Data Protection Information and Consent
For the correct processing of your complaint, it is necessary to accept the provisions of this section and give
your consent for the processing of your personal data, if applicable. Otherwise, it
will not be possible to send the complaint.
The complaint channel is managed by Transunion Mobility, S.L.U., as the data controller,
using the Ithikios platform, owned by Digital Products Development SL, a
company specialising in offering internal complaint channel management systems for
companies. Ithikios guarantees security and confidentiality for the purpose of the contracted
processing.
Contact details: Polígono San Mateo – Sa Tapia – Parcela 7, Palma de Mallorca, province of
Illes Balears; Data protection officer: [email protected]; Purpose of
processing: the data provided by the whistleblowers will be used for the main purpose of
receiving and processing communications about irregularities, illegal conduct
or acts contrary to or serious or very serious violations of the ethical values, principles and
conduct guidelines of the Company's Code of Ethics and Conduct, the legislation, internal regulations and
commitments assumed by the Company, as well as any possible irregularity or
non-compliance. The data provided may be used to substantiate any disciplinary
measures or to formulate the corresponding actions before the authorities.
Additionally, the data provided on the facts reported by the whistleblower
may be processed for the management and processing of suggestions for improvement related to the
Company's Management System; Legitimacy for data processing: Compliance with
a legal obligation and consent; Categories of Recipients: those that are necessary
according to the Law, the service providers in their capacity as data processors.
Also, in the course of an investigation it may be necessary for us to share the facts you report with another company if it is involved in the events, always maintaining your anonymity;
International transfer: not planned;
Rights of interested parties:
a) access to personal data that concerns you;
b) rectification of your personal data for updating purposes;
c) deletion, when among other reasons, the data is no longer necessary for the purposes for which it was
collected;
d) limitation of the processing of your data, in certain circumstances, in which case, the
data controller will only retain the data for the exercise or defense of
claims. e) to object to the processing of your data, in certain circumstances and for reasons
related to your particular situation, in which case, the data controller
will only retain the personal data for the exercise or defense of claims.
f) to portability of your personal data, when they are automated.
To do so, you must send a written and signed request to the registered office indicated in the
"Data Controller" section. In the event that there are reasonable doubts as to the
identity of the interested party requesting the exercise of rights, the data controller may request verification by providing
identification documentation.
The interested party has the right to withdraw consent at any time, without affecting
the lawfulness of the processing based on the consent prior to its withdrawal.
Interested parties may file a claim with the competent Data Protection Control Authority, through its website https://sedeagpd.gob.es/sede-
electronica-web/vistas/infoSede/tramitesCiudadanoReclamaciones.jsf or by writing to the
Spanish Data Protection Agency, C/Jorge Juan, 6, 28001- Madrid, especially when
they have not obtained satisfaction in the exercise of their rights, and the way to contact
the person responsible.