Data Privacy

Here you will find information regarding the collection, processing, and use of personal data within the whistleblowing system. Before submitting your report, please familiarize yourself with the privacy information. The Trusty whistleblowing system is used for the receipt and processing of information related to alleged violations in sports in a secure and confidential manner. The processing of personal data within Trusty is based on the legitimate interest of the organization in detecting and preventing violations in sports, as well as mitigating risks of harm and liability to the organization. If the received report pertains to an employee of the organization, the processing is also intended to prevent criminal offenses or other legal breaches related to the employment relationship. The Trusty whistleblowing system (including the application, its website, and the database where submitted personal data and information are stored) is operated by Trusty AG, Riedstrasse 7, 6300 Zug, Switzerland, on behalf of the organization. The database is encrypted and hosted on virtual servers in a highly secure data center within the EU. For the purpose of processing the submitted report, personal data and information may be created, accessed, processed, and used only by authorized individuals. Trusty AG has no rights in relation to the aforementioned data; the designated personnel have access to the database solely for the purposes of technical maintenance. The organization retains ownership of the data and the associated legal responsibilities at all times. The extent to which third parties have access to the data is solely the responsibility of the organization. If required by law, personal data and information may be disclosed to the police and/or other law enforcement or regulatory authorities. The use of the Trusty whistleblowing system is voluntary. The following personal data and information are collected: - Your name, email address, phone number, and your relationship to the organization if you choose to disclose your identity. - Names and other personal data of individuals suspected to be involved. - Names and other personal data of individuals who are aware of the violations in sports. All communication between the Trusty system and the sender's web browser is encrypted to protect the confidentiality of data (SSL). Neither IP addresses, timestamps, nor any other metadata of the reporting person are recorded or stored. To maintain the connection between the sender's web browser and Trusty, a cookie containing only the session ID is stored on the sender's system. The cookie is valid only until the end of the session and becomes invalid when the browser is closed. For enhanced security, we also use an HTTP cookie with a random string, which expires after two hours. When submitting a report or additional data, the whistleblower may attach documents. In such cases, the whistleblower is informed that attached files may contain hidden personal data that could reveal their identity. Therefore, such data should be removed if the whistleblower wishes to remain anonymous. If the removal of such data is not possible, it is recommended to send the documents in PDF format or in physical form to the organization's address with a note indicating the assigned username received upon the completion of the report submission process. The submitted personal data will be stored and processed in accordance with the organization's internal policies as long as the organization has a legitimate interest in processing the report (including conducting any necessary investigations) and, if applicable, imposing sanctions. You have the right to access your personal data, receive personal data in a commonly used electronic format, request corrections, and request the limitation of the processing of your personal data. The right to erase your personal data is limited by the aforementioned legitimate interest of the organization. For further details, please refer to the organization's internal policies.