The Complaint Channel is managed by IRIS Technology Solutions (hereinafter, the COMPANY), using the Ithikios platform, owned by Digital Products Development SL, a company specializing in providing internal complaint channels management systems for companies. They maintain a contractual relationship with the COMPANY for the purpose of receiving, storing, and forwarding communications to the Company's Compliance team. Ithikios guarantees the security and confidentiality for the purpose of the contracted processing.

Please remember that this channel is not intended for reporting emergencies.

To receive and process your complaint, you must confirm that you have read this Privacy Notice. If you do not accept the conditions as stated in the notice, you will not be able to file the complaint.

Basic information on privacy and data protection:

Data Controller

IRIS Technology Solutions (hereinafter, the COMPANY) with registered office at Carretera d’Esplugues 39-41, 08940, Cornellà de Llobregat, and with NIF B-64446123.

Data Protection Officer

You can contact through the email: [email protected]

Data subject to processing and source

They will be:

• Your contact details, if you provide them (name and surname, email, phone).
• Name and position of the persons mentioned in the complaint.
• Information (regardless of its nature) of the reported facts.

Purpose of processing and legal basis

In accordance with current data protection regulations, the Company informs you that your personal data will be collected and processed for the purpose of:

• Analyzing, processing, and investigating the reported facts confidentially.
• Managing the query you raise.
• Exchanging information to supplement your request.
• Interviewing you to clarify the reported facts, if necessary.

Our legitimate interest is to ensure compliance with applicable policies, rules, and/or legislation.

Recipients of disclosures

Those necessary in accordance with the Law, service providers in their capacity as data processors. Additionally, in the course of an investigation, it may be necessary to share the reported facts with another group company if it is involved in the facts; we will always maintain your anonymity. No personal data will be disclosed to other third parties, except as required by law.

Recipients of international transfers

Those derived from the processing of the complaint, query, or concern to any other group company, as well as those derived from our relationship with the provider managing the Complaint Channel , with the guarantees set out in the Privacy Policy.

Rights of the data subjects

Access, rectification, erasure or forgetting, restriction, portability, objection, and the right to file complaints with supervisory authorities.