Box2Bit makes available to its employees, customers, suppliers, and other interested parties a Whistleblowing Channel to confidentially and securely report any possible irregularity, regulatory non-compliance, or conduct contrary to the ethics and values of the group.

This channel complies with the provisions of Law 2/2023 of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption, guaranteeing the confidentiality of the informant’s identity and protection against retaliation.

Upon accessing the channel, you must select the corresponding company to which you wish to address your communication. Each company will internally manage the reports received in accordance with its own procedures and the applicable regulations.

Access the Whistleblowing Channel (URL): https://miportaldelempleado.personiowhistleblowing.com/

The personal data and any other information you provide through this channel will be processed for the purpose of receiving communications, reviewing their content, and managing the resulting case file.

The data of the whistleblower, the reported person, third parties, and any other information will be retained for the time strictly necessary to decide whether to initiate an investigation into the reported facts.

Three months after the decision has been made regarding the initiation of proceedings or their closure, the information will be deleted from the system, unless the purpose of its retention is to provide evidence of the proper functioning of the criminal compliance prevention model, or if the investigation has revealed facts that must be preserved in accordance with the statutory limitation periods for possible actions or liabilities. The information will be safeguarded solely by those persons entrusted with internal control and compliance duties.

The processing of data within internal communication channels shall be considered lawful in accordance with Articles 6.1(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, Article 8 of Organic Law 3/2018 of 5 December, and Article 11 of Organic Law 7/2021 of 26 May, when, pursuant to Articles 10 and 13 of Law 2/2023 of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption.

Facts that may constitute a criminal or administrative offense, including personal data, may be communicated to the competent authorities, whether located within national territory or abroad, which could entail an international data transfer based on reasons of public interest and/or for the establishment, exercise, or defense of legal claims.

Measures have been taken to preserve the identity and ensure the confidentiality of the data of the persons affected by the information provided, especially that of the reporting person, if identified.

Data subjects may exercise their rights of access, rectification, erasure, portability, and restriction or objection by writing to protecciondedatos_box2bit@box2bit.com. Likewise, they may lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency, www.aepd.es) if they consider that their rights have not been duly respected.

Information about the Data Controller: HELAS CONSULTORES SL - B83017780