Note on Data Protection
Employees, customers or business partners of Marquardt Management SE can use "iWhistle" to report violations of compliance regulations, such as antitrust or corruption law in particular ("Compliance" reporting channel), as well as certain violations of data protection regulations ("Data Protection" reporting channel) or human rights ("Human Rights" reporting channel).
The system for submitting reports is strictly separate from other systems. Only the responsible compliance employees have access to the reports. Other departments are only involved in the case of special issues if this is exceptionally required to process a specific case (e.g. the Group Data Privacy Officer in the case of data privacy incidents).  

The infrastructure of the system, including websites and database, is operated by the service provider iComply GmbH, located in 55116 Mainz, Große Langgasse 1A. iComply GmbH is contractually bound to strict confidentiality and to comply with all data protection requirements.

What personal data and information is collected and processed?
When reporting violations via "iWhistle", personal data: 

  • of the person submitting a report (e.g. name, contact details) (optional/voluntary!) and
  • of the persons affected by an incident (e.g. description of the actions of affected persons)

entered in the respective reporting form or transmitted via the protected mailbox are collected and processed. The data is processed by the Compliance Department in order to review the reported incidents, initiate and conduct investigations, and take remedial action where necessary. 

As part of the reviews, investigations and remedial actions to be taken, it may be necessary to share information about a reported incident with employees of other departments such as the Legal Department or the management of Marquardt Management SE, other companies, external advisors (e.g. legal advisors) or the competent authorities. We may also be obligated to report a reported incident to the relevant authorities and to the affected persons.

How long will personal data be stored?
The personal data and information you provide will be retained for as long as knowledge thereof is necessary to process the report and, if applicable, to initiate sanctions, or for as long as the data must be retained by law. If a notification proves to be unfounded, the notification together with any personal data contained therein will be deleted immediately.