Compliance Platforms
Integrated access to the three pillars of the Borgstena Group's compliance: data protection, whistleblowing channels and the prevention of corruption.
The Borgstena Group adopts an integrated approach to compliance, based on dedicated digital platforms that ensure, in a transparent and permanently accessible manner, the fulfilment of legal obligations in three essential domains.
This page brings together the links to those platforms. Although each one responds to its own regulatory framework, they all share the same objective: to ensure that the Group's activity is conducted with integrity, with respect for people's rights and in compliance with the law.
1. A compliance ecosystem
Compliance is not an isolated domain but a system of instruments that reinforce one another. The protection of personal data, the protection of those who report infringements and the prevention of corruption are three complementary facets of one and the same culture of organisational integrity. The platforms indicated below give effect to that system, providing each interested party with the appropriate channel for each type of matter.
2. Available platforms
3. Interconnection between the platforms
The three platforms are autonomous but interconnected with one another. A report submitted through the Whistleblowing Channel may contain personal data, the processing of which is governed by the GDPR and subject to enhanced confidentiality measures; a situation detected in the context of the prevention of corruption may give rise to a report; and the processing of personal data in any of these contexts always observes the principles of data protection.
This interconnection does not blur the boundaries between the regimes. Each platform has its own channels, deadlines and rules, and choosing the correct channel is decisive for the effectiveness and timeliness of the response. In case of doubt as to the appropriate channel, the Permanent Support and Contact service of the Data Protection Platform provides the necessary guidance.
4. Protection of personal data across all platforms
The processing of personal data carried out within any of the compliance platforms observes the principles of lawfulness, fairness, transparency, data minimisation and storage limitation enshrined in Article 5 of the GDPR. In particular, data processed in the context of reports and corruption-prevention procedures benefit from enhanced security and confidentiality measures, given the sensitivity of the information concerned. The Data Protection Officer oversees the compliance of these processing operations on a cross-cutting basis.
