Name: Perfect Mallorca
Price range: $$$

I. INTRODUCTION, PURPOSE AND APPLICATION

Law 2/2023 of 20 February on the protection of persons who report regulatory infringements and the fight against corruption (hereinafter Law 2/2023) transposes into Spanish law Directive 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of EU law.

This policy applies to Perfect Mallorca SL with CIF B57451908 and registered office at Via Europa, 45-6, 7688, Cala Murada , Baleares ; and aims to establish an internal channel for the reporting of possible breaches of regulations, infringement of internal and/or ethical policies and to establish a whistleblower protection regime, in compliance with Law 2/2023, of 20 February, regulating the protection of persons who report breaches of regulations and the fight against corruption.

Law 2/2023 explains and clarifies in its preamble, Part III, that its purpose is to protect, against possible retaliation, persons who, in an employment or professional context, detect serious or very serious criminal or administrative offences and report them through the mechanisms regulated in this policy.

This Channel, therefore, is a mechanism that allows company employees, and other interested parties, to report any type of illegal conduct or conduct contrary to our values and ethical principles, without fear of reprisals, strengthening the culture of information, the integrity infrastructures of organisations and the promotion of the culture of information or communication as a mechanism to prevent and detect threats to the public interest. In this way, we seek to promote a culture of transparency, integrity and accountability in our organisation, while protecting those employees who choose to report in good faith.

II. INFORMANT’S CHANNEL

A whistleblower channel (hereinafter, the CII) has been set up by the entity as the preferred channel for receiving information on actions or omissions that may constitute a serious or very serious criminal or administrative offence, and other actions provided for in article 2 of Law 2/2023.

The channel is under the administration of the Internal Channel System Manager (hereinafter referred to as the RSII). Access to this channel shall be limited, within the scope of its competences and functions, to:

The Head of the Channel’s Internal System.
To the administrator(s) delegated by the system administrator.
To the managers designated for the processing of certain complaints according to the area to which they correspond.

The functions of these bodies, as appropriate, shall be:

Reception, registration and management of complaints received through the whistleblower channel.
Designation of the person or team in charge of investigating the complaints received.
Ensuring the protection of whistleblowers and the confidentiality of reports received.
Assessment of the veracity and credibility of the complaints received.
Decision-making on appropriate action based on the results of the investigation.
Regular monitoring and review of the whistleblowing process and the company’s internal policy.
Preparation of reports and recommendations to senior management on complaints received and actions taken.

The CII must technically guarantee the confidentiality or, possibly, the anonymity of the informant, in order to protect him/her against any leakage and subsequent retaliation to which he/she may be subjected.

– Link to the informant’s channel:

https://compliance.legalsending.com/canal/?C=48605399019049049

– QR code:

– Send an e-mail to the following address:

office@perfectmallorca.com

– Postal address: Via Europa, 45-6, 7688, Cala Murada , Baleares, a/a RSII: Juergen

III. SUBJECTIVE SCOPE – REPORTING SUBJECTS

Those persons who have an employment or professional relationship with the AEPD can make use of the internal information channel and benefit from the protection granted by Law 2/2023 as informants, in order to communicate information on the actions or omissions described in article 2 of Law 2/2023. This employment or professional relationship, which entails a dependence on the AEPD, is what makes special protection against possible reprisals necessary and appropriate.

In any case, they are considered informants, for this AEPD, for the purposes of Law 2/2023:

Persons who have the status of employees or workers.
Freelance freelancers.
Shareholders, participants and persons belonging to the administrative, management or supervisory body of the company, including non-executive members.
Any person working for or under the supervision and direction of contractors, subcontractors and suppliers.
Whistleblowers who communicate or publicly disclose information on breaches obtained in the framework of an employment or statutory relationship that has already ended, volunteers, trainees, trainees in training, whether or not they receive remuneration, as well as those whose employment relationship has not yet started, in cases where the information on breaches has been obtained during the recruitment process or pre-contractual negotiation.

