Irregularity Reporting Form

Description of the report *

Person the report concerns

Location of completion

Date of the violation

Location of the violation

Potential witnesses of the violation (name, position)

Potential relevant evidence in the case

Nature of the violation

The data controller is the company receiving/handling whistleblower reports, i.e. the companies with respect to the matters concerning them:

• 1. Chespa Sp. z o.o. in matters concerning Chespa Sp. z o.o.

• 2. Chespa Wykrojniki Sp. z o.o. in matters concerning Chespa Wykrojniki Sp. z o.o.

• 3. Chespa Klisze Sp. z o.o. in matters concerning Chespa Klisze Sp. z o.o.

• 4. Chespa Farby Graficzne Sp. z o.o. in matters concerning Chespa Farby Graficzne Sp. z o.o.

Contact: rodo@chespa.eu

Data will be processed solely for the purpose and for the period necessary to fulfill the obligations related to receiving and handling whistleblower reports, including the statute of limitations related to relevant national laws, i.e., the Act of June 14, 2024, on Whistleblower Protection.
Providing data by the whistleblower is not mandatory—the report may be submitted anonymously.

Recipients – entities processing data on behalf of the company: entities providing support services in the scope of receiving or handling reports (as indicated in Article 28 of the Whistleblower Protection Act). Data may also be shared with independent data controllers, i.e., public authorities in cases specified by law.

The person whose data is processed has the right to access their personal data, correct it, delete it, or restrict its processing, the right to object to the processing, and the right to lodge a complaint with the President of the Office for Personal Data Protection.