Information on data protection for the use of the ADAC whistleblowing system BKMS®
The ADAC whistleblower system BKMS® is operated by EQS Group GmbH (Karlstraße 47, 80333 München) on behalf of ADAC SE (Hansastraße 19, 80686 Munich, Phone: (089) 7676-0, Fax: (089) 7676-2500, E-Mail: adac@adac.de). The data entered into the ADAC whistleblower system BKMS® is secured by technical and organizational measures. The encryption does not allow EQS Group GmbH to view the data.
Communication between your computer and the ADAC whistleblower system BKMS® takes place over an encrypted connection (SSL). The IP address of your computer will not be stored while using the ADAC whistleblower system BKMS®. In order to maintain the connection between your computer and the ADAC whistleblower system BKMS®, a cookie is stored on your computer that merely contains the session ID (a so-called null cookie). The cookie is only valid until the end of your session and expires when you close your browser.
Notices received via the ADAC whistleblower system BKMS® are accepted by ADAC Compliance Service GmbH on behalf of ADAC SE and forwarded to the responsible ADAC organization after an incoming inspection. This transmission also includes the personal data that you may have provided and takes place either via the ADAC whistleblower system BKMS® or via another technically secure channel. The ADAC organizations are the following:
- ADAC e. V.
- ADAC regional clubs:
- ADAC Berlin-Brandenburg e.V.
- ADAC Hansa e.V.
- ADAC Hessen-Thüringen e.V.
- ADAC Mittelrhein e.V.
- ADAC Niedersachsen/Sachsen-Anhalt e.V.
- ADAC Nordbaden e.V.
- ADAC Nordbayern e.V.
- ADAC Nordrhein e.V.
- ADAC Ostwestfalen-Lippe e.V.
- ADAC Pfalz e.V.
- ADAC Saarland e.V.
- ADAC Sachsen e.V.
- ADAC Schleswig-Holstein e.V.
- ADAC Südbaden e.V.
- ADAC Südbayern e.V.
- ADAC Weser-Ems e.V.
- ADAC Westfalen e.V.
- ADAC Württemberg e.V.
- ADAC SE and its affiliated companies
- ADAC Stiftung
- ADAC Luftrettung gGmbH
Nur die ADAC Compliance Service GmbH sowie die im Einzelfall zuständige ADAC Organisationseinheit, die mit der Bearbeitung betraut ist, haben Zugriff auf den Hinweis sowie die gegebenenfalls mit dem Hinweis überlassenen personenbezogenen Date Access to your notice and any personal data you provided with the notice, is reserved to ADAC Compliance Service GmbH and the ADAC organizational unit, responsible for the processing in the individual case.
In the event of a criminal prosecution, the personal data that may have been provided may be disclosed to state investigation authorities.
In accordance with the legal provisions, the accused person or persons must also be informed that a notice relating to them has been received via the ADAC whistleblower system BKMS®.
Any personal data that may have been provided will be deleted or anonymized after processing of the notice and in compliance with the legal retention periods.
| Information requirements | Explanation |
| Controller within the meaning of Art. 4 No. 7 GDPR | The legal person responsible for the operation of the ADAC whistleblower system BKMS® within the meaning of Art. 4 No. 7 GDPR: ADAC SE, Hansastrasse 19, 80686 Munich. |
| Purpose of processing | Provision of a system for receiving compliance reports and forwarding them to the respective competent ADAC organization/organizational unit. |
| IT system(s) used | BKMS® Compliance System |
| Data categories/data criticality | Personal data provided by you as a part of your notice, e.g. name and contact data. |
| Legal basis of processing Art. 6 para. 1 lit. f GDPR) | The processing is necessary to safeguard the legitimate interests of the controller or the aforementioned ADAC organizations to ensure legal compliance. |
| Retention period and/or deletion/anonymisation | Any personal data that may have been provided will be processed until they are transferred to the ADAC organization responsible for processing the notice. This is followed by the deletion/anonymization of any personal data in the ADAC whistleblower system BKMS®. |
| Information on the rights of the data subject (Art. 15 – 21 GDPR) | You have the following rights when collecting personal data:- Right of access by the data subject, Art. 15 GDPR,
- Right to rectification, Art. 16 GDPR,
- Right to erasure, Art. 17 GDPR,
- Right to restriction of processing, Art. 18 GDPR,
- Right to object, Art. 21, GDPR (if the collection of data is based on Art. 6 para. 1 lit. f GDPR),
- Right to data portability, Art. 20 GDPR (if the collection is based on the consent of the data subject).
|
| Disclosure of data to third parties | Notices received via the ADAC whistleblower system BKMS® are accepted by ADAC Compliance Service GmbH on behalf of ADAC SE and forwarded to the responsible ADAC organization after an incoming inspection. |
Last update: December 2019