It is important to note that allegations made through the whistleblower channel must be bona fide, i.e. they must be supported by concrete evidence and facts.

IV. OBJECTIVE SCOPE – REPORTABLE FACTS

As regards the purpose of the information, it follows from Law 2/2023 that the internal reporting channel may be used to report serious misconduct or suspected corruption, which may constitute serious or very serious criminal or administrative offences related to the activities of the entity, which the reporting person has observed or has received information about in the course of his work or professional relationship.

Law 2/2023 itself and Directive (EU) 2019/1937 list as such information that relates to:

1. Infringements falling within the scope of the acts of the European Union listed in the Annex to that Directive relating to the following areas
1. public procurement,
2. financial services, products and markets, and prevention of money laundering and terrorist financing,
3. product safety and conformity,
4. transport safety,
5. environmental protection,
6. radiation protection and nuclear safety,
7. food and feed safety, animal health and animal welfare,
8. public health,
9. consumer protection,
10. privacy and personal data protection, network and information systems security
Affecting the financial interests of the European Union as referred to in Article 325 of the Treaty on the Functioning of the European Union (TFEU).
Having an impact on the internal market, as referred to in Article 26(2) TFEU, including infringements of EU competition rules and aid granted by States, as well as infringements relating to the internal market in relation to acts in breach of corporate tax rules or practices aimed at obtaining a tax advantage that would defeat the object or purpose of corporate tax law.
Actions or omissions that may constitute a serious or very serious criminal or administrative offence. In any case, this shall be understood to include all serious or very serious criminal or administrative offences that involve financial loss for the Public Treasury and for the Social Security.
Infringements of labour law on health and safety at work reported by workers, without prejudice to the provisions of their specific regulations.

The reporting person must provide at least a reference to the subjective scope of the offence (subject matter or legislation infringed: European Union law; criminal offence; or administrative offence); and a description of the facts reported (relevant information on what happened), as detailed as possible, attaching any documentation that may be available, where appropriate.

You can also provide your name and surname, and a contact telephone number, if you do not choose to make this communication anonymously.

If you know the identity of the person responsible for the reported irregularity, or if you have brought these facts to the attention of another body or entity through an external channel, you may also provide this information.

V. COMPLAINT PROCEDURE

The information may be communicated to the entity anonymously. Otherwise, the identity of the informant shall be kept confidential and shall be limited to the knowledge of the RSII, delegated administrators or appointed managers. These members shall carry out their functions independently and autonomously from the rest of the bodies of the entity or body and may not receive instructions of any kind in their exercise, and shall have all the personal and material means necessary to carry them out.

The company is committed to investigating all reports of potential violations or non-compliance received through the whistleblower channel. All reports will be investigated impartially and confidentially and appropriate action will be taken based on the results of the investigation for the protection of the whistleblower.

The information or complaint shall be communicated through the internal information channel by means of the specific electronic application for this purpose, identified and accessible from the website: https://www.perfectmallorca .com/

At the informant’s request, the complaint may also be submitted by means of a face-to-face meeting that will take place within a maximum period of seven days. Where appropriate, the informant will be warned that the communication will be recorded and will be informed of the processing of his or her data in accordance with the provisions of the GDPR and the LOPDPGDD. When submitting the information, the informant must indicate an address, e-mail address, or safe place for the purpose of receiving notifications, unless he/she expressly waives the receipt of any communication of actions carried out by the RSII as a result of the information.

Once the information has been submitted, it will be registered in the information management system by assigning an identification code, which will be contained in a secure database with access restricted exclusively to RSII personnel, suitably authorised, in which all communications received will be registered with the following data:

Date of receipt.
Identification code.
Actions carried out.
Action taken.
Closing date.

Once the information has been received, within a period of no more than 7 calendar days from said receipt, the informant shall be acknowledged, unless has expressly waived receipt of communications relating to the investigation. These reports will be managed for a maximum period of 3 months, except in cases of particular complexity that require an extension of the period, in which case, this may be extended for a maximum of a further 3 months.

