Legal basis:
Act of June 14, 2024 on the protection of whistleblowers (Journal of Laws of 2024, item 928); introduced in connection with Directive (EU) 2019/1937 of the European Parliament and of the Council of October 23, 2019 on the protection of persons who report breaches of Union law (Official Journal of the European Union L of 2019, No. 305, p. 17).
Anonymous reports will not be considered.
Who can make a report?
The following persons are entitled to make a report in a work-related context:
- an employee – even after the termination of employment,
- a job applicant who has become aware of a violation of the law in the recruitment process or in negotiations confirming the conclusion of a contract,
- other persons in the context of cooperation with LPR.
Subject of the report:
The subject of the report may be information about a violation of the law consisting of an unlawful act or omission, or actions aimed at circumventing the law, including in the areas of:
- corruption,
- public procurement,
- services, products, and financial markets,
- public health,
- transport safety,
- privacy and personal data protection,
- network and information security.
How to make a report?
- electronically to the email address – sygnalista@lpr.com.pl indicated on the LPR website dedicated to whistleblower reports;
- by post to the address – Lotnicze Pogotowie Ratunkowe, ul. Księżycowa 5, 01-934 Warsaw, with the note "Whistleblower – to be delivered to the Representative" on the envelope.
Information clause
In accordance with the information obligation under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( ) (OJ EU L 119 of 04.05.2016); – referred to as GDPR, please read the Information clause presented below:
Information clause regarding the processing of personal data under the Act on the protection of whistleblowers
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 04.05.2016, as amended), hereinafter referred to as "GDPR", I hereby inform you that:
- The Data Controller is the Director of Lotnicze Pogotowie Ratunkowe. Contact details of the Data Controller: ul. Księżycowa 5, 01-934 Warsaw, tel.: (22) 22 99 931, e-mail: sekretariat@lpr.com.pl
- The Data Controller has appointed a Data Protection Officer who can be contacted in writing by traditional mail at the following address: ul. Księżycowa 5, Warsaw 01-934 or by e-mail: iod@lpr.com.pl.
- Your personal data is processed on the basis of applicable law, for the purpose of accepting the report and conducting an investigation on the basis of the legal obligation to which the controller is subject under the Act of June 14, 2024 on the protection of whistleblowers (Journal of Laws of 2024, item 928). The basis for the processing of your data may be consent (Article 6(1)(a) of the GDPR) or the fulfillment of the controller's legal obligations (Article 6(1)(c) of the GDPR), the performance of tasks in the public interest (Article 6(1)(e)), and when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Article 6(1)(f) of the GDPR).
- The controller ensures the confidentiality of your data in connection with the report received. In special cases, the processed data may be made available to supervisory authorities in accordance with the law and to entities authorized to do so by law and to entities acting on behalf of public authorities in connection with preparatory or court proceedings. In such cases, your data may be disclosed, as this is necessary in connection with the obligation arising from the provisions of law. In the case of processing data identifying the reporting person, personal data is subject to identity protection and the data is not disclosed to unauthorized persons.
- The purpose of data processing is to consider the report and implement the provisions of the Whistleblower Protection Act imposed on the controller. Providing data is voluntary, but necessary for the report to be considered.
- Your personal data will be stored for the period necessary to exercise the rights and perform the tasks related to the handling of the report or taking follow-up action, which may affect the storage period.
- In the case of the report being considered and the need to disclose the content of the report in this regard, your personal data and details characterizing you may be anonymized or pseudonymized (Article 4(5) of the GDPR), subject to transfer to the competent public authorities. The above-mentioned activities are carried out for the purpose of considering the report and not disclosing your personal data, and this is one of the measures to protect personal data, thanks to which it is impossible to identify a specific natural person.
- The data will not be transferred outside the EEA unless required by law. Your data will not be used for automated decision-making and will not be profiled. It will be processed in ICT systems and in traditional form. Your data will be processed manually and automatically in order to comply with legal obligations.
- You have the right to:
- access your data (Article 15 of the GDPR),
- rectify/correct your data (Article 16 of the GDPR),
- erase data processed without justification (Article 17 of the GDPR),
- restrict the processing of your data (Article 18 of the GDPR),
- lodge a complaint with a supervisory authority (Article 77 of the GDPR).
- You have the right to lodge a complaint about the processing carried out by the Controller with the President of the Personal Data Protection Office (uodo.gov.pl) at ul. Stawki 2, 00-193 Warsaw.
- In connection with the exercise of your rights under the Act on the protection of whistleblowers, you may contact the Ombudsman by calling the hotline: 800 676 676 or by email: biurorzecznika@brpo.gov.pl or the mailing address: Biuro RPO, al. Solidarności 77, 00-090 Warsaw.
- The data controller makes every effort to ensure all physical, technical, and organizational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations.