I.- INTERNAL INFORMATION SYSTEM
In compliance with Law 2/2023, of February 20, regulating the protection of people who report regulatory infractions and the fight against corruption (hereinafter, "Law 2/2023"), R&G METAL SHAPING, SL(hereinafter, ?R&G METAL SHAPING? or ?the company?) states that it has an Internal Information System, with the company being responsible for the processing of personal data in accordance with the provisions of current legislation in this area.
In order to strengthen the information culture and integrity infrastructures of R&G METAL SHAPING, and to promote the culture of communication as a mechanism to prevent activities or omissions that may constitute infringements in the field of Information Law. European Union, serious or very serious criminal or administrative infractions, as well as labor infractions in the field of safety and health at work, R&G METAL SHAPING has a person Responsible for Criminal Compliance (RCP), who is also Responsible of the company's Internal Information System (RSII) (hereinafter, the "RCP/RSII" person). For these purposes, R&G METAL SHAPING has appointed as such the person who holds the position of Quality Manager of the company.
Information about infractions related to the areas indicated in the previous paragraph can be sent to the RCP/RSII person by any of the following means of the Ethical Channel (Internal Information Channel):
| – By email to the following address: canaletic@rgmetalshaping.com – By regular mail to the company address: Pol. Ind. Malloles, C. Esquirol, 4, 08500 Vic – to the attention of the person RCP/RSII-. – Through writing delivered to the person CPR/RSII. |
Informant persons may also request a face-to-face visit with the CPR/RSII person within a maximum period of seven days.
The information communicated verbally through a face-to-face meeting with the CPR/RSII person must be documented in one of the following ways, with prior consent of the reporting person:
a) By recording the conversation in a secure, durable and accessible format.
In this case, the reporting person will be warned that the communication will be recorded and they will be informed of the processing of their data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (General Data Protection Regulation or GDPR).
b) Through a complete and accurate transcription of the conversation carried out by the CPR/RSII person.
Without prejudice to the rights that correspond to them in accordance with data protection regulations, the reporting person will be offered the opportunity to check, rectify and accept the transcription of the conversation by signing.
The Internal Information System of R&G METAL SHAPING complies with the requirements of article 5.2 of Law 2/2023, that is:
a).- Allows people to whom Law 2/2023 applies to communicate information, by various means, about the infractions provided for in its article 2.
b).- It is managed securely, guaranteeing that communications can be treated effectively within the company, as well as the confidentiality of the identity of the reporting person and any third person mentioned in the communication and the actions carried out. develop in the management and processing of this, as well as data protection, preventing access by unauthorized personnel.
c).- It has a Protocol for the Internal Information System, for the use of the Ethical Channel, and for the actions of the person Responsible for Criminal Compliance and the Internal Information System that establishes guarantees for the protection of informants, essentially:
- Proof of receipt within seven calendar days following receipt of the information.
- Ordinary maximum period of three months to respond to the investigation proceedings, in the terms of article 9 of the Law, diligently completing and safeguarding an Information Record Book.
- Possibility of maintaining communication with the reporting person.
- Establishment of the right of the affected person to be informed of the actions or omissions attributed to him or her and to be heard.
- Guarantee of confidentiality when the communication is sent through reporting channels other than those established or to personnel not responsible for its treatment, as well as the obligation for the person who receives it to immediately send it to the CPR/RSII person.
- Respect for the presumption of innocence and the honor of the affected people.
- Respect for the provisions on Data Protection (Title VI Law 2/2023).
- Commitment to forward the information to the Public Prosecutor's Office immediately, when the facts could indirectly constitute a crime.
II.- PROCESSING OF PERSONAL DATA
R&G METAL SHAPING will process the personal data included in the communications that are received and are covered by Law 2/2023, as responsible for the treatment, in order to be able to manage them and initiate, where appropriate, the corresponding investigation procedure and adopt the appropriate corrective measures.
The legal basis of the treatment will be compliance with the obligations imposed by Law 2/2023. If the communication contains data of a special nature, these will only be processed when it is strictly necessary for the adoption of corrective measures and/or the initiation of the corresponding investigation procedure and/or the processing of sanctioning or criminal procedures that, where appropriate, proceed, in accordance with current legislation, and in these cases the legal basis will be the essential public interest. The processing of personal data will be essential, since without it the objectives and obligations stipulated by Law 2/2023 cannot be met.
Likewise, you are informed that these personal data may be processed by personnel authorized to do so only when it is necessary for the investigation of breaches of the company's internal regulations, violations in the field of European Union Law, criminal or administrative violations. serious or very serious, as well as labor violations in the field of occupational health and safety, for the adoption of corrective measures, or for the processing of sanctioning or criminal procedures that, where appropriate, may apply. Likewise, personal data may be communicated to third parties in the event of legal obligation, and may be communicated to the judicial authority, the Public Prosecutor's Office or the competent administrative authorities within the framework of said investigation.
Personal data will be kept for the time necessary to decide whether to initiate an investigation into the reported events. If it is appropriate to adopt corrective measures, the data will be kept for the entire duration of the application of these measures. On the other hand, in the event that it is necessary to initiate the processing of sanctioning or criminal procedures, the data will be kept for the entire period that the sanctioning or criminal procedure lasts.
In any case, if the decision on whether to initiate an investigation into the reported facts is not adopted within a period of three months, the personal data contained in the communication will be deleted, except for those that are strictly necessary to be kept blocked with the purpose of maintaining evidence of the operation of the company's Internal Information System in accordance with Law 2/2023.
Those personal data that reveal behaviors that are not included in the scope of application of Law 2/2023 will also be deleted, as well as those personal data not considered truthful, except that said lack of truthfulness may constitute a criminal offense, in which In this case, the information will be kept for the necessary time during which the corresponding judicial procedure is processed.
Finally, it is stated that, at any time, the communicating person may request the data controller to access their personal data, its rectification or deletion, the limitation of its processing, or oppose it, as well as the right to portability. of the data, by sending a letter to the email info@rgmetalshaping.com. In case of disagreement with the processing of your data, you may file a claim with the Spanish Data Protection Agency, the body that holds the control authority in the matter, located at C/ Jorge Juan, 6 (28001) Madrid (www.aepd.es).
III.- NON-RETALIATION
R&G METAL SHAPING expressly undertakes not to carry out acts constituting retaliation, including threats or attempted retaliation, against persons who submit a communication in accordance with the provisions of Law 2/2023, and to apply protection measures during the processing of a file, regarding the people affected by a possible communication.
IV.- EXEMPTION AND REDUCTION OF THE SANCTION
In accordance with the provisions of Law 2/2023, when a person who has participated in the commission of the administrative offense that is the subject of the information is the one who reports its existence by presenting the information, and provided that it has been presented Before the initiation of the investigation or sanctioning procedure has been notified, the administrative body competent to resolve the procedure, by means of a reasoned resolution, may exempt you from compliance with the administrative sanction that corresponds to you as long as the extremes mentioned in the article are proven. 40 of Law 2/2023.
(*) The Internal Information Channel allows the presentation of anonymous communications.
(**) Although whenever possible the use of the internal channel will be preferential, depending on the circumstances and severity of the information, communications may also be sent, where appropriate, to the Independent Authority for the Protection of Informants (in the Autonomous Community of Catalonia, before the Anti-Fraud Office of Catalonia), or to the corresponding authorities or autonomous bodies, to the Public Prosecutor's Office, to the European Public Prosecutor's Office, or to the competent authority as appropriate.