To be able to receive and process your report, you must confirm that you have read this Privacy Notice. If you do not accept the conditions set out in this notice, you will not be able to submit the report.

Please note that this channel is not intended for reporting emergencies.

The whistleblowing channel is managed by CROWDFARMING SL. (hereinafter, the COMPANY), using the ithikios platform, owned by Digital Products Development SL, a company specialized in providing internal whistleblowing management systems for organizations. Ithikios maintains a data processing agreement with the COMPANY for the purpose of receiving, storing, and forwarding communications to the Company’s Compliance team. Ithikios guarantees security and confidentiality for the purposes of the contracted processing.

Below is the basic information on how we process your personal data:

Basic information on privacy and data protection

Data Controller

CROWDFARMING SL. (hereinafter, the COMPANY), with registered address at C/ Anzuola 9, Madrid 28002, Spain, and Tax ID (NIF) B87952651. The company is registered in the Madrid Commercial Registry.

Data Protection Officer

You can contact us at: [email protected] 

Data processed and source

The following data will be processed:

• your contact details, if provided (name and surname, email, telephone number)
• name and position of the persons referred to in the report
• information (regardless of its nature) relating to the reported facts

Purpose of processing and legal basis

In accordance with applicable data protection regulations, the Company informs you that your personal data will be collected and processed for the following purposes:

• To analyze, process, and investigate the reported facts confidentially.
• To manage the query you submit.
• To exchange information in order to complete your request.
• To interview you, where appropriate, to clarify the reported facts.

Our legitimate interest is to ensure compliance with policies, internal rules, and/or applicable legislation.

Recipients of data disclosures

Those required by law, as well as service providers acting as data processors. Additionally, during an investigation, it may be necessary to share the reported facts with another company within the group if it is involved; your anonymity will always be preserved.

Personal data will not be disclosed to other third parties unless required by law.

International data transfers

Those arising from the processing of the report, query, or concern to any other company within the group, as well as those resulting from our relationship with the provider managing the whistleblowing channel, with the safeguards set out in the Privacy Policy.

Data subject rights

Access, rectification, erasure (right to be forgotten), restriction of processing, data portability, objection, and the right to lodge a complaint with supervisory authorities.