Your browser is outdated

The internet explorer is no longer supported. Please switch browsers for better website experience.

Submitting a Whistleblower Claim

DEKRA and its affiliated companies, as respective autonomous controllers, are bound by a duty of confidentiality about what you entrust to us. Protecting your privacy when processing your personal data, as well as the security of any information you provide to us, is a top priority for us.

Please read the statement below carefully before making a report to the responsible compliance officer through the form you find at the bottom of this page.

Data Protection Notice

The purpose of the DEKRA Whistleblower System is to receive, process and evaluate reports of violations of regulations and DEKRA Compliance Guidelines securely and confidentially.

The primary purpose for data retention is to process, investigate and manage compliance reports.

Reporting abuses and/or misconduct is voluntary. Please note, however, that we can only receive and process reports if you confirm that you have read this statement and consent to the processing of your report as described here. We therefore kindly ask you to give your consent by checking the confirmation box before submitting the form at the bottom of the page.

You can make your report anonymously. However, if further contact will be required for investigation purposes, we recommend that you identify yourself. In any case, the information you provide will be treated confidentially.

When you report an incident to the designated Compliance Officer, we collect the following personal data and information:

A. Your name and your contact details (provided you do not report anonymously);

B. whether you are employed by DEKRA;

C. the name and other personal data of the persons concerned (e.g. functional specifications, contact details) and the subject of your report;

D. a description of the non-compliant behavior as well as a description of the circumstances of the incident, including the time and place of the incident, the affected DEKRA entity, and whether management is aware of the incident;

E. other personal data that may arise from further inquiries.

The information you provide when reporting a Compliance case is verified by the appropriate compliance officer. If necessary, further investigation can take place, whereby you can be approached by the employee concerned, unless you wish to remain anonymous.

All personal data, such as your name, your contact details and, if applicable, where you are employed by DEKRA (see number 1 a. and b.), and information that you report to us, are stored in a DEKRA database.

For the processing of your report, the personal data and information can be viewed, processed and used by the appointed compliance officer and the specifically designated employees who are engaged by the compliance officer.

Personal data and information may also be disclosed to the police and/or other official regulatory authorities. In the event that the relevant bodies receiving and processing personal data are located in the US, or in another country that does not provide a level of data protection as available in the EU, a contract will be signed based on the EU Standard Contractual Clauses.

Please note that any person to whom you report may be notified at an appropriate time that a report has been submitted. Your identity will not be disclosed. Any person who has been reported has the right to correct your description of the abuses that led to your report.

When DEKRA legal entities are located in the EU and personal data and information is transferred to a recipient in the US, or another country that does not provide an adequate level of data protection, standard contractual clauses between such legal entities will apply. Please note that any person whose identity you have shared with the Compliance Officer may be made aware of the report made about them at an appropriate time. In that case, your identity will not be disclosed. Nevertheless, anyone about whom you have provided information has the right to review and clarify your representation of the facts.

The personal data you provide will be kept for as long as it is necessary to process your report (including any investigations) or, if applicable, for as long as it is necessary to impose sanctions or when the data is required to be retained due to legal requirements .

By checking the box at the end of the form you confirm that you have read and understood this Data Protection Statement and you agree to the processing of your personal data and information as described above.

Submit a claim

Submit your report about non-compliant behavior here. If you wish to remain anonymous, you should not enter any personal information, for example your name or relationship to the perpetrator. In that case, do not provide information that can be traced back to you.

Share page