Once the information has been registered, the RSII and his team will proceed to analyse the admissibility in accordance with the material and personal scope provided for in articles 2 and 3 of Law 2/2023.

The company undertakes to inform the whistleblower about the status of the investigation and the measures taken, whenever possible and without compromising the confidentiality and protection of the whistleblower, and may request additional information to the facts communicated through the channel.

In addition, the company is committed to following up on all complaints received and actions taken to ensure the effectiveness of this policy and to continuously improve the process.

Any information shall be forwarded immediately to the Public Prosecutor’s Office if the facts could be suspected of constituting a criminal offence. If the facts affect the financial interests of the European Union, they shall be referred to the European Public Prosecutor’s Office.

VI. PROTECTION OF WHISTLEBLOWERS

The company is committed to protecting individuals who report violations or breaches, in accordance with Law 2/2023.

A. Acts constituting retaliation.

Acts constituting retaliation, including threats of retaliation and attempts to retaliate against persons making a communication under the Act, are expressly prohibited.

Retaliation means any act or omission that is prohibited by law, or that, directly or indirectly, results in unfavourable treatment that places the persons subjected to it at a particular disadvantage compared to another in the employment or professional context, solely because of their status as whistleblowers, or because they have made a public disclosure.

For the purposes of the provisions of Law 2/2023, and by way of example, reprisals are considered to be reprisals in the form of:

Suspension of the employment contract, dismissal or termination of the employment or statutory relationship, including non-renewal or early termination of a temporary employment contract after the probationary period, or early termination or cancellation of contracts for goods or services, imposition of any disciplinary measure, demotion or denial of promotion and any other substantial modification of working conditions and failure to convert a temporary employment contract into a permanent one, where the employee had legitimate expectations that he/she would be offered a permanent job; unless these measures were carried out as part of the regular exercise of managerial powers under the relevant labour or public employee statute legislation, due to circumstances, facts or breaches that are proven and unrelated to the submission of the communication.
Damage, including reputational damage, or economic loss, coercion, intimidation, harassment or ostracism.
Negative evaluation or references regarding work or professional performance.
Blacklisting or dissemination of information in a particular sectoral area, which hinders or prevents access to employment or the contracting of works or services.
Refusal or revocation of a licence or permit.
Refusal of training.
Discrimination, or unfavourable or unfair treatment.

A person whose rights have been harmed by its communication or disclosure after the expiry of the two-year period may request protection from the competent authority, which may, exceptionally and in a justified manner, extend the period of protection, after hearing the persons or bodies likely to be affected. Reasons shall be given for any refusal to extend the period of protection.

Administrative acts aimed at preventing or hindering the submission of communications and disclosures, as well as those that constitute retaliation or cause discrimination following the submission of communications and disclosures under this law, shall be null and void and shall give rise, where appropriate, to corrective disciplinary or liability measures, which may include the corresponding compensation for damages to the injured party.

B. Measures to protect the whistleblower against retaliation

Persons who communicate information about the acts or omissions set forth in Section FOUR, or who make a public disclosure pursuant to Law 2/2023, shall not be deemed to have violated any restriction on disclosure of information and shall not incur any liability of any kind in connection with such communication or public disclosure, provided that they had reasonable grounds to believe that the communication or public disclosure of such information was necessary to disclose an act or omission under that law, subject to any specific employment protection rules that may apply. This measure shall not affect criminal liability.

The provisions of the preceding paragraph extend to the communication of information made by employees’ representatives, even if they are subject to legal obligations of confidentiality or of not disclosing reserved information. This is also without prejudice to the specific rules of protection applicable in the field of employment.

