Whistleblowing channel

You can file a report on any suspected abuse related to Luotea's operations. Please note that the matters mentioned below should be reported to the following parties in order to ensure that they are processed as quickly as possible:

• Customer feedback and complaints: feedback channels on www-pages.
• Data security breaches and their suspicions: Luotean osoite

In employment and personnel matters, notifications are generally made to one's supervisor, the supervisor's supervisor, or the group's personnel administration representative. If this does not seem possible, the report can be made through the reporting channel.

You can submit a report through the Whistleblowing web service. A report can be made anonymously or with a name. Leaving the name and contact information helps in a more effective investigation of suspected abuse and promotes the realization of legal protection for the persons involved in the investigation.

If you want to discuss the matter over the phone or wish to meet in person, please mention it when making a report, and we will contact you. The notification channel service is provided by an external partner, and the notification procedure is encrypted and protected with a password. When you make a report, please remember to write down the ID and password for your report for possible future contact.

You can monitor the processing of the report and receive messages by logging into the service with your username and password via the "Make a report" button. Intentionally making a false report is not allowed.

We process all reports confidentially and ensure that no harm is caused to anyone filing a report in good faith. Reports are handled by Luotea's Compliance Officer, the legal department, or other individuals with a Master's degree in law who report to the SVP of Human Resources and Legal Affairs.

The investigation may require other specialists on a case-by-case basis and those involved in the processing are bound by the obligation of secrecy.

The information submitted in the report is subject to the data protection legislation in force at any given time. For example, involved parties have the right to access data concerning themselves and to request the inspection of personal data. More information on the processing of personal data in the whistleblowing channel can be found in the privacy statement of the whistleblowing channel register.

All personal data contained in the reports will be deleted when it is no longer needed for the actions taken in response to the report. Usually, deletion occurs three months after the end of the investigation. Whistleblower reports may be retained for a maximum of five years from the date of the report, unless the retention of the data is necessary for a longer period, for example due to an ongoing investigation by the authorities or in order to safeguard the rights of the person related to the report.

We take all reports to the whistleblowing channel very seriously. The receipt of the report shall be confirmed to the sender within seven days of the report being submitted. In addition, the whistleblower will be informed, no later than three months after the report has been received, of the actions that have been taken in response to the report.

You can read the response by logging into the Whistleblowing channel again with your username and password you received when submitting the report.