Privacy

Data Protection Notice

The protection and security of personal data are of great importance to us. Your personal data is therefore processed in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Please read this data protection notice carefully before submitting a report.

Purpose of data processing

The whistleblowing system (AdvoWhistle) is designed to receive, process and manage reports of sports betting fraud and the manipulation of sporting competitions in a secure and confidential manner.

The processing of personal data within the AdvoWhistle system is carried out in accordance with Article 6(1)( 1(a) of the GDPR on the basis of your consent in connection with the voluntary submission of your report via the reporting system, and in accordance with Article 6(1)(1)(f) of the GDPR on the basis of our legitimate interest in fulfilling the contract as the reporting centre for the whistleblowing system on behalf of the state.

Data Protection Officer

The data protection officer responsible for the whistleblowing system is:

KERN CHERKEH Rechtsanwälte Partnerschaft mbB, Königstrasse 7, D - 30175 Hanover
Tel.: 0049 (511) - 89 76 57 - 0
Fax: 0049 (511) - 89 76 57 - 22
Email: kanzlei@kern-cherkeh.de
(hereinafter also referred to as: “KERN CHERKEH”)

Purpose of the whistleblowing system and legal basis

The whistleblowing system (AdvoWhistle) serves to receive, process and manage reports of sports betting fraud and the manipulation of sporting competitions in a secure and confidential manner.

The processing of personal data within the framework of AdvoWhistle is carried out in accordance with Article 6(1), first sentence, point (a) of the GDPR on the basis of your consent in connection with the voluntary submission of your report via the reporting system, and in accordance with Article 6(1), first sentence, (1)(f) of the GDPR on the basis of our legitimate interest in the performance of the contract as the reporting body for the whistleblowing system on behalf of the state.

How the whistleblowing system works and how it is used

The whistleblowing system (AdvoWhistle) is technically operated on behalf of the state by a specialist company, iComply GmbH, Große Langgasse 1A, 55116 Mainz, Germany.

Personal data and information entered into the system are stored in a database operated by the technical service provider in an ISO/IEC 27001-certified data centre. Access to the data is restricted to expressly authorised trusted lawyers. End-to-end encryption of all data, multi-level password protection, technical and organisational measures, and regular certifications ensure that the technical service provider, the data centre operator and other third parties have no access to the data.

All data is stored in encrypted form and protected by multiple levels of password security, and is subject to an access control policy, meaning that access is restricted to a very limited group of expressly authorised individuals at KERN CHERKEH.

Communication between your computer and the whistleblowing system takes place via an encrypted connection (SSL). Your computer’s IP address is not stored whilst you are using the whistleblowing portal. To maintain the connection between your computer and AdvoWhistle, a cookie is stored on your computer which contains only the session ID (a so-called session cookie). The cookie is only valid until the end of