The measures for the protection of the informant shall also apply, where appropriate, to:

natural persons assisting the respondent in the process;
natural persons who are related to the informant and who may suffer reprisals, such as co-workers or relatives of the informant;
legal persons, for whom he/she works or with whom he/she has any other relationship in an employment context or in which he/she has a significant shareholding.

For these purposes, an interest in the capital or in the voting rights attaching to shares or participations is deemed to be significant when, by virtue of its proportion, it enables the person holding it to have the capacity to influence the legal person in which it has an interest.

Whistleblowers shall not incur liability in respect of the acquisition of or access to information that is publicly communicated or disclosed, provided that such acquisition or access does not constitute a criminal offence.

Any other potential liability of reporters arising from acts or omissions that are not related to the communication or public disclosure, or that are not necessary to disclose a breach under the 2/2023 Act, will be enforceable under applicable law.

In proceedings before a court or other authority, concerning harm suffered by whistleblowers, once the whistleblower has reasonably demonstrated that he or she has communicated or made a public disclosure in accordance with Law 2/2023 and has suffered harm, it shall be presumed that the harm occurred in retaliation for reporting or making a public disclosure. In such cases, it shall be for the person who has taken the injurious action to prove that such action was based on duly justified reasons not linked to the communication or public disclosure.

In legal proceedings, including those relating to defamation, copyright infringement, breach of secrecy, breach of data protection rules, disclosure of trade secrets, or claims for damages based on employment or statutory law, whistleblowers shall not incur liability of any kind as a result of communications or public disclosures protected by Law 2/2023. Such persons shall be entitled to assert in their defence in such legal proceedings that they have communicated or made a public disclosure, provided that they had reasonable grounds for to believe that the communication or public disclosure was necessary to expose a violation under the 2/2023 Act.

Persons communicating or disclosing information are expressly excluded from the protection provided for by law:

Information contained in communications that have been inadmissible by any internal information channel or for any of the reasons provided for by law.
Information linked to complaints about interpersonal conflicts or involving only the whistleblower and the persons to whom the communication or disclosure relates.
Information which is already fully available to the public or which constitutes mere hearsay.
Information relating to acts or omissions outside the scope of the law.

C. Measures for the protection of the persons concerned

During the processing of the file, the persons affected by the communication shall have the right to the presumption of innocence, the right of defence and the right of access to the file under the terms provided for in Law 2/2023, as well as the same protection established for informants, preserving their identity and guaranteeing the confidentiality of the facts and data of the procedure.

The Independent Authority for the Protection of Informants, A.A.I. may, within the framework of the sanctioning procedures it conducts, adopt provisional measures under the terms established in article 56 of Law 39/2015, of 1 October, on the Common Administrative Procedure for Public Administrations.

D. Exemption and mitigation of penalties

When a person who has participated in the commission of the administrative offence that is the object of the information is the one who reports its existence by submitting the information and provided that the information was submitted before the notification of the initiation of the investigation or sanctioning procedure, the body competent to resolve the procedure, by means of a reasoned decision, may exempt him/her from compliance with the corresponding administrative sanction, provided that the following points are accredited in the file:

Have ceased the commission of the infringement at the time of submission of the communication or disclosure and identified, where appropriate, the other persons who participated in or aided and abetted the infringement.
Have cooperated fully, continuously and diligently throughout the investigation procedure.
To have provided truthful and relevant information, means of proof or significant data for the accreditation of the facts under investigation, without having proceeded to the destruction or concealment of these, or having directly or indirectly revealed their content to third parties.
Have made reparation for the damage caused that can be attributed to it.

Where these requirements are not met in full, including partial reparation of the damage, the competent authority may, after assessing the degree of contribution to the resolution of the case, decide to mitigate the sanction that would have corresponded to the offence committed, provided that the informant or the person who made the disclosure has not previously been sanctioned for acts of the same nature that gave rise to the initiation of the procedure.

The mitigation of the sanction may be extended to the rest of the participants in the commission of the offence, depending on the degree of active collaboration in the clarification of the facts, identification of other participants and repair or mitigation of the damage caused, as assessed by the body responsible for the decision.

