Iatriko Whistleblower Channel

The Company is committed to maintaining the confidentiality, integrity and security of all submitted reports, in strict compliance with applicable European and national legislation including the General Data Protection Regulation (EU) 2016/679 (GDPR)—as well as legal frameworks protecting whistleblowers.
Key Provisions:

1. Confidentiality and Anonymity The identity of the whistleblower will remain strictly confidential and will not be disclosed without their explicit consent, unless required by law. Access to submitted reports is restricted to specifically authorized personnel.
2. Personal Data Processing Any personal data (of the whistleblower or third parties) is processed solely for the purpose of investigating the report and fulfilling legal obligations. Such data is not used for any other purpose nor shared with third parties, except competent authorities when legally mandated.
3. Data Subject Rights Where the report is not submitted anonymously, data subjects retain all rights provided under the GDPR, including rights of access, rectification, restriction of processing, erasure (where not in conflict with legal obligations), and the right to lodge a complaint with the Data Protection Authority.
4. Information Security The Company implements appropriate technical and organizational measures to safeguard data against loss, alteration, or unauthorized access, ensuring the integrity of the reporting process.
5. Data Retention Personal data is retained only for as long as necessary to investigate the report and in accordance with legal record-keeping requirements.
6. Contact Point For any inquiries regarding the protection of personal data or the exercise of your rights, please contact the Company’s Whistleblower Report Reception & Monitoring Officer (Y.P.P.A.)

The Company is committed to maintaining the confidentiality, integrity and security of all submitted reports, in strict compliance with applicable European and national legislation including the General Data Protection Regulation (EU) 2016/679 (GDPR)—as well as legal frameworks protecting whistleblowers.
Key Provisions:

1. Confidentiality and Anonymity The identity of the whistleblower will remain strictly confidential and will not be disclosed without their explicit consent, unless required by law. Access to submitted reports is restricted to specifically authorized personnel.
2. Personal Data Processing Any personal data (of the whistleblower or third parties) is processed solely for the purpose of investigating the report and fulfilling legal obligations. Such data is not used for any other purpose nor shared with third parties, except competent authorities when legally mandated.
3. Data Subject Rights Where the report is not submitted anonymously, data subjects retain all rights provided under the GDPR, including rights of access, rectification, restriction of processing, erasure (where not in conflict with legal obligations), and the right to lodge a complaint with the Data Protection Authority.
4. Information Security The Company implements appropriate technical and organizational measures to safeguard data against loss, alteration, or unauthorized access, ensuring the integrity of the reporting process.
5. Data Retention Personal data is retained only for as long as necessary to investigate the report and in accordance with legal record-keeping requirements.
6. Contact Point For any inquiries regarding the protection of personal data or the exercise of your rights, please contact the Company’s Whistleblower Report Reception & Monitoring Officer (Y.P.P.A.)

The email correspondence is not subject to anonymity or confidentiality and may be used for the purpose of documenting the incident referred to herein, within the legal framework of management, investigation, and processing.

The telephone communication is not subject to anonymity or confidentiality and may be used for the purpose of documenting the incident referred to herein, within the legal framework of management, investigation, and processing.