privacy policy

This data protection notice applies to data processing by:

Data controller:
Gebrüder Meiser GmbH, Edmund Meiser Straße 1, 66839 Schmelz-Limbach.
E-mail: info@meiser.de
Telephone: +49 (6887) - 3 09-0 
Fax: +49 (6887) - 3 09-30 00 

The company data protection officer of the GmbH can be contacted at the above address, with the addition of "for the attention of the data protection officer" or via datenschutzbeauftragter@meiser.de. 

In order to comply with the legal requirements (in particular the EU Whistleblowing Directive) and to strengthen integrity and responsiveness within the company, a whistleblowing system has been set up through which whistleblowers can anonymously report wrongdoing and misconduct within the company. 

Whistleblowers can use our browser-based whistleblowing system completely anonymously, i.e. it is not mandatory to disclose identity or provide other personal data when submitting a whistleblower report. It is also not necessary to register in the whistleblowing system to make a report. If the whistleblower submits a report via the whistleblowing system regarding a specific person in your company, we collect the information you provide on the facts of the case and the data of the person, if any, to whom the submitted report relates. We only process the data that the whistleblower manually enters into our whistleblowing system or communicates via the telephone hotline. This may include (but is not limited to) names, contact details and the employer of the whistleblower as well as other affected and/or accused persons. 

If the whistleblower uses the whistleblower telephone hotline to transmit the information, we hereby expressly point out that messages left on the answering machine will be stored as an audio recording. If we take the call in person, we will record the information provided in writing (and electronically) via the whistleblower reporting system for processing purposes. 

The provision of personal data relating to you is voluntary, therefore the processing of the whistleblower's data is based on express consent. The legal basis for the processing of your data is then Art. 6 para. 1 p. 1 lit. a) DSGVO. 

In addition, after receiving the tip, we are legally obliged to check the tip, which makes it necessary to process the data provided in the tip (of the whistleblower as well as the persons concerned and/or accused). The legal basis for the processing of your data is then Art. 6 para. 1 p. 1 lit. c) DSGVO. 

We retain the personal data and other information from your tip until the events or grievances described have been clarified and resolved, i.e. the purpose of the data processing has ceased to exist, Art. 5 para. 1 lit. e) DSGVO. In addition, statutory retention obligations may apply which oblige us to store data for a longer period (e.g. HGB, AO etc.). 5. 

Insofar as this is necessary to establish the facts and clarify the reported grievance in the respective company, the information required for this purpose will be forwarded to superiors or the affected department of the company. The processing and forwarding is also carried out completely anonymously and without providing personal data of the whistleblower, unless the whistleblower has expressly consented to this, Art. 6 para. 1 p. 1 a) DSGVO. 

If the company concerned (internal or external) has appointed or commissioned a whistleblowing officer, this officer will also have access to your information. If the company has appointed a whistleblowing coordinator internally, this coordinator will only receive the information that is necessary to determine the facts and clarify the reported grievance. 

If the whistleblowing concerns a criminal offence, the information can also be forwarded to the competent authority. This forwarding also takes place while preserving the anonymity of the whistleblower, unless you have given your express consent to the disclosure of your identity, Art. 6 para. 1 p. 1 a) DSGVO or we are legally obliged to disclose (legal basis) or disclosure is ordered by the authorities (legal basis). 

Our whistleblower system is hosted by Vispato GmbH, Hansaallee 299, 40549 Düsseldorf at Datev eG in Nuremberg. Accordingly, we have concluded an order processing agreement with Vispato GmbH within the meaning of Art. 28 DSGVO. Vispato GmbH does not have access to the data in the whistleblowing system. 

You have the right 

- in accordance with Art. 7 (3) DSGVO to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future; 

- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us.

- In accordance with Art. 16 DSGVO, to demand the correction of incorrect or the completion of your personal data stored by us without delay; 

- in accordance with Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims; 

- in accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;

- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller and 

- complain to a supervisory authority in accordance with Art. 77 DSGVO. The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information, Fritz-Dobisch-Str. 12, 66111 Saarbrücken, Germany.