Privacy Policy
The data provided by the user will be processed by Hisdesat Servicios Estratégicos, S.A. (hereinafter ‘Hisdesat’), with tax identification number (CIF) A83048363, for the purpose of managing your communication regarding breaches or potential risks of breach of Hisdesat’s Code of Ethics, and is based on your prior consent. In accordance with Hisdesat’s Procedure for the Reception and Management of the Ethics Channel, the personal data you provide in this form will be disclosed to Hisdesat’s Ethics and Criminal Prevention Committee and, where appropriate, to the governing bodies and/or competent authorities. Your data will be retained for one year, unless it is necessary to extend this period in order to implement corrective measures within the organisation or unless the regulations require a longer retention period due to the investigation process, after which the data will be deleted..
In accordance with Law 2/2023 of 20 February, governing the protection of persons who report breaches of regulations and the fight against corruption, their identity shall in all cases be kept confidential, and they shall be entitled to confidentiality and protection from reprisals.
Under no circumstances will personal data that is not necessary for the investigation of the reported acts or omissions be processed; where appropriate, such data will be deleted immediately.
Data subject to processing may be retained in the information system only for as long as is strictly necessary to decide whether to initiate an investigation into the reported facts. If it is established that the information provided, or part thereof, is untrue, it shall be deleted immediately upon becoming aware of this fact, unless such untruthfulness may constitute a criminal offence, in which case the information shall be retained for as long as necessary whilst the legal proceedings are ongoing.
En todo caso, transcurridos tres meses desde la recepción de la comunicación sin que se hubiesen iniciado actuaciones de investigación, se procederá a su supresión, salvo que la finalidad de la conservación sea dejar evidencia del funcionamiento del Sistema Interno de Información. Las comunicaciones a las que no se haya dado curso solamente podrán constar de forma anonimizada, sin que sea de aplicación la obligación de bloqueo prevista en el artículo 32 de la Ley Orgánica 3/2018, de 5 de diciembre.
In any event, if three months have elapsed since receipt of the report without any investigative proceedings having been initiated, the report shall be deleted, unless the purpose of retaining it is to provide evidence of the functioning of the Internal Reporting System. Reports that have not been acted upon may only be retained in anonymised form, and the obligation to block such reports, as provided for in Article 32 of Organic Law 3/2018 of 5 December, shall not apply.
You may exercise your rights of access, rectification, erasure, restriction of processing, objection to processing and data portability by writing to us at Paseo de la Castellana 149, 5th floor, Madrid, or by emailing pd@hisdesat.es. You may contact the Supervisory Authority at any time to assert your rights. (+info)