PRIVACY POLICY — WHISTLEBLOWER CHANNEL
1. DATA CONTROLLER
MCI Assist, S.L. CIF B-81519035 C/ Santa Leonor nº65, Edificio B, 1º Derecha 28037 – Madrid Email: protecciondedatos@mciassist.com Data Protection Officer: dpo@mciassist.com
2. PURPOSE OF PROCESSING
Personal data provided through the whistleblower channel will be processed exclusively to manage, investigate and resolve the communications received, guaranteeing at all times the confidentiality of the whistleblower and the data provided, in accordance with Law 2/2023 of 20 February, regulating the protection of persons who report regulatory infringements.
3. LEGAL BASIS FOR PROCESSING
The processing of your data is based on compliance with a legal obligation applicable to the data controller, pursuant to Article 6.1.c) of the GDPR, in relation to Law 2/2023 regulating the whistleblower channel.
4. CONFIDENTIALITY
MCI Assist guarantees the confidentiality of the whistleblower’s identity. The data received will only be accessible by the persons responsible for managing the whistleblower channel, who are subject to a duty of secrecy. Data will not be communicated to third parties except where required by law or by a competent authority.
5. DATA RETENTION
Data will be retained only for as long as necessary to resolve the report and, in any case, for a maximum period of 10 years from receipt, in accordance with current regulations.
6. RECIPIENTS
Data will not be disclosed to third parties except where required by law. Should the investigation require the intervention of competent authorities, only strictly necessary data will be communicated.
7. YOUR RIGHTS
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by contacting:
Email: protecciondedatos@mciassist.com
Written communication to: MCI Assist, S.L. C/ Santa Leonor nº65, Edificio B, 1º Derecha 28037 – Madrid
In your communication, please state as subject “Data Protection — Whistleblower Channel”, your name and surname, and your reasoned request. Proof of identity will only be requested where there are reasonable doubts about your identity.
8. COMPLAINTS
If you consider that the processing of your data is not appropriate, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).