Data Protection Notice and whistleblowing Reporting Clause for Information Gathering Tool
Subject to specific local provisions, in application of the French and European regulations, the Crédit Agricole Group Entity responsible for processing, located in the European territory with which you have a relationship as an Employee, External and Temporary Staff, a commercial relationship having been established, provides for you in an optional and non-binding fashion, for the preservation of its legitimate interest, a collection tool allowing you to report any deficiency characterising serious matters contrary to applicable rules of which you personally had knowledge in good faith and in a disinterested manner.
Excluded from the whistleblowing system are facts, information or documents, regardless of their form or medium, which are covered by national defence secrecy, medical confidentiality or the confidentiality of relations between a lawyer and his or her client.
Any abusive report exposes its author to possible sanctions or lawsuits, it being specified that a report made in good faith even if the facts are thereafter proven to be inaccurate or give rise to any continuation does not expose its author to any disciplinary sanction. Individuals also cannot be criminally prosecuted for revealing facts subject to banking secrecy. No person may be sanctioned, dismissed or subject to any direct or indirect discriminatory measure, in particular as regards compensation or professional promotion for having exercised his or her right to act as a whistleblower.
Revealed reports are handled in the strictest confidence. The elements identifying the whistleblower cannot be disclosed, except to the legal authorities and only with the consent of the latter. The elements likely to identify the person implicated by whistleblowing cannot be disclosed, except to the legal authorities and once the merits of the whistleblowing are established.
The whistleblowing reports collected are intended for the Entity Point of Contact and/or the Crédit Agricole SA Group Point of Contact in particular if it is impossible to reach the Entity's Point of Contact, who processes the report in complete confidentiality.
The whistleblower is kept informed of the follow-up given to his or her report and its closing.
The data relating to a report that is deemed, as soon as it is collected by the Point of Contact, as not falling within the scope of the whistleblowing right will be destroyed or archived without delay, after undergoing anonymisation.
When the report is not followed by disciplinary or judicial proceedings, the data relating to this report will be destroyed or archived after undergoing anonymisation by the Group within twelve months of the closure of the verification operations.
When disciplinary proceedings or legal proceedings are instituted against the person concerned by the report or against the author of an abusive report, the data relating to the report are kept by the Group until the end of the relevant proceedings.
In any case, the data subject to archiving measures will be kept, as part of a separate information system with restricted access, for a period not exceeding the length of litigation proceedings.
You may at any time under the conditions provided by law, by contacting the responsible Data Controller Entity, access the personal data about you, oppose their processing for legitimate reasons or request rectification, deletion or limitation of their processing.
The Entity has appointed a Data Protection Officer, whom you may contact (contact details available on the Entity’s intranet sites or internet).
If this is not possible, you can contact the DPO of Crédit Agricole SA at: donnees.personnelles@credit-agricole-sa.fr
In the European territory, you can, in the event of a dispute, file a complaint with the data protection authority which is territorially responsible for your Entity.
