In order to receive and process your complaint, you must confirm that you have read this Privacy Notice. If you do not accept the conditions in accordance with the provisions of the notice, you will not be able to make the complaint.

Remember that this channel is not intended to communicate emergencies.

The whistleblowing channel is managed by Institut Químic de Sarrià CETS Fundació Privada (IQS), using the ithikios platform, which is owned by Digital Products Development SL, a company specialized in offering internal whistleblowing channel management systems for companies. It maintains a contractual relationship with IQS in charge of processing for the purpose of receiving, storing and sending communications to the IQS Compliance team. Ithikios guarantees security and confidentiality for the purpose of the contracted processing.

Below, we show you the basic information on how we process your personal data:

Basic information on privacy and data protection:

1. Data controller

Institut Químic de Sarrià CETS Fundació Privada (IQS), with registered office at Via Augusta, 390, 08017, Barcelona with CIF G58022849. It is registered in the Register of Foundations of the Generalitat de Catalunya under number 88.

2.Data Protection Officer

You can contact through the email: [email protected]

3. Data subject to processing and origin

They will be:

• your contact details, if you provide them (name and surname(s), e-mail, telephone)

• Name and position of the persons reported in the complaint

• information (regardless of its nature) of the facts

4. Purpose of the processing and Legitimacy

In accordance with current regulations on data protection, IQS informs you that your personal data will be collected and processed for the purpose of:

• To analyze, process, and investigate the facts reported confidentially.

• Manage the query you send us.

• Exchange information in order to complement your application.

• Interview you to clarify the facts reported, if applicable.

Our legitimate interest is to ensure compliance with applicable policies and regulations and/or legislation.

5.Recipients of assignments

Those that are necessary in accordance with the Law, the service providers in their capacity as data processors. Likewise, in the course of an investigation it may be necessary for us to share the facts that inform us with another company in the group, if it is involved in the facts; We will always keep your anonymity.

Personal data will not be transferred to other third parties, except under legal obligation.

6.International transfer recipient

Those that derive from the processing of the complaint, question or concern to any other company in the group, as well as those derived from our relationship with the provider that manages the Whistleblowing Channel with the guarantees set out in the Privacy Policy

7.Rights of the data subjects

Access, rectification, deletion or forgetting, limitation, portability, opposition and to submit claims to the supervisory authorities.