Data Protection

The entity named in the imprint is the responsible entity for processing the personal data of the users of the whistleblower portal. 

In the context of providing the portal, we use the whistleblower system of the service provider Vispato GmbH, Hansaallee 299, 40549 Düsseldorf. We have concluded an order processing agreement with Vispato GmbH. Information on data protection at Vispato GmbH can be found at and at

Our contact information as the responsible party can be found in the imprint of the portal. Any processing of your personal data, in particular the collection, storage and use thereof, shall be carried out exclusively in accordance with the content of this data protection declaration and the applicable data protection regulations, in particular the European General Data Protection Regulation (DSGVO) and the national data protection regulations.

In the event of suspected violations of the law, other breaches of rules or criminal acts, you can anonymously provide information on the suspected cases via the whistleblower portal. The information will then be forwarded to the contact persons expressly named for further processing.

The report can be made completely anonymously, so that no conclusions can be drawn about the person. Furthermore, the report is stylometrically adapted, i.e. all punctuation marks are removed and all words are written in lower case, so that identification is additionally excluded. All information is encrypted end-to-end. No personal data, such as IP address or location data, is stored on the servers hosted by DATEV.

If you wish to be available for queries, you will receive a link to the conversation. Together with the key you have specified, you will then be able to access the conversation and answer any queries.

If you nevertheless provide personal data, such as your name, on a voluntary basis, the personal data will be processed on the basis of your consent pursuant to Art. 6 (1) a) DSGVO. In this case, the processing is carried out solely for the purpose of receiving and clarifying the suspicious case and the information is deleted after the purpose no longer applies.

When using the portal, further server-related data may be generated. In this regard, we refer to our general data protection declaration. This can be found on our homepage The function of the portal is limited to the reporting of suspicious cases. No tracking services or other cookies are set within the scope of the tip portal none.

With regard to the processing of your personal data, you have extensive rights. First of all, you have a comprehensive right to information and, if necessary, you can demand the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have a right of objection. With regard to the personal data you have provided to us, you also have a right to data portability. If you would like to exercise any of your rights and/or receive more information about this, please contact our data protection officer. 

Once you have given your consent, you may freely revoke it at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. If the processing of your personal data is not based on consent but on another legal basis, you may object to this data processing. Your objection will result in a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.

Insofar as we are obliged to do so by data protection regulations, we have appointed a data protection officer to support us in data protection issues. If you are of the opinion that the processing of your personal data by us does not comply with the applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. You can also complain to our data protection officer; the data protection officer will then review the matter and inform you of the outcome of the review.