Whistleblowing Channel

General Terms and Conditions of use

1. General Information

In compliance with the Information Society Services and Electronic Commerce Services Act, we hereby inform you that the owner of the website www.canaldedenuncias.com (hereinafter, “the Website”) is Mazars Auditores, S.L.P. (hereinafter, “Mazars”), holder of Spanish Tax Identification Number B-61622262, and registered address at Calle Diputación, 260, 08007 Barcelona (Spain), registered in the Companies Registry of Barcelona, Volume 30734, Folio 212, Sheet B-180111, inscription 1, and the Official Registry of Accounting Auditors (ROAC) under number S1189.

For more information about Mazars, please visit www.mazars.com.

2. Access to and use of the Website and of means provided by Mazars

The present General Terms and Conditions of Use (hereinafter, the “General Terms and Conditions”) regulate the access and use of the Website and of means made available by Mazars for submitting reports, including, but not limited to, spaces aimed to face-to-face meetings (hereinafter, “Reporting Channels”) by the user.

This Website and Information Channels may only be used to send information about companies that have contracted the service with Mazars, guaranteeing the confidentiality of the whistleblower’s identity. In this case, you shall have received training or communication from your company informing you on how to proceed in order to report fraudulent conduct or conduct that may violate the company’s Internal Regulations.

Simple access, browsing and/or use of the Website, as well as access to or use of Communication Channels, confers on the user the status of channel user (hereinafter, the “User”) and implies full acceptance of the General Terms and Conditions.

The information available through this Website is not subject to contract and may be changed without notice. Services mentioned on the Website may not be available outside Spain. Mazars shall not be held liable for any problems arising from the consultation or use of this Website.

The General Terms and Conditions shall be periodically updated, so that those in force and published at the time of use of the Website shall be applicable. The User must carefully read these General Terms and Conditions each time Reporting Channels are accessed or used, in order to be aware of their updated content. If the User does not agree with these Terms and Conditions, the User must cease any use of the Reporting Channels.

These General Terms and Conditions shall apply without prejudice to the codes of ethics and conduct, policies and other Internal Regulations established by the organisation (hereinafter, the “Organisation’s Internal Regulations”) that has contracted the internal reporting channel management service with Mazars, of which the User shall have been informed by the Organisation.

For the purposes of these General Terms and Conditions, “Organisation” shall mean the organisation, company, association or other entity that has contracted with Mazars for the outsourcing of the internal reporting channel management service.

Likewise, “Internal reporting channel management service” shall mean the service provided by Mazars for the reception of irregularity reports through the Website and Reporting Channels made available by Mazars, which guarantees the confidentiality and security of the transmitted information, as well as the confidentiality of the whistleblower’s identity.

3. Conditions for the provision of Reporting Channels

3.1. Purpose

Mazars makes available to the User the Reporting Channels detailed in these General Terms and Conditions, so that the User can report infractions or irregularities of which he/she may become aware in the context of an employment, statutory or professional relationship with the corresponding Organisation, provided that said Organisation has contracted the internal reporting channel management Service with Mazars.

As a whistleblower, you are hereby granted access to and the right to use the Reporting Channels free of charge.

3.2. Persons who can submit reports

Users who may report such irregularities are those whistleblowers working in the private or public sector who have obtained information about breaches in a work or professional context, including those persons defined in article 3 of Law 2/2023 of 20 February, regulating the protection of persons who report regulatory and anti-corruption violations (hereinafter, “the Law”) and, following the provisions of Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law. Likewise, those persons defined in the Internal Regulations of the corresponding Organisation may also submit a report.

3.3. Behaviour or practices that may be the subject of a report

A communication may be sent to warn of actions or omissions provided for in Article 2 of the Law, such as, for example, serious or very serious administrative or criminal offences or breaches of European Union Law in certain matters provided for in the Law, as well as in the event of non-compliance with the Organisation’s Internal Regulations in accordance with its policies.

In this regard, Users of this internal reporting channel, in the event that their Organisation has outsourced this service, shall have received training or communication informing them on how to proceed to report fraudulent conduct or conduct that may contravene the Organisation’s Internal Regulations. Conduct that does not contravene the above should not be processed through this channel, but through the internal channels established in the Organisation.

Likewise, the report form shall display matters on which the User may report, by way of guidance and on a non-exhaustive basis. These drop-downs shall be understood as open clauses, so that there shall always be a free text for the User to submit his/her report in the event that he/she considers that the subject matter of the information is not previously enabled in the drop-down of the tool.

