Privacy Policy

In order to receive and process your report, you must confirm that you have read this Privacy Notice. If you do not accept the terms and conditions as provided in the notice, you will not be able to make the report.

Please note that this channel is not intended to communicate emergencies.

The whistleblowing channel is managed by PONENT MAR S.A. (hereinafter, the COMPANY), using the ithikios platform, which is owned by Digital Products Development SL, a company specialising in offering management systems for internal reporting channels for companies and which maintains a contractual relationship with the COMPANY in charge of the processing for the purpose of reception. storage and sending of communications to the Company's Compliance team. Ithikios guarantees security and confidentiality for the purpose of the contracted treatment.

Below is the complete information on Data Protection:


Data Controller

Contact details of the controller

PONENT MAR S.A.

DOM. Social: Calle Marqués De La Torre 9 Son Caliu 07181 Calvià, Illes Balears, Email: [email protected]

Data subject to processing and origin

· contact details, if provided (first and last name, e-mail, telephone number)

Name and title of the persons reported in the complaint

· information (regardless of their nature) of the facts denounced

Purpose of the processing

Analyzing, prosecuting, and investigating reported facts confidentially. Manage the query you raise. Exchange information in order to complement your request, and interview you to clarify the facts communicated, if applicable.

Data retention

The personal data collected will be kept for the legally required period.

Legitimacy of the processing

The legal basis for the processing is the legitimate interest of the controller, and compliance with a legal obligation.

Recipients of assignments

To the data processors, to provide the service, directly related persons or entities, and to the public administration with competence in the matter when it is mandatory.

Transfers

No international transfer is planned.

Rights of Data Subjects

The interested parties may exercise the following rights:

a) access to personal data concerning him/her;

b) rectification of your personal data for updating;

c) Deletion, when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

d) restriction of the processing of your data, in certain circumstances, in which case, the data controller will only keep the data for the exercise or defence of claims.

e) to object to the processing of your data, in certain circumstances and for reasons related to your particular situation, in which case, the data controller will only keep the personal data for the exercise or defence of claims.

f) portability of your personal data, when these are automated.

To do so, you may contact the data controller and request the form for the exercise of rights, which must be completed, signed and sent to the registered office informed in the "Data Controller" section. In the event that there are reasonable doubts as to the identity of the data subject requesting the exercise of rights, the data controller may request verification by providing identity documentation.

The data subject may lodge a complaint with the competent Data Protection Supervisory Authority, especially when they have not obtained satisfaction in the exercise of their rights, and/or in the way of contacting the controller.