Data privacy statement
Lenzing places great importance upon the protection of the personal data (data) of the reporter (if you reveal your identity) and of persons that are named in the report. Such personal data are only processed by Lenzing upon the foundations of the applicable rules on the protection of data for the purpose of the operation of a whistleblower system and the investigation of reports received via such system. The processing of personal data is necessary for the purpose of the legitimate interest of Lenzing, namely monitoring compliance with legal obligations and internal rules within the company/group.
The whistleblower system (BKMS® System) serves for securely and confidentially receiving, processing and managing reports regarding violations of the rules applicable to Lenzing. The whistleblower system is operated by a specialized company, EQS Group GmbH, Karlstraße 47, 80333 Munich in Germany, on behalf of Lenzing. Personal data and information entered into the whistleblower system are stored in a database operated by EQS Group GmbH in a high-security data center. Only a very limited number of expressly authorized external legal advisors and team members at Lenzing, bound by strict confidentiality obligations, have access to the data. EQS Group GmbH and other third parties do not have access to the data. This is ensured in the certified procedure through extensive technical and organizational measures (e.g. communication between the reporter's computer and the whistleblower system over an encrypted connection, data storage inside the whistleblower system with multiple levels of password protection).
Any report received will be investigated, and any personal data received or collected by Lenzing during such investigation will be treated, in full compliance with the applicable data protection laws. Reported data will generally be deleted 2 months after conclusion of investigation or any legal, disciplinary or administrative proceedings.
If the statutory prerequisites are fulfilled you may (i) request access, rectification, erasure or restriction of processing of your personal data or even (ii) object to processing of your personal data.
Also, you have the right to lodge a complaint with a supervisory authority (DSB) in case of suspected violation with regard to your personal data.
Lenzing team members can find further details on the whistleblower system and the treatment of reports filed via this system in Lenzing's Whistleblower Directive.