3.4. Reporting Channels

The User can decide whether to make the report anonymously or by name. In the case of a nominative report, the whistleblower’s confidentiality is guaranteed.

In addition, the whistleblower can choose the way in which he/she shall make the report, which can be done in the following ways:

  • Through Mazars platform, by filling in the report form available on the Organisation’s dedicated Website. The Organisation shall have previously publicised the existence of the dedicated Website and how to access it. The system shall assign a unique code, allowing you to follow the progress of your submission and to communicate with Mazars through the platform if you wish to do so.

  • At the whistleblower’s request, the communication may also be submitted by means of a face-to-face meeting with Mazars, within a maximum of 7 days of the report.

The existence of an external reporting channel of the “Autoridad Independiente de Protección del Informante, A.A.I.” (the Spanish Independent Whistleblower Protection Authority) is highlighted. Any person may report to the Independent Whistleblower Protection Authority (A.A.I.) or to the corresponding regional authorities or bodies the commission of any actions or omissions included in the scope of application of the Law, either directly or after reporting through the corresponding internal channel.

3.5. Instructions for submitting a report

Please do not use the Reporting Channels to report events that represent an immediate threat to life or property.

It will not be possible to file information through the present channel that could be considered as strictly secret and confidential, or which should be safeguarded in interest of national security.

Take your time and provide as much detail as possible. Be careful not to provide details, beyond your name, that could reveal your identity (e.g. relationship, job title, location, etc.). Mazars guarantees the anonymity of the whistleblower’s name, and not of information that could allow the Organisation to know the whistleblower’s identity through the analysis of the transmitted information.

Once the communication is sent, a password shall be received in your email account, allowing you to track your information and view messages sent by the internal reporting channel until you are contacted by phone. We would be grateful if you could keep this password in a safe place.

In the event that the Organisation establishes that there has been bad faith on the part of the whistleblower in making the information (e.g. using data that the whistleblower knows to be false or falsifying it), and this is formally communicated to Mazars, Mazars shall be obliged to communicate the whistleblower’s identity to the Organisation.

The whistleblower is responsible for the truthfulness of all the transmitted information, assuming the consequences in case of having acted in bad faith or having provided false documentation.

3.6. Process for receiving information

The management service of the internal reporting channel managed by Mazars implies the reception of the communication through Reporting Channels detailed in these General Terms and Conditions.

Once the information is registered, Mazars shall carry out a first verification to determine whether it exposes facts or conducts that are within the material scope of application of the Law or of the Organisation’s Internal Regulations. During these verifications, Mazars shall be able to contact the User if it is considered necessary to clarify or complete the information provided in the Report.

Once this preliminary analysis has been carried out, Mazars shall compile the information and documentation received in a Report that shall be communicated to the Head of the Organisation’s Internal Reporting System (or to the body designated by the Organisation to carry out such functions), so that the Organisation can continue with the processing, implement measures to guarantee the security and validity of the evidence and, if necessary, initiate the relevant internal investigations. Mazars guarantees the confidentiality of the whistleblower’s identity, which shall not be disclosed to the Organisation.

The Organisation may have its own Whistleblowing Policy. Where such a Policy has been communicated to you by the Organisation, it is your responsibility to familiarise yourself with its contents and to comply with it prior to making a report and throughout the investigation process following such a report.

4. User Obligations

  • As a User, you agree to comply with all the provisions of these General Terms and Conditions, and you must act in accordance with current legislation, good faith and public order, refraining from using the Reporting Channels in any way that could prevent or damage their proper functioning.

  • It is the User’s responsibility to comply with the Organisation’s Internal Regulations established by the Organisation and communicated to the User in relation to the management of information communications.

  • The User undertakes to formulate the report following the instructions set out in section 3.5 of these General Terms and Conditions and any others that may be established on the Website.

  • The User undertakes to use the Reporting Channels in an appropriate manner, for the sole purpose of reporting irregularities about the corresponding Organisation, and must refrain from using them for other purposes. In particular, the User is responsible for the truthfulness of his/her identity and all transmitted information, and to act in good faith.

  • The User undertakes to protect and keep confidential the keys or passwords he/she receives from the system to monitor his/her communication through the system, which are considered personal and non-transferable.

  • The whistleblower is responsible for the truthfulness of all the transmitted information, assuming the consequences in case of having acted in bad faith or having provided false information or documentation.

