Internal reporting channel Weber & Schaer Group

Investigate, prosecute and prevent legal violations

The establishment of whistleblower systems is a central component of the Whistleblower Protection Act. They are intended to ensure that breaches of the law are investigated, prosecuted and prevented. The reporting persons are to be protected from disadvantages that could threaten them because of their report or deter them from reporting in in the first place. Simultaneously, whistleblowing enables breaches to be countered at an early stage and damage to companies, employees and business partners to be reduced.

At the same time, we ask you to consider that suspicions and accusations can sometimes lead to serious consequences and would therefore ask you to use this reporting system responsibly.

Reporting form

This field is for validation purposes and should be left unchanged.

Name (optional)

Name (optional)

E-Mail
Zur Gewährleistung der gesetzlichen vorgeschriebenen Kommunikation zum Stand des Verfahrens benötigen wir eine E-Mail-Adresse. Diese muss keinen Rückschluss auf Ihre Person ermöglichen.

E-Mail(Required)

Sachverhalt
Bitte beschreiben Sie den Vorfall so detailliert wie möglich. Dabei sind insbesondere nachfolgende Angaben hilfreich.

In welcher Beziehung stehen Sie zum Unternehmen des Meldekanals?
Nach Ihrer Ansicht an dem Vorfall beteiligte Personen?
Wurde nach Ihrem Kenntnisstand bereits jemand im Unternehmen informiert?

Sachverhalt(Required)

Anlage
Nur eine Datei auswählbar.

Anlage

Max. file size: 20 MB.

Ihre Angaben werden selbstverständlich vertraulich behandelt. intersoft consulting services sichert Ihnen zu, Ihre persönlichen Daten ausschließlich zum Zweck der Bearbeitung Ihrer Anfrage zu nutzen und nicht an Dritte weiterzugeben. Die Datenübertragung erfolgt verschlüsselt.

Procedure

Confirmation of Receipt and Review

After submitting the form, whistleblowers will receive confirmation of receipt of the report within 7 days.

The report is then reviewed for validity, in particular to determine whether there is sufficient evidence of an actual violation as defined by the Whistleblower Protection Act. During this process, contact is maintained with the whistleblower and, if necessary, additional information is requested. At the request of the whistleblower, a face-to-face meeting may also be arranged.

Internal Review

If there is sufficient evidence of a violation, the matter will be referred to specific individuals within the company for further investigation, while maintaining confidentiality.

As part of the subsequent investigation, particular attention will be paid to determining which measures are necessary in each individual case to address any identified violations and to develop measures for the future. If the report refers to specific individuals, they will be informed of the report (generally while maintaining their anonymity) and given the opportunity to respond.

Feedback

Whistleblowers will receive feedback within 3 months regarding planned and already implemented follow-up measures, as well as the reasons for them. This provision may be waived if it interferes with the internal investigation and/or infringes upon the rights of the individuals who are the subject of a report or who are named in the report.

Frequently asked questions

We’ll tell you what you need to know about the reporting center.

Will my information be kept confidential?

The Whistleblower Protection Act (HinSchG) provides for comprehensive protection of the whistleblower’s identity. This reporting channel is therefore designed, set up, and operated in such a way that not only the confidentiality of the whistleblower’s identity but also the confidentiality of third parties mentioned in the report is maintained, and unauthorized third parties are denied access to it.

Whistleblowers can also submit reports anonymously. To ensure that communication remains possible, we recommend using a neutral-sounding email address for this purpose.

What information should be provided?

To ensure a complete report, whistleblowers should describe the facts in a way that clearly indicates which conduct or circumstance they believe constitutes a violation.

To enable any necessary follow-up questions regarding the report and to provide whistleblowers with feedback on the progress and outcome of the process, it is necessary to provide an email address and, if applicable, the whistleblower’s name.

What other ways are there to get in touch?

Alternatively, you can submit a report by phone at +49 40 790 235 380 or in person at our offices after making an appointment by phone:

intersoft consulting services AG

Hamburg: Beim Strohhause 17, 20097 Hamburg
Berlin: Schöneberger Ufer 47, 10785 Berlin
Cologne: Dürener Straße 189, 50931 Cologne
Stuttgart: Calwer Straße 15, 70173 Stuttgart
Munich: Bernhard-Wicki-Straße 7, 80636 Munich

You can also send messages to whistleblowing@intersoft-consulting.de.
Encrypted with PGP: Download public key

Why is Intersoft Consulting the operator of the reporting channel?

Companies can operate reporting channels themselves or outsource them to third parties. Outsourcing to a specialized and experienced third party offers many advantages; in particular, it ensures that reports from whistleblowers are handled professionally, and the neutrality of an external provider fosters additional trust. At the same time, however, outsourcing to a third party does not relieve the affected company of its obligation to take appropriate measures to remedy any potential violation.

At intersoft consulting services AG, only consultants with specialized training are involved in the duties of an internal reporting office, and the company ensures that all necessary legal requirements are met.

