Privacy notice
Our whistleblowing system protects the right of individuals to report suspected misconduct, violations, unethical behaviour, and other serious concerns. As an employee or contractor, you may be mentioned in a whistleblowing report, either as a person involved in the reported matter or as someone connected to the circumstances being investigated.
As part of handling a report, we may process personal information relating to you. This may include information submitted in the report as well as information already available to us, such as your role within the organisation. Where necessary and proportionate for the investigation, additional work-related information may also be reviewed.
The purpose of this processing is to investigate reported concerns, fulfil our legal obligations, and maintain a safe, ethical, and compliant working environment. Personal data is processed on the basis of our legal obligations and legitimate interests in preventing and addressing wrongdoing.
Information will be retained only for as long as necessary to investigate and manage the reported matter and to comply with applicable legal requirements. Access to the information is restricted to authorised persons and will only be shared where required by law.
The whistleblowing platform is provided by Eletive AB, which acts as our service provider and stores the information on our behalf. Eletive AB does not access or use the information for any purpose other than providing the service.
Cepheo is the data controller for the processing of personal data within the whistleblowing system. For more information about how we process personal data and how to exercise your privacy rights, please refer to our general Privacy Notice.