The controller of the personal data provided in the report is Demonstracja testowa, seated at [registered address]. Data protection officer: [data protection officer contact].
Purpose and basis: we process the data to receive the report and conduct follow-up, based on a legal obligation (Art. 6(1)(c) GDPR) under the Whistleblower Protection Act.
Retention: we keep the data for the period required by law, as a rule 3 years after the case is closed, after which it is deleted.
Voluntariness: providing contact details is optional, you may report anonymously. You have the right to access, rectify, erase or restrict processing of your data and to lodge a complaint with the supervisory authority. The data is not profiled or transferred outside the EEA.
Last updated: 2026-10-06.