Controller
SKATechnologie GmbH, Max-Eyth-Straße 9, 72793 Pfullingen, Germany. E-mail: info@ska-technologie.de
What we process
The content of your report, the chosen category and, only if you provide them, a reply address and the reference of an earlier report. Your name is not required.
All of this is encrypted in your browser with the reporting office's public key before it is sent. Form service and e-mail provider only see the encrypted text and a random reference; only the reporting office can read it.
What we do not process
This site sets no cookies, uses no analytics or advertising services and loads no content from third parties. Fonts are served from this server. We ourselves store no IP addresses and do not link connection data to reports.
Hosting
The site is hosted by Vercel Inc., USA, and served from Frankfurt. For technical reasons Vercel processes connection data such as IP address, time and requested page to deliver the site securely, and deletes it after a short time. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU standard contractual clauses. Details: https://vercel.com/legal/privacy-policy
Form service
When you submit a report, your browser sends the already encrypted report directly to the form service Web3Forms, which forwards it by e-mail to the reporting office. For technical reasons Web3Forms processes your IP address but cannot read the content; it acts as our processor. Details: https://web3forms.com/privacy
Purpose and legal basis
Receiving and handling reports of breaches of the law and of our principles. We set up this channel voluntarily; with fewer than 50 employees we are not obliged to under the German Whistleblower Protection Act. Legal basis is our legitimate interest in uncovering and remedying breaches (Art. 6(1)(f) GDPR).
Recipients
The internal reporting office; letters concerning the reporting office itself, management. Other persons receive information only as far as needed for investigation and follow-up, and without the identity of the reporting person unless a statutory duty requires disclosure.
Persons named in a report
If you are named in a report, we inform you about the processing of your data as soon as this no longer endangers the investigation and the confidentiality of the reporting person is preserved (Art. 14(5)(b) GDPR, § 29(1) BDSG). Your GDPR rights remain unaffected unless restricted for these reasons.
Retention
The documentation of a report is deleted three years after the procedure is closed, unless a statutory duty requires longer retention.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and complaint to a supervisory authority, in Baden-Württemberg the State Commissioner for Data Protection and Freedom of Information. For anonymous reports we can only match requests if you quote your report's reference.