Casadevall Group whistleblower channel

Start

Step 1/5 Categorize concern

To facilitate the further handling of your submission, please help us to categorise it as best as possible.

In which category does your submission best fit?

Competition

Consumer protection

Corporation tax

Environmental Protection

Financial interests of the Union (expenses, income collection and funds)

Food safety

Prevention of money laundering

Product safety

Protection against radiation and nuclear safety

Protection of personal data and privacy

Public health

Public procurement

Security of networks and information systems

Transportation security

Others

Do you suspect any of the following people?

CFO

CIO

Data Protection Officer

Delegate for Occupational Risk Prevention

Director de Servicios Legales

HR Director

Managing Director

Personnel director

Purchasing Manager

Responsible for Internal Audit and Compliance

I am not aware of any involvement of these persons

I have read the Terms of use and agree to them in accordance with the notice.

Information

Step 2/5 Personal information

If you prefer not to give your personal details, you can do so by indicating that you want the report to be anonymous.

What is your relationship with the company being reported?

Do you wish to report anonymously?

Yes

This channel requires the whistleblower's identification data are mandatory.

The selected category requires the identification data to be mandatory

First name

Last name

Contact telephone number

This channel is confidential. Your personal data will not be shared. If someone from the organisation needs to know your data, they will request it through the channel and they will only be able to see it if you authorise it.

Details

Step 3/5 Detailed information

Describe in as much detail as possible the event you wish to report, giving as much information and attaching evidence, if available.

Indicate which person or persons are the subject of the report

First and last name

Position

Have you discussed this with any member of management?

Yes

I do not remember

Are there any witnesses? Please indicate their names.

First and last name

Position

Tell us what you want to report in detail

Would you like to attach any additional documents?

Image (png, jpg, gif), Audio (wav, mp3), Video (ogg, mp4, mov, avi, wmv, mpg, mpeg) or PDF document up to 20Mb. Attention! If you report anonymously, make sure that the attachments do not include information in the content or metadata that could identify you.

Confirm

Step 4/5 Confirmation

As the last step of the process, you must indicate a secret code that only you will know. This password, together with the identification code that we will give you at the end of the process, will be the only way to follow the progress of your submission

Password

Password confirmation

Finish

Step 5/5 Finalize

You have now entered all the information necessary to start the report management process.

The information is ready to initiate the process of determining accountability. The persons or facts reported will be investigated and the resulting actions will be taken.

The whistleblower undertakes that the information provided in this submission is true. Otherwise, the company reserves the right to take legal action against the whistleblower.

This is the last form in the process. When you click on Send, the investigation will begin and the resolution of your claim will be shown on the platform within a maximum period of 3 months.

I have read the Data Protection and Consent Notice and agree to the processing of my personal data in accordance with the provisions of this notice.

Terms of Use

In compliance with the Law on Services of the Information Society and Electronic Commerce, as well as in compliance with current regulations on data protection, it is reported that the owner of the website ithikios.com and canaldenunciasanonimas.com and all its subdomains ( hereinafter, "the Web") is DIGITAL PRODUCTS DEVELOPMENT SL (hereinafter, ithikios), registered in the Mercantile Registry of Barcelona, with CIF B02767010, and with registered office at c / Mont Blanc 17, Sant Cugat del Valles, Spain.

ithikios is the owner of all rights to the Website. The simple access, navigation and use of the Website attributes the condition of user of the same (hereinafter, the "User") and implies the acceptance of this clause of terms and conditions. The information available through this website is not subject to contract and may be modified without prior notice.

ithikios will not be held responsible for problems arising from the consultation or use of this Website. To this end, access is obliged to comply with this, having to act in accordance with current Law, good faith and public order and, refraining from using the Website in a way that could prevent or impair its proper functioning.

This service can only be used to send complaints or inquiries to companies that have contracted the service with ithikios, guaranteeing confidentiality and anonymity (if the user so chooses), regarding the personal data of the complainant.

Conditions for the user

As a user, you are obliged to make correct and lawful use of the platform.
You will use the platform for the purposes it has been designed for, and in no case will you use it for purposes contrary to the law.
The ithikios channel / canaldenunciasanonimas is not an emergency service. In case of emergency contact local authorities.
You must fill in all the information defined as mandatory in order to be able to send it.
Reflect and review the information you send to ensure that if you do not want it, you do not reveal your identity.
You will be able to choose between sending the communication indicating your contact details or without indicating them. In both cases, the platform will provide you with a unique identification number and a password. It is important that you write them down in a safe place, only with them will you be able to check the status of the communication. If you lose them, you will not be able to access it again. For security reasons, ithikios will not be able to provide access to lost codes.
If the organization proves that there has been bad faith when making the report, it reserves the right to take legal action if the complainant has been identified.
You will be able to download a certificate issued by ithikios in which you will have all the information that has been sent to the company, as well as the result once the investigation is completed.
The Complainant expressly understands and agrees that ithikios will not be responsible for any direct or indirect, anticipated or unforeseen damage, interest or loss, including, among others, moral damage resulting from the use or inability to use this service.
The Complainant is responsible for the veracity of the information communicated, assuming the consequences of having acted in bad faith or sent false information or documentation.
You will be liable for any loss or damage of any kind that ithikios may suffer, directly or indirectly, as a result of improper use of the product, a breach of the terms and conditions of use or a breach of the law in force on your part.