Whistleblowers are encouraged to report violations through this whistleblower system. However, there are also external reporting channels operated by the respective competent authorities. You can find the external reporting channel established by the Federal Office of Justice (BfJ) at this link. In addition, the existing reporting systems at the Federal Financial Supervisory Authority (bafin.de) and the Federal Cartel Office (bundeskartellamt.de) will continue to operate for their respective areas of responsibility. In addition to the reporting procedure under the Whistleblower Protection Act, there are corresponding reporting procedures for submissions to institutions, agencies, and other bodies of the European Union. These include external reporting channels of the European Anti-Fraud Office (anti-fraud.ec.europa.eu), the European Maritime Safety Agency (emsa.europa.eu), the European Aviation Safety Agency (easa.europa.eu), the European Securities and Markets Authority (esma.europa.eu), and the European Medicines Agency (ema.europa.eu).

Privacy / Imprint

We are providing you with information on how we process your data and how you can exercise your rights under the General Data Protection Regulation. The specific personal data we process and the purpose for which we do so depend on the details provided by the whistleblower in each report.

Who is responsible for data processing?

The person responsible is:

intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
Phone: +49 40 790235 – 0
Fax: +49 40 790235 – 170
Email: info@intersoft-consulting.de

How can you contact the Data Protection Officer?

You can contact our Data Protection Officer at:

Katrin Rammo
Data Protection Officer
Beim Strohhause 17
20097 Hamburg
Email: datenschutzbeauftragter@intersoft-consulting.de

Website Deployment

The access log generated by our web server is anonymized. However, our system uses certain security plugins from WordPress that protect our website from attacks and misuse. Normal, non-malicious website visits are generally not logged by the plugins. If there is suspicion of an attack on our system, data about the visitor’s computer system is automatically logged for forensic purposes and stored in firewall logs.

Type of data
The data stored includes the IP address, date and time, browser user agent, and the reason for the suspicious activity.

Purpose of Processing
Log files are collected to record blocked or malicious website access attempts, to support forensic investigations, and to ensure the security and stability of our website.

Legal basis
The legal basis is Article 6(1), sentence 1, subparagraph (f) of the GDPR.

Legitimate Interests
The purposes mentioned also constitute a legitimate interest in data processing within the meaning of Article 6(1), first sentence, subparagraph (f) of the GDPR.

Data Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is usually the case after one month at the latest.

Right to Object
To the extent that data is collected as described, this is strictly necessary for the security and operation of the website. Therefore, there is no right to object.

Use of the Whistleblower System

If you submit a report through the reporting platform we operate, we will process your personal data as well as the personal data of individuals you name in your report.

Type of Data
The following categories of personal data are processed when using the reporting platform:

First Name, Last Name (if you choose to disclose your identity)
Email address
Contact information (phone, fax, address), if applicable
if applicable, additional personal data arising from the reported facts.

What are the sources of the data?
We process personal data that we receive from you as a whistleblower.

For what purposes do we process your data, and on what legal basis?
We process your personal data in accordance with the General Data Protection Regulation (GDPR) and all other applicable laws for the purpose of complying with the legal obligations arising from the Whistleblower Protection Act.

Legal basis: To fulfill legal obligations (Art. 6(1)(c) GDPR in conjunction with §§ 12, 13, 14 HinSchG)
We—intersoft consulting services AG—are commissioned by companies to perform the duties of the internal reporting office pursuant to Sections 12, 13, and 14 of the HinSchG. Under § 10 HinSchG, reporting offices are authorized to process personal data to the extent necessary to fulfill their duties.

To whom is your data disclosed?
Data is only ever shared in connection with the whistleblower’s report to the relevant company.

Is your data transferred to countries outside the European Union (so-called third countries)?
There are no plans to transfer data to countries outside the European Union.

How long will your data be stored?
We will delete your data as soon as it is no longer needed for the purposes mentioned above. This is subject to a legal obligation to document the reports.

The documentation will be deleted three years after the conclusion of the proceedings. The documentation may be retained for a longer period to comply with the requirements of the Whistleblower Protection Act or other legal provisions, as long as this is necessary and proportionate.

What rights do you have regarding the processing of your data?

We will be happy to inform you whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to receive the information specified in detail in Article 15 of the GDPR. The restrictions set forth in Sections 29, 34, and 35 of the German Federal Data Protection Act (BDSG) may apply.
In addition, subject to the respective legal requirements, you have the right to rectification (Article 16 of the GDPR), the right to restriction of processing (Article 18 of the GDPR), the right to erasure (Article 17 of the GDPR), and the right to data portability (Article 20 of the GDPR).

What rights do you have in the event that your data is processed on the basis of a legitimate or public interest?

Pursuant to Article 21(1) of the GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1), first sentence, subparagraph (e) of the GDPR (data processing in the public interest) or Article 6(1), first sentence, subparagraph (f) of the GDPR (data processing to safeguard a legitimate interest).

You may withdraw your consent to the processing of personal data at any time. Please note that the withdrawal of consent applies only to future processing.

Without prejudice to these rights and the possibility of seeking other administrative or judicial remedies, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the location of the alleged infringement, if you believe that the processing of your personal data violates data protection regulations (Art. 77 GDPR).

Legal Notice

intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg

Phone: +49 40 790235 – 0
Fax: +49 40 790235 – 170
Email: info@intersoft-consulting.de

CEO: Thorsten Logemann
Board Member: Dr. Nils Christian Haag
Chairman of the Supervisory Board: Ralf Schmidt

VAT ID: DE 175966522
Commercial Register: HRB 114727
The court of registration is Hamburg

Thorsten Logemann, intersoft consulting services AG, Beim Strohhause 17, 20097 Hamburg, is responsible for the content.