Law 2/2023 excludes from the provisions of this section the infringements established in Law 15/2007, of 3 July, on the Defence of Competition.

VII. CONFIDENTIALITY AND DATA PROTECTION

The processing of personal data will be carried out in compliance with Law 2/2023, of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption, with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, Organic Law 3/2018 of 5 December 2018 on the protection of personal data and guarantee of digital rights and Organic Law 7/2021 of 26 May on the protection of personal data processed for the purposes of the prevention, detection, investigation and prosecution of criminal offences and the execution of criminal penalties.

The personal data processed, the documents provided and any other information provided in the complaint containing personal information will be treated confidentially by those responsible for the channel, as well as by the administrators and possible managers, in order to comply with the obligation to investigate and manage the complaint submitted and to comply with the legal obligations established in Law 2/2023, of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption.

The Internal Information System must prevent unauthorised access and preserve the identity and guarantee the confidentiality of the data relating to the persons concerned and to any third party mentioned in the information provided, in particular the identity of the informant in the event that has been identified. The identity of the informant may only be communicated to the judicial authority, the Public Prosecutor’s Office or the competent administrative authority in the context of a criminal, disciplinary or sanctioning investigation, and these cases shall be subject to safeguards laid down in the applicable regulations.

If the information received contains special categories of personal data subject to special protection, it will be immediately deleted, unless the processing is necessary for reasons of essential public interest as provided for in Article 9.2.g) of the GDPR, as provided for in Article 30.5 of Law 2/2023.

In any case, personal data which are not manifestly relevant to the processing of specific information will not be collected or, if collected accidentally, will be deleted without undue delay.

Communications that have not been followed up may only be recorded in anonymised form, without the obligation to block provided for in Article 32 of the LOPDPGDD being applicable.

Access to personal data contained in the internal information system shall be limited to:

The Head of the Channel’s Internal System.
To the administrator(s) delegated by the system administrator.
To the managers designated for the processing of certain complaints according to the area to which they correspond.
The data may be brought to the attention of the Legal Department, Lawyers, Judicial Bodies and State Security Forces and Corps in the event that any of the information received is likely to be considered a crime or legal infringement of any kind.

Legal basis for processing: The processing of personal data, in cases of internal communication, shall be deemed lawful under the provisions of articles 6.1.c) of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, 8 of Organic Law 3/2018, of 5 December, and 11 of Organic Law 7/2021, of 26 May, when, in accordance with the provisions of articles 10 and 13 of the law, it is mandatory to have an internal information system. If it is not mandatory, the processing shall be presumed to be covered by Article 6.1.e) of the aforementioned regulation. The processing of personal data in the cases of external communication channels shall be deemed lawful by virtue of the provisions of articles 6.1.c) of Regulation (EU) 2016/679, 8 of Organic Law 3/2018, of 5 December, and 11 of Organic Law 7/2021, of 26 May.

Rights of the data subject: access, rectification, deletion, limitation, portability and opposition, free of charge by e-mail to: office@perfectmallorca.com in the cases provided for by law.

Retention: The data will be kept for the legal period established for the processing of the file and for the time necessary for the exercise of legal actions or if it were necessary to leave evidence of the management of the channel. The interested party has the right to submit a complaint to the AEPD at www.aepd.es to request the protection of their rights.

VIII. COMMUNICATION AND REVIEW OF POLICIES AND PROCEDURES

The company will conduct regular trainings and awareness-raising campaigns to foster a culture of integrity and transparency, and to inform employees and other stakeholders about the whistleblowing channel. It will also provide information on the rights and protections afforded to whistleblowers under Law 2/2023.

The company undertakes to disseminate this policy to all employees and stakeholders, and will update, at least every three years and, if necessary, modify this internal channel policy, taking into account the experience gained and the recommendations of the Competent Authority.

In Cala Murada on 03 March 2025