This content has been restricted to logged in users only. Please login to view this content.


Description of Data File

1. Data Controller

Name: Kotico Oy, 3017200-6
Address: Alaseinäjoenkatu 1, FI-60220 Seinäjoki, Finland

2. Contact person for matters relating to the data file

Name: Hanna-Mari Piikkilä, Data Protection Officer
Address: Alaseinäjoenkatu 1, FI-60220 Seinäjoki, Finland
Other contact details:

3. Name of the data file

WB Smart whistleblowing channel

4. Purpose of the processing of personal data

The purpose of processing personal data is the handling of reports submitted through the Whistleblowing Channel. The information is processed in the investigation of reported cases and in the processing of possible sanctions. Personal data is retained for as long as necessary to fulfill the purposes defined in the privacy policy, unless legislation requires the retention of personal data for a longer period.

5. Content of the Registry Information

The stored information includes name, email address, mobile phone number, employer and other information provided by the notifier in the notification.

6. Regular Data Sources

Personal data is obtained through the Whistleblowing Reporting Channel as submitted by the notifier.

7. Regular destinations of disclosed data

Information is not routinely disclosed, but personal data may be disclosed to authorities, for example, upon their request, as required by law, and to enforce the rights of the parties involved in the notification

8. Transfer of data outside the EU or EEA

Data is not transferred outside the EU or EEA.

9. Principles of Registry Protection

A. Manual material
Paper and manual materials are not used.

B. Electronically Processed Data
Information from the whistleblowing channel is stored in a secure and confidential information system. Access to the system requires a personal username and password. The system uses strong encryption technology and the data is stored in a secure data center that meets current security requirements. Regular backup copies are made of the data file. Only designated whistleblowing channel handlers have access to information.

10. Right of access

The data subject has the right to inspect what information about them is stored in the registry. A request for inspection can be made by email to

11. Right to demand correction of information

The data subject has the right to demand the correction of incorrect information related to them. A correction request must be made by email to

12. Other rights related to the processing of personal data

The data subject has the right to request the deletion of their personal data from the system. Deletion of personal data is carried out as soon as possible, if legally possible. A request for the deletion of personal data must be made by email to

Last updated: December 2023