Privacy Policy Ethical channel.

In order to receive and process your report, you must confirm that you have read this Privacy Notice. In case you do not accept the conditions in accordance with the provisions of the notice, you will not be able to make the complaint.

Remember that this channel is not intended to communicate emergencies. The ethical channel is managed by IPLAN GESTIÓN INTEGRAL S. L, using the ithikios platform, owned by Digital Products Development SL, a company specialized in offering internal complaint channel management systems for companies. Ithikios guarantees security and confidentiality for the purpose of the contracted treatment. Below, we show you the basic information about how we treat your personal data:

Responsible for treatment: IPLAN GESTIÓN INTEGRAL S. L, domiciled at Calle Llacuna nº 161, 2ºP. Office 1, 08018 Barcelona.

Data protection officer: You can contact us by email: [email protected]

Data subject to treatment and origin: They will be:

1. Your contact details, if you provide them (name and surname, email, telephone).
   
2. Name and position of the persons reported in the complaint.
3. Information (regardless of their nature) of the facts denounced.

Purpose of the treatment and Legitimation: Based on the legal obligation established in articles 10 and 13 of Law 2/2023, of February 20, regulating the protection of people who report regulatory infractions and the fight against corruption, to have these internal information systems (article 6.1.c GDPR).

In accordance with current regulations on data protection, the Company informs you that your personal data will be collected and processed in order to:

1. Analyze, process and investigate the facts communicated confidentially.
2. Manage the query you raise.
3. Exchange information in order to complement your request.
   
4. Interview you to clarify the facts communicated, if applicable.
   

Reservation of your identity: In accordance with article 31.1 of Law 2/2023, we inform you that your identity will in any case be reserved and that it will not be communicated to the persons to whom the facts related refer or to third parties.

Our legitimate interest is to ensure compliance with policies and standards and/or applicable legislation.

Data conservation criteria: We will keep your data for a maximum period of three months after notification of the irregularity if the facts have not been proven and provided that they are not necessary for other purposes or for evidentiary purposes of due control and supervision in the prevention of crimes. In the event that the facts are proven or with sufficient evidence, the data will be kept as long as necessary for the exercise by the entity of its rights before the courts of justice, and when it is no longer necessary for it, they will be deleted with adequate security measures to guarantee the anonymization of the data or the total destruction thereof.

Recipients of assignments: Those that are necessary according to Law, the service providers in their capacity as data processors. In addition, in the course of an investigation, it may be necessary for us to share the facts you report with another group company, if the latter is involved in the facts; We will always keep your anonymity. No data will be transferred to other third parties, except legal obligation.

Rights of the interested parties: Access, rectification, deletion or oblivion, limitation, portability, opposition and to file claims with the control authorities.