  • In the event that the Organisation establishes that there has been bad faith on the part of the whistleblower in making the information (e.g. using information that the whistleblower knows to be false or falsifying it), and this is formally communicated to Mazars, Mazars reserves the right to disclose the identity of the whistleblower, as well as in the event of a court order.

  • Mazars is not responsible for verifying the truthfulness of the transmitted information or documentation for the use that may be made of the Reporting Channels, for purposes other than those for which they are intended or for information that is addressed to organisations that have not contracted the services.

  • Mazars shall only collect documentation from the whistleblower and document the information provided by the whistleblower, so that measures to ensure the security and validity of the evidence are put in place as soon as possible, and appropriate internal investigations are initiated by the Head of the Organisation’s Internal Reporting System (or the body designated by the Organisation to perform such functions).

  • Furthermore, Mazars is not responsible for the course of internal investigations carried out by the Organisation.

  • Organisations that have contracted the Internal Reporting Channel Management Service with Mazars shall be free to determine how to act or not to act, based on the information transmitted by the whistleblower through the Mazars Channel. Mazars shall not be liable for the actions taken by the contracting Organisation on the basis of the Report communicated by Mazars to the Head of the Organisation’s Internal Reporting System (or the body designated by the Organisation to exercise such functions).

  • In the event that Mazars receives information concerning a possible money laundering offence, it reserves the right to transfer the information to the Money Laundering Prevention Commission, even without prior communication to the contracting company or to the User.

  • In the event that Mazars is obliged by law to cooperate with the authorities, it reserves the right to act on the basis of its obligations, even without prior notification to the contracting company or the User.

5. Modification, suspension or cancellation of Reporting Channels

As a Website User, you agree that Mazars may restrict access to, suspend and/or terminate your use of the Website and any related services or Reporting Channels for maintenance purposes or for any reason beyond our control, including but not limited to force majeure or acts of God, or as a result of the suspension or termination of the internal reporting channel service by the Organisation.

Mazars also reserves the right to improve, modify, add or remove functionalities and features of the Website or the Reporting Channels.

6. Industrial and intellectual property

Mazars is the owner of all the intellectual and industrial property rights of the Website, including all exploitation rights, as well as all the information contained in the Website (including, but not limited to, its information, texts, data, images, graphics, designs, source code, software, brands, navigation structures, databases, etc.).

The availability to Users of databases, images, photographs, patents, utility and industrial models, drawings, graphics, text files, audio, video and software property of Mazars through the Website or that appear on it does not imply, in any case, the transfer of its ownership or the concession of intellectual property rights or exploitation rights in favour of the User, other than the use that involves a licit use and in accordance with the Website’s nature. In this sense, the User is only authorised to view and obtain a temporary private copy of the content that he/she may need for his/her exclusive personal use for the purposes described in these General Terms and Conditions.

Consequently, the reproduction, diffusion, transmission, transformation, distribution, public communication, making available, extraction, reuse, exploitation or use of any nature, by any means or procedure, of any of them, is strictly forbidden without Mazars’ previous written authorisation. In case of contravention of the above, the sanctioning and civil responsibility regime foreseen for the infringement of Mazars’ intellectual property rights, protected by the current legislation, shall be applied.

Mazars and its logo are registered trademarks, as well as its signs, distinctive signs or logos. The use of these trademarks requires Mazars’ express authorisation, as well as the subscription of the corresponding contract agreed between the parties. By virtue thereof, unauthorised use of any of these trademarks may be subject to penalty or liability.

7. Links to third party websites and services

Hyperlinks or links contained in this Website may lead the User to other websites and web pages managed by third parties, over which Mazars has no control. Mazars is not responsible for the contents or the state of these websites and web pages, and access to them through this Website does not imply that Mazars recommends or approves their contents.

Likewise, the collection of personal data by these websites and web pages managed by third parties shall be governed by their respective policies of use and privacy, and we therefore recommend that you review them if you access their networks or computer resources.

8. Liability

In addition to the liability exemptions foreseen in section 4 of these General Terms and Conditions, Mazars is not responsible for the truthfulness, accuracy, precision or completeness of the information provided by the User to Mazars, for the use that may be made of the Reporting Channels for purposes other than those for which they are intended, for the information that is addressed to organisations that have not contracted the services, nor for the actions taken by the contracting Organisation on the basis of the Report communicated by Mazars to the person in charge of the Organisation’s Internal Reporting System (or the body designated by the Organisation for the exercise of such functions).