Data protection and consent to Casadevall Group

CASADEVALL GROUP S.L. is committed to protecting the personal data and privacy of users visiting this website and to ensuring a safe, transparent and secure browsing experience.

This Privacy Policy applies exclusively to this website and governs the collection and processing of personal data carried out through it.

This policy has been prepared in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation or “GDPR”) and any other applicable data protection legislation.

1. Data Controller

Users are informed that any personal data provided through this website will be processed by CASADEVALL GROUP as Data Controller.

The contact details of the Data Controller are as follows:

· Company Name: Casadevall Group HQ S.L.

· Address: Carrer dels Fusters, 3-7, 08110, Montcada i Reixach, Barcelona, Spain

· CIF: ESB64549512

· Email: [email protected]

2. Personal Data Collected

CASADEVALL GROUP only collects the personal data voluntarily provided by users through the forms available on this website, as well as any information strictly necessary to ensure the proper functioning and security of the website.

The personal data processed may include:

Name
Telephone number
Information contained in the message submitted through the contact form

Personal data will be processed with the utmost confidentiality and in accordance with the principles established by the GDPR.

This website is not intended to collect personal data from minors. If personal data relating to a minor is provided without the consent of a parent or legal guardian, CASADEVALL GROUP reserves the right to delete such information as soon as it becomes aware of the situation.

3. Web Analytics

This website does not use analytics cookies or any other equivalent technologies intended to track or individually identify users during their browsing activity.

In order to obtain aggregated information about the use of the website and to improve the user experience, CASADEVALL GROUP uses Umami , a web analytics tool designed to operate in a privacy-friendly manner.

Umami provides statistical information regarding the use of the website, such as the number of visits received, the most visited pages, forms submitted, and other interactions carried out on the website.

The information collected is used exclusively for statistical, maintenance, and website improvement purposes.

The metrics obtained through Umami are aggregated and are not intended to identify individual users, create commercial profiles, or perform personalized tracking of browsing activity. Furthermore, the tool does not use cookies to provide its web analytics functionalities.

For this reason, this website does not require a separate Cookie Policy or the implementation of a cookie consent banner for analytics purposes, as it does not use cookies or similar technologies that require consent. Nevertheless, CASADEVALL GROUP provides transparent information regarding the use of this analytics tool through this Privacy Policy.

4. Purposes of Processing

Purpose: Management of communications and enquiries submitted through the contact form.

Legal Basis: Legitimate interest of CASADEVALL GROUP in responding to enquiries and, where applicable, taking pre-contractual steps at the request of the data subject (Articles 6(1)(f) and 6(1)(b) GDPR).

Data Processed: Name, telephone number and message content.

Retention Period: For as long as necessary to manage the enquiry and subsequently for the period required to address potential legal liabilities.

5. Data Retention

CASADEVALL GROUP will retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Where legal obligations require longer retention periods, or where the data is necessary for the establishment, exercise or defense of legal claims, the information may be retained in a restricted and protected manner for the applicable limitation periods.

Once the applicable retention period has expired, personal data will be securely deleted.

6. Disclosure of Personal Data

Personal data will not be disclosed to third parties except in the following circumstances:

Where it is necessary to share the information with other entities within CASADEVALL GROUP in order to properly manage the user's enquiry or request.
Service providers acting on behalf of CASADEVALL GROUP as data processors.
Public authorities, courts, tribunals or regulatory bodies where disclosure is required by law.

Any disclosure of personal data will be carried out subject to appropriate security measures and safeguards.

7. International Data Transfers

Given the international nature of CASADEVALL GROUP, certain enquiries may require the involvement of group companies located outside the European Economic Area (EEA).

Should international transfers of personal data occur, CASADEVALL GROUP will ensure that such transfers are carried out in accordance with the GDPR and that appropriate safeguards are implemented, including, where required, Adequacy Decisions adopted by the European Commission or Standard Contractual Clauses.

8. Data Subject Rights

Users may exercise the following rights regarding their personal data:

Right of access
Right to rectification
Right to erasure
Right to object
Right to restriction of processing
Right to data portability
Right to withdraw consent, where processing is based on consent

Users also have the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data does not comply with applicable data protection legislation.

To exercise any of these rights, users may contact CASADEVALL GROUP at: [email protected]

CASADEVALL GROUP may request additional information to verify the identity of the applicant before processing the request.

9. Security Measures

CASADEVALL GROUP has implemented appropriate technical and organizational measures to ensure the security, integrity, availability and confidentiality of personal data.

These measures include, among others:

Access control mechanisms.
Protection against unauthorized access.
Internal security management and monitoring procedures.
Periodic review of implemented security measures.

CASADEVALL GROUP also applies the principles of data protection by design and by default wherever applicable.

10. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time in order to reflect legal, regulatory, technical or operational changes affecting the website or the processing of personal data.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their personal data is processed.

Last updated: September 2026.