Mölnlycke processes personal data in the manner and for the purposes described in the tables below. The tables below also show the legal basis on which Mölnlycke bases its processing for each purpose and for how long we will retain your personal data.
What we do and why
We handle reports received through the whistleblowing channel by collecting and administering the reports. We will also communicate with the persons who the reports concern, including alleged witnesses of the reported incident. We will handle, follow-up and document the content of the report and any upcoming questions. We will do this in order to be able to properly handle all whistleblowing reports concerning violations of the law.
The personal data that we process:
- Contact information, such as name, telephone number, address and e-mail address
- Report history and report
- Employment information (such as job title and role)
- Pictures and audio recordings
- Personal data related to criminal convictions, suspicion of and/or actual violations of the law in the form of violations of, for example, the Money Laundering Act
Our legal basis for processing
Legal obligation: The processing of your personal data is required by law. If the personal data is not processed, our legal obligation cannot be fulfilled.
How we share and transfer your data
In order to fulfil the purposes stated above, Mölnlycke will share your personal data with the following recipients;
- With our legal advisors, that assist us in the investigation of whistleblowing reports
- With data forensics experts or other experts on a case by case basis
- Relevant authorities
- IT provider of Whistleblowing channel Convercent by OneTrust
to the extent it is necessary for them to perform their services to us.
Mölnlycke will not transfer your personal data to a country outside the European Union (“EU”)/European Economic Area (“EEA”) within the scope of this processing activity.
How long we keep your data
We process your personal data during the storage period required by law or otherwise during the time it is necessary for the establishment, exercise or defence of legal claims.
What we do and why
We will conduct investigations of misconduct and suspected offenses committed within Mölnlycke's organization in the form of suspected or actual violations of law, with the purpose to properly handle all suspected violations of law within Mölnlycke’s organization. To achieve this we will handle, follow up and document whistleblower reports contents and upcoming questions. We will collect and review information from the IT-equipment and the digital systems you use within your employment and that Mölnlycke controls. We will also interview relevant persons within the investigation, including alleged witnesses of the reported incident and contact the relevant authorities for the investigation.
The personal data that we process
- Contact information, such as name, telephone number, address and e-mail address
- Report history and report
- Employment information (such as job title and role)
- Pictures and audio recordings
- Communication history
- Internet history
- User history from the IT-equipment and digital systems that you as an employee use within the framework of your employment and that Mölnlycke controls
- Personal data related to criminal convictions, suspicion of and/or actual violations of the law in the form of violations of, for example, the Money Laundering Act
Our legal basis for processing
Legal obligation: The processing of your personal data is required by law. If the data is not processed, our legal obligation cannot be fulfilled.
How we share and transfer your data
In order to fulfil the purposes stated above, Mölnlycke will share your personal data with the following recipients;
- With our legal advisors, that assist us in the investigation of whistleblowing reports
- With data forensics experts or other experts on a case by case basis
- Relevant authorities
- IT provider of Whistleblowing channel Convercent by OneTrust
to the extent it is necessary for them to perform their services to us.
Mölnlycke will not transfer your personal data to a country outside the EU/EEA within the scope of this processing activity.
How long we keep your data
We process your personal data for the storage period required by law or otherwise for the time necessary for the establishment, exercise or defence of legal claims.
What we do and why
We will handle reports of violations of internal policies through collecting and administering reports received through the whistleblowing channel. We will also communicate with the persons who the reports concern, including alleged witnesses of the reported incident. We will handle, follow-up and document the content of the report and any upcoming questions. We will do this in order to be able to properly handle all whistleblowing reports concerning potential violations of internal policies.
The personal data that we process
- Contact information, such as name, telephone number, address and e-mail address
- Birthdate
- Registration history and registration number
- Employment information (such as job title, employee identifier and role of responsibility).
- Pictures and audio recordings
- Personal data related to actions in violation of Mölnlycke's Code of Conduct and internal policies
Our legal basis for processing
Legitimate interest: The processing is necessary to fulfil our legitimate interest in ensuring that our internal policies for our business are complied with.
How we share and transfer your data
In order to fulfil the purposes stated above, Mölnlycke will share your personal data with the following recipients;
- With our legal advisors, that assist us in the investigation of whistleblowing reports
- With data forensics experts or other experts on a case by case basis
- Relevant authorities
- IT provider of Whistleblowing channel Convercent by OneTrust
to the extent it is necessary for them to perform their service to us.
Mölnlycke will not transfer your personal data to a country outside the EU/EEA within the scope of this processing activity.
How long we keep your data
For this purpose, we will process your personal data until the investigation case is completed and for the time necessary to establish, exercise or defend legal claims.