Logo Utmar

Utmar complaint channel

We inform you that the personal data provided through this form will be processed by Utmar and by the Group company within whose scope the reported events occurred, as joint controllers of the personal data processing in accordance with Article 26 of Regulation (EU) 2016/679 General Data Protection Regulation (“GDPR”) and Article 29 of Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPyGDD”), for the purpose of initiating the investigation of the facts referred to in your communication and managing, where appropriate, the legal consequences that may arise from the investigations carried out.

The identity of the informant will never be subject to the right of access to personal data, and disclosure of this identity is limited solely to the judicial authority, the Public Prosecutor’s Office, or the competent administrative authority.

ADDITIONAL INFORMATION ON PERSONAL DATA PROTECTION

  • Controller: Utmar, together with the Group company within whose scope the events under investigation took place. For the Whistleblowing Channel, the address is Carrer del Molí, 48, Esplugues de Llobregat, Barcelona, España. The contact details of the Data Protection Officer are dpo@2-care.es.
  • The companies responsible for data processing have formalised the appropriate joint-controller agreement, the essential elements of which are available to the interested parties.
  • Purposes: Investigation of the reported facts and management, where applicable, of the legal consequences arising from the investigations carried out.
  • Legal basis for processing: Compliance with legal obligations for those Group companies that meet the requirements established in Law 2/2023 of 20 February regulating the protection of persons who report regulatory infringements and the fight against corruption, and public interest for the remaining Group companies participating in this internal Whistleblowing Channel.
  • Recipients: Data will not be disclosed to third parties except in cases where it is necessary for the adoption of corrective measures regarding the reported facts, compliance with a legal obligation, or at the request of competent authorities in accordance with established procedures.
  • Source of the data: The data provided by the informant and those derived from the investigation of the reported facts.
  • Rights: You may contact the Data Protection Rights Unit of the centre in writing through its registered office or offices, or via the email address dpo@2-care.es, in order to exercise, solely in relation to your personal data, the rights of access, rectification, objection, erasure, restriction and portability, and to exercise the right to oppose automated individual decisions that may significantly affect you or produce legal effects, in accordance with Article 22 of Regulation (EU) 2016/679. Likewise, if you deem it necessary, you may contact the Spanish Data Protection Agency (www.aepd.es), located at Jorge Juan Street, 6, 28001 Madrid, should you wish to lodge a complaint and safeguard your rights.
  • Data retention: The centre will retain your personal data only for the time strictly necessary to decide whether to initiate an investigation into the reported facts. Communications that are not pursued may be stored in anonymised form. In some cases, and due to obligations imposed by specific regulations, retention may reach a period of 10 years.

File a complaint Consult complaint.