Information on the Whistleblower Protection Act

Reporting violations

A report must contain information on violations that are punishable by law or fines or that violate other national and EU-wide regulations (see Section 2 HinSchG). Your report should only be made if there are reasonable grounds for suspicion and should go beyond mere assumptions.

False suspicions, rumours, speculation and reports of private misconduct unrelated to professional activities do not fall within the scope of protection of this law.

Reporting channels

The following reporting channels are available to you for reporting a tip-off. You also have the option of submitting anonymous reports. However, feedback on the processing status of your report and the follow-up measures can only be provided if you specify a contact option. Please let us know whether and how you would like to be contacted. At your request, there is also the possibility of a personal meeting.

Received reports

Reports are treated in the strictest confidence and are only accessible to the responsible agents. In accordance with § 15 HinSchG, the responsible processors are independent, free of conflicts of interest and have the necessary expertise. Upon receipt of the report, the internal reporting centre

1. confirm the receipt of your report after seven days at the latest¹⁾,
2. check whether the reported violation falls within the material scope of application of Section 2 HinSchG,
3. keep in touch with you¹⁾
4. ask you for further information if necessary ¹⁾,
5. take appropriate follow-up measures in accordance with §18 HinSchG.
6. You will receive feedback within three months after confirmation of the report or three months and seven days after receipt of the report. ^{1) 2)}

¹⁾ If you have provided us with a contact option.

²⁾ The feedback includes the notification of planned and taken follow-up measures and takes place provided that internal enquiries or investigations are not affected and the rights of the persons who are the subject of a report or are otherwise affected are not impaired.

External reporting channels

Alternatively, you have the option of contacting external reporting centres (usually the authorities responsible for the areas). The Federal Office of Justice (BfJ) has set up a central, external reporting centre. The existing reporting systems responsible for special cases at the Federal Financial Supervisory Authority (BaFin) and at the Federal Cartel Office as a further external reporting centre with special responsibilities will be continued.

In addition, there are external reporting centres set up by the respective federal states and you can submit reports to institutions, bodies or other offices of the European Union. These include the reporting channels of the Commission or the European Anti-Fraud Office (OLAF).

Further information on the federal government's external reporting procedures can be found on the Federal Office of Justice website.

Privacy notice

Reporting offices are authorised to process personal data insofar as this is necessary for the fulfilment of their designated tasks in accordance with the law. Personal data is therefore processed on the basis of Art. 6 para. 1 lit. c) GDPR in conjunction with Section 10 HinSchG, insofar as this is necessary for the reporting and clarification of the reported facts.

The reports will be deleted after the legally prescribed retention periods have expired. Further information on your rights such as the right to information, rectification, erasure, restriction of processing, data portability and other rights of objection and complaint can be found in our privacy policy.