Information on joint controllership according to Art. 26 General Data Protection Regulation (GDPR)
Whistleblowing
Due to the joint use of the whistleblower system provided by Business Keeper GmbH, there is a joint responsibility between the University of Applied Sciences for Health Professions Upper Austria, Semmelweisstraße 34, 4020 Linz, Oberösterreichische Gesundheitsholding GmbH (OÖG) Goethestraße 89, 4020 Linz, Kepler Universitätsklinikum GmbH (KUK) Med Campus II, Krankenhausstraße 7a, 4020 Linz and Oö. Landespflege- und Betreuungszentren GmbH (LPBZ) Schloss Haus 1, 4224 Wartberg/Aist.
Categories of data processed in the event of a voluntary report in the whistleblower system:
- Name, if you disclose your identity,
- Names of persons, if applicable, and other personal data of the persons you name in your report.
Purpose of processing
To receive, process and manage tips on grievances, violations of the law or other irregularities in the University of Applied Sciences for Health Professions Upper Austria, OÖG, KUK and LPBZ in a secure and confidential manner.
Legal basis for the processing of personal data
Article 6 paragraph 1 lit. f oft he GDPR.
The University of Applied Sciences for Health Professions Upper Austria, OÖG, KUK and LPBZ, as joint responsible parties, have concluded a Joint Controller Agreement according to Art. 26 GDPR on the use of a joint whistleblowing system provided by Business Keeper GmbH.
The University of Applied Sciences for Health Professions Upper Austria, OÖG, KUK and LPBZ are responsible for the processing of data subject rights according to Art. 15- 20, 21, 22 GDPR as well as for notifications to the responsible data protection authority according to Art. 33 and 34 GDPR.