Report a violation

How to submit a report

Reports of legal violations can be submitted through the following channels:

Please use the dedicated violation reporting form available at zgloszenia.exlegeiod.pl or utilize the other channels specified above when submitting your report.

What can be reported

Reports of legal violations may concern the following areas:

• Public procurement
• Financial services, products and markets, and prevention of money laundering and terrorist financing
• Product safety and compliance
• Transport safety
• Protection of the environment
• Radiation protection and nuclear safety
• Food and feed safety, animal health and welfare
• Public health
• Consumer protection
• Protection of privacy and personal data, and security of network and information systems
• Breaches affecting the financial interests of the European Union
• Breaches relating to the internal market, including rules of competition and State aid

Who can submit a report

The following individuals, in particular, are authorized to submit internal reports:

• Employees of Muszynianka, even if the employment relationship has already ended.
• Candidates for employment who acquired information about a breach during the recruitment process.
• Individuals providing work on a basis other than an employment relationship, including civil law contracts.
• Interns.
• Volunteers.

Whistleblower protection

The reporting person may remain completely anonymous. In such cases, do not provide any identifying data in the form.

The applicable procedure

Muszynianka Sp. z o.o. operates under the Procedure for Receiving Reports and Taking Follow-up Actions, which is available for review in the Administration building:

GDPR Information Clause

The Data Controller of the personal data contained in the report is Muszynianka Sp. z o.o., with its registered office in Krynica-Zdrój, ul. Kościuszki 58, 33-380 Krynica-Zdrój.

Purposes of processing

• Handling the report: analysis, registration, conducting follow-up actions, drafting reports, archiving (legal basis: Article 6(1)(c) of the GDPR: legal obligation).
• Pursuing and defending against claims: securing information in the event of legal proceedings (legal basis: Article 6(1)(f) of the GDPR: legitimate interest).

Data recipients

Data may be transferred to: advisory, audit, and control entities; IT service providers; archive management entities; and public authorities authorized by law.

Retention period

Personal data will be retained for the period strictly necessary to handle the report, and subsequently for the period mandated by law regarding archiving and the statute of limitations for claims.

Rights of the data subject

• Right to access data, including the right to obtain a copy (Art. 15 GDPR).
• Right to rectification of data (Art. 16 GDPR).
• Right to erasure of data (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to object to processing (Art. 21 GDPR).
• Right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Providing personal data in the reporting form is entirely voluntary. The data will not be processed in an automated manner and will not be subject to profiling.