How exactly will the personal data and information be processed after I have reported an incident and who may access these files?
Reports are entered directly into the EthicsPoint server to ensure maximum security. The database is hosted and operated by NAVEX on behalf of JET, with servers located in Europe. This ensures full compliance with all applicable EU data protection and privacy regulation.
To process your report, conduct investigations, and implement any necessary sanctions, your personal data and information will be transported to the database. From there, it will be shared strictly on a need-to-know basis with the appropriate personnel within JET, specifically our global Ethics & Compliance officers.
Information relating to the alleged breach, including your identity or the identity of other persons involved in an inquiry or investigation, shall only be disclosed to those functions within JET (i.e. the investigator(s) and the relevant Compliance Officer(s)) or outside JET (e.g. forensic auditors and legal counsel) who require this information to ensure compliance with the Code of Conduct and legal or regulatory obligations, or as input for subsequent judicial proceedings.