The necessary security measures shall be taken to ensure data security as determined by the risk analysis conducted in accordance with Article 32 of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR).
Likewise, the register of activities provided for by art. 30 of the RGPD, in relation to this type of processing, will be implemented at the time of registering such procedures.

Persons who make a communication through the Ethical Channel represent and warrant that the personal data provided are true, accurate, complete and updated, and shall hold harmless IGEMA and FUNDACIÓN FORMACIÓN Y FUTURO, as owner of the IGEMA website, from any liability that may arise from the breach of such representations and warranties. In any case, the data related to any investigated fact will be kept.

The personal data provided within the framework of communications and consultations made to the Ethics Channel, as well as the updates of the same, will be processed by FUNDACIÓN FORMACIÓN Y FUTURO with NIF G60336666 and address at C/Calvet 41, entresuelo Puerta 4, 08021, Barcelona.

The purpose of such processing is the investigation and resolution of inappropriate actions or conduct, especially in criminal and regulatory compliance matters. Likewise, its purpose is the management of consultations, doubts and/or improvement proposals in the existing systems in IGEMA and in FUNDACIÓN FORMACIÓN Y FUTURO.

FUNDACIÓN FORMACIÓN Y FUTURO will keep the personal data for the time strictly necessary to resolve the communications of non-compliance and to process the corresponding consultations and, once resolved, they will be kept duly blocked to comply with the legal obligations that, in each case, correspond.

The legal basis for data processing is the fulfillment of the legal obligation to resolve the queries made, applicable under the provisions of Law 10/1995, of November 23, 1995, of the Penal Code.

No automated decisions that may affect you will be made based on the personal information provided.

The rights of access, rectification, suppression, opposition, limitation of processing, or to oppose the processing in the legally permitted cases, as well as the right to data portability may be exercised, under the terms specified by current regulations, before FUNDACIÓN FORMACIÓN FORMACIÓN Y FUTURO, by written communication (via email -formaciónyfuturo@fundaciónff.com- or by post -C/Calvet 41, entresuelo Puerta 4, 08021, Barcelona-, with the ref. “Data Protection”), attaching a photocopy of your ID card and indicating the specific right you wish to exercise. You also have the right to file a complaint with the Spanish Data Protection Agency.

Said personal data will only be communicated to third parties with whom FUNDACIÓN FORMACIÓN FORMACIÓN Y FUTURO is legally or contractually obliged to provide them and to those companies in the legal sector to which, where appropriate, it has entrusted the provision of consulting and advisory services in relation to the management of the ethical channel, on behalf of FUNDACIÓN FORMACIÓN FORMACIÓN Y FUTURO, to the extent necessary for the provision of those services. Under no circumstances will FUNDACIÓN FORMACIÓN Y FUTURO carry out international transfers of your personal data to third countries or to an international organization. Only in the event that the fact brought to the attention of FUNDACIÓN FORMACIÓN Y FUTURO gives rise to administrative or judicial proceedings, the data provided may be communicated to the competent authorities for investigation and sanction. Where appropriate, the contracts provided for in art. 28.3 RGPD will be signed with the external suppliers who have access to or process the personal data and, where appropriate, transfers to third countries outside the European Union will be regularized in accordance with the regime provided for in arts. 44 et seq. of the GDPR.