Whistleblower policy - information to be provided for external reports

Information to be provided for external reports to the Federal Coordinator and to the regulatory authorities

1° eligibility requirements for protection;
2° the contact details necessary for the external reporting channels, in particular the electronic and postal addresses, and the telephone numbers for such channels, indicating whether the telephone conversations are recorded;
3° the procedures applicable to the reporting of breaches, including how the regulatory authority may request the reporting person to clarify the reported information or to provide further information, whether feedback is provided and, where applicable, the time limit for providing feedback and the type and content of such feedback;
4° the confidentiality rules applicable to the reports, and in particular the information on the processing of personal data in accordance with Article 21 of this Law, Articles 5 and 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general Regulation), Article 13 of Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by regulatory authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA and Article 15 of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC,  as appropriate;
5° the manner of the follow-up to be offered;
6° the remedies and procedures for protection against retaliation and the availability of confidential advice, for persons who are considering making a report;
7° a statement clearly explaining the conditions under which persons reporting to the regulatory authority are protected against incurring liability for a breach of the confidentiality rule; and
8° the contact details of the Federal Coordinator and of the Federal Institute for the Protection and Promotion of Human Rights.