Furthermore, Mazars is not responsible for the Organisation’s treatment of the Report provided by Mazars after its delivery, including but not limited to the content of other reports, the follow-up interactions that may take place between the Organisation and the User, the course of internal investigations carried out by the Organisation or actions taken by the Organisation in response to the Report.

Mazars does not guarantee the full availability, reliability, accuracy or completeness of any part of the Website or related services provided to the User.

Mazars is not responsible for damages that could derive from interferences, omissions, interruptions, computer viruses, breakdowns and/or disconnections derived from the system’s functioning that could prevent or delay the navigation through the Website or the use of Reporting Channels due to causes not attributable to Mazars, and it is equally not able to guarantee the absence of harmful elements that could cause damages or alterations therein.

Notwithstanding the above, Mazars has adopted and shall adopt the necessary measures to guarantee the correct functioning and security of the Website and to avoid the existence and transmission of components that could be harmful for the Users.

Mazars reserves the right to interrupt access to the Website at any time and without prior notice for technical, security, control, maintenance, or power failure reasons, among others.

Mazars is not responsible for the use that the User makes of the content of the Website and that could entail a violation of any regulations, national or international, of the rights of intellectual or industrial property or of any other rights of third parties, as well as of the basis of the information, the errors or omissions of which the content of the same or others that could be accessed through them could suffer.

9. Processing of your personal data by Mazars

In compliance with the instructions given by the Organisation, Mazars shall process the User’s personal data to which it has access in order to be able to provide the Organisation with the internal reporting channel management service.

These processing activities are carried out by Mazars in its capacity as Processor, in accordance with Article 28 of the European Parliament and of the Council Regulation (EU) 2016/679 of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

Consequently, the processing of your personal data by the Organisation, as Data Controller, shall be as set out in the Organisation’s Privacy Policy, which shall be made available to the User before he/she submits his/her report through the Reporting Channels.

10. Use of cookies

The use of data storage and retrieval devices, such as cookies and other similar technologies, is governed by Our Cookie Policy.

11. Legislation

Access, use and activities carried out on the Website, as well as access to and use of the Reporting Channels and any aspect contained in or related to these Terms and Conditions shall be governed by Spanish law.

Last updated: 5 June 2023

Copyright © 2023. Mazars. All rights reserved.

Legal Notice and Privacy Policy

Legal Notice

In compliance with the Law of Information Society Services and Electronic Commerce, we inform you that the owner of the website www.canaldedenuncias.com (hereinafter, “the Website”) is Mazars Auditores, S.L.P. (hereinafter, “Mazars”), registered in the Companies Registry of Barcelona, Volume 30. 734, Folio 212, Page B-180111, 1st inscription, with Tax Identification Number B-61622262 and registered in the Official Register of Auditors (ROAC) under number S1189, with registered office at Calle Diputación, 260, 08007 Barcelona (Spain).

For more information about Mazars, please visit www.mazars.com

Identification of the Controller of your personal data

The information and/or personal data you provide shall be processed by Mazars Auditores, S.L.P. (Mazars) as Data Controller and whose identification details are the following:

  • NIF B-61622262.

  • Postal address: Alcalá, 63, 28014, Madrid.

  • Data Protection Officer’s contact: compliants@mazars.es

The purpose of this Privacy Policy is to cover the collection and processing of personal data that Mazars carries out as Data Controller in the event that the user of this Website accesses the “Contact” section to contact Mazars directly and submit a request for information, make an enquiry or submit a spontaneous complaint report.

Likewise, if you provide personal data in this way for the submission of a report addressed to one of the entities that have contracted with Mazars the outsourcing of the internal reporting system, we inform you that your data shall be processed by Mazars as the data processor of each of the organisations that contract with Mazars the outsourcing of the internal reporting system, and that they must, where appropriate, register the processing system in their corresponding records of processing activities.

Processed information

At Mazars, we shall process the information you provide us with through the forms on this Website. The data that may be processed to carry out the purpose(s) about which you have been and are being informed are the following:

  • Name

  • Surnames

  • Email

  • Telephone number

  • Company

  • Other data that may be identified in the Contact form.

Purposes for which we process your data

At Mazars, we may process your data to carry out one or more of the purposes described below, as appropriate and as you have been previously informed in the first informative layer on data protection at the time of collecting your data.

  • To deal with and manage queries and requests made through our contact form.

  • To deal with and process your report.

Purposes of data processing carried out by Mazars as Data Processor

In those cases in which you provide personal data for the submission of the report and, where appropriate, subsequent follow-up, we inform you that they shall be processed by Mazars in its capacity as data processor of each of the organisations that contract the outsourcing of the internal reporting system, and that they must, where appropriate, register the processing system in their corresponding registers of processing activities.

Legitimisation of data processing

We inform you that the basis that legitimises the processing of your data to attend to and manage the queries and requests made by you through the “Contact” form is your consent.

When your data is processed by us to deal with and process your report, the basis that legitimises the processing of your data is the fulfilment of a mission carried out in the public interest.

Data recipients

We inform you that your data shall not be communicated to third parties nor shall they be subject to international transfers, unless compliance with legal obligations is required or we have your consent.

However, we inform you that the data processed in order to deal with and process your report may be communicated to the State Security Forces and, where appropriate, to judicial bodies, when so required.

Data retention

Personal data provided shall be processed for the time strictly necessary to carry out the purposes for which you have been and are being informed and, in any case:

When we process your data to attend to and manage your queries and requests, your data shall be kept based on the following criteria: (i) attention and management of your query or request; (ii) existence of legal obligations of conservation and prescription periods of legal responsibilities that may arise; (iii) if you withdraw your consent; and (iv) request for deletion sent by you.

When we process your data in order to deal with and process your report, they shall be kept in the system for the time necessary to decide whether to initiate an investigation into the facts reported and in any case, after three months from the receipt of the communication without having initiated any investigation, unless we need to keep them to demonstrate the functioning of the system. In any case, they shall not be kept for more than 10 years.

Exercise of rights

Under the terms and scope established by the regulations in force, you have right to:

  • Confirm whether Mazars is processing personal data concerning you or not, access such data as well as information related to their processing.

  • Request the rectification of inexact data.

  • Request the suppression of data when, among other reasons, they are no longer necessary for the purposes for which they were collected, in which case Mazars will cease processing data, except for the exercise or defence of possible claims.

  • Request the limitation of your data processing, in which case your data shall only be processed with your consent, except for their preservation and use for the exercise or defence of claims or with a view to protect another natural person or legal entity’s rights or for important public interest reasons in the European Union or a given member State.

  • Oppose to the processing of your data, in which case Mazars will cease processing the data, except for the defence of possible claims.

  • Receive in a structured format, of common use and machine readable, the personal data concerned, provided to Mazars, which will be directly transferred to another controller, as soon as it is technically possible.

You may exercise these rights, as appropriate, by sending your request to Calle Alcalá 63, 28014 Madrid or by sending an email to compliants@mazars.es, in both cases together with a copy of your ID card or other equivalent document proving your identity.

We inform you that you can file a complaint before Agencia Española de Protección de Datos (the Spanish Data Protection Agency), when you consider that you have not obtained satisfaction in the exercise of your rights by Mazars, through its website: www.aepd.es.

Use of cookies

The use of data storage and retrieval devices, such as cookies and other similar technologies, shall be governed by the provisions of Our Cookie Policy.

Modification of this Policy

Mazars reserves the right to modify and/or update this Privacy Policy at any time, as well as any information that may appear on the Website without prior notice.

Create of a new complaint

Access your complaint

You have entered the Whistleblowing channel offered by Mazars Auditores, S.L.P. as an external and independent service to its Customers.

This channel ensures an anonymous communication of complaints filed by the staff or third parties related to the contracting company, to its Audit Committee, or body designated for such purpose.

By contracting this service, organizations will be implementing an effective mechanism of control, expression of due diligence exercised by administrators and directors to detect, through an agile and independent channel, irregular events within the organization, without the need of knowing the whisterblower's identity.

In turn, the channel users, if their company has contracted this service, would have received training or communication on the way to proceed when communicating fraud conducts or those that could violate internal rules. Conducts that do not contravene the above should not be processed through the channel, but through internal channels established by your organization.

All individuals using this channel are liable for the truthfulness of their identity and information provided, and for acting in good faith. Mazars reserves the right to reveal the whisterblower's identity, if the company formally informs Mazars that the whistleblower has acted in bad faith, as well as in case of court injunction.

Mazars will not be made liable for the verification of the truthfulness of the communicated information or documentation, for the channel's use for purposes other than those foreseen, for complaints sent to companies that have not contracted the services, or for actions taken by the contracting company on the basis of the Report communicated by Mazars to its Internal Audit Committee.

Information on the service shall be extended by accessing directly Mazars website, sending us the contact form, or sending an email to marketing@mazars.es.

We use our own cookies, necessary to ensure the proper functioning of the application. More Information.