Data Controller: QILIMANJARO QUANTUM TECH S.L.
Purpose: To manage the report submitted through the internal reporting channel, including its receipt, assessment, handling, investigation and, where applicable, the adoption of any appropriate measures.
Legal Basis: The processing is based on compliance with a legal obligation, pursuant to Article 6(1)(c) of the General Data Protection Regulation. Where the processing of special categories of personal data is necessary, such processing may be based on Article 9(2)(g) GDPR, on grounds of substantial public interest, in accordance with Article 30.5 of Law 2/2023.
Confidentiality: The identity of the reporting person will be treated confidentially and will not be disclosed to the persons concerned by the reported facts or to third parties, except where legally required or requested by a competent authority.
Recipients and access: Access to the data will be limited to the persons authorised by QILIMANJARO QUANTUM TECH S.L. to manage the internal reporting system and, where necessary, to other internal areas of the data controller that must be involved in the investigation or adoption of measures. The data may also be disclosed to courts, the Public Prosecutor’s Office, competent administrative authorities or third parties where required by law.
Retention: The data will be retained for the time strictly necessary to manage the report and, in any event, in accordance with the legally established retention periods. In particular, the data will only remain in the internal reporting system for the time necessary to decide whether an investigation should be initiated. If three months have elapsed since receipt of the report without any investigation being initiated, the data will be deleted from the system, unless retention is necessary to provide evidence of the operation of the system.
Rights: Data subjects may exercise their rights of access, rectification, erasure, to object, restriction of processing and data portability by sending a mail to [email protected]. In case of disagreement, data subjects may lodge a complaint with the Spanish Data Protection Agency.
Additional information about how we process your data: privacy policy
