Data controller Harivenasa, S.L. located at Camino Urritzola km131868 Etxarren (Navarra), with telephone number +34 948 316 006 and email address [email protected].

Purpose of processing. To manage the procedure referred to in Law 2/2023, of 20 February, regulating the protection of persons who report regulatory breaches and the fight against corruption , as well as the record book of the information received and the internal investigations to which they have given rise.

Legal legitimacy of the processing. The processing necessary for compliance with a legal obligation applicable to the data controller (art. 6.1.c) of the GDPR) in connection with Law 2/2023.

Category of data processed: the identification data that you enter in the form or the information system as well as the data that you refer to in the information itself.

Storage periods. They will be kept for the time necessary to comply with the purpose for which they were collected and to determine the possible responsibilities that may arise from said purpose and the processing of the data.

Communications and/or transfers. Your personal data will be communicated to the company that provides the technological platform that provides the information system service (DIGITAL PRODUCTS DEVELOPMENT, S.L.).

Apart from these situations, your data may be communicated to the Judicial Authority, the Public Prosecutor's Office or the competent administrative authority within the framework of the criminal, disciplinary or sanctioning investigation. Finally, you are informed that your identity will in any case be reserved and that it will not be communicated to the persons to whom the reported facts refer or to third parties except in the cases indicated above or provided for in Law 2/2023, of 20 February, regulating the protection of persons who report regulatory breaches and the fight against corruption.

International Data Transfers: No such transfers are planned.

Rights of the data subject. You have the possibility of exercising your rights of access, rectification, deletion, portability, limitation or opposition. The exercise of the aforementioned rights may be done by means of a written request addressed to the data controller, under the terms subscribed to by current legislation. Likewise, you may file a complaint with the competent supervisory authority exercising this function in Spain, the Spanish Data Protection Agency (www.aepd.es).