BCC fully complies with the prevailing legislation on the protection of personal data and, in particular, with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, and with Organic Law 3/2018, of 5th December, on Data Protection and guaranteeing digital rights, so that the processing of the personal data provided by the whistleblower when reporting via the Whistleblower Channel (hereinafter, the Channel), will be carried out in compliance with the applicable legal guarantees and obligations.
Banco de Crédito Social Cooperativo, S.A. (BCC), as the head entity of the Grupo Cooperativo Cajamar (GCC)
Registered Address: Parque Científico-Tecnológico de Almería (PITA) | Ciudad Financiera, 1 04131 Almería
E-Mail: protecciondedatos@grupocooperativocajamar.com
Data Protection Officer E-mail: dpd@grupocooperativocajamar.com
Unless the report is made anonymously, BCC, as the party responsible, will process the following personal data provided by the whistleblower: i) name, surname and other contact details; and ii) any additional data that may be included in the description of the alleged misconduct, or of the facts reported.
Personal data will be processed with the utmost confidentiality and strictly for the purposes indicated below.
The purpose of the BCC Whistleblower Channel is to manage, investigate and resolve the report filed by the interested party, relating to possible irregular actions, behaviour or events that may constitute a breach of both internal rules and the Code of Conduct, as well as the laws and other external regulations applicable to the activity of the Cajamar Group. The grounds for doing so are compliance with legal obligations and public interest.
Should the interested party be an employee of the Cajamar Group, the applicable grounds shall be the legitimate interest of the latter for the management and resolution of reports of irregular behaviour or events that constitute a breach of our internal rules.
Should a report be filed via our Channel, access to personal data shall be limited to those who carry out internal control and compliance functions at BCC and may only be accessed by personnel with human resources management and control functions if absolutely necessary.
Should a report be filed via our Channel, any personal data provided to us shall be kept only for the time necessary to investigate the facts reported, and, in the event that we do not follow up on the report, they will be kept anonymously.
In accordance with the prevailing data protection regulations, the whistleblower is entitled to request the exercise of his/her rights of access, rectification, suppression and opposition to the processing of his/her personal data, as well as the limitation of the processing and its portability
To exercise these rights, please send an e-mail to the following address: protecciondedatos@grupocooperativocajamar.com, providing proof of identity by means of a copy of your National ID card or equivalent documentary proof.
Should the whistleblower consider that we have failed to process his/her data in accordance with the regulations, the Data Protection Officer should be contacted at the following address: dpd@grupocooperativocajamar.com.
You are also entitled to file a complaint before the Spanish Data Protection Agency (AEPD).