also object to the processing of your personal data by us at any time (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.
If you have consented to the processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
​
If the processing is based on consent, you have the right to withdraw your consent at any time. The revocation only takes effect for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right to complain to a supervisory authority within the meaning of Art. 51 GDPR about the processing of your personal data.
Obligation to provide data
We may process personal data as part of the obligation to set up internal reporting centres in accordance with Section 12 HinSchG as part of the reporting and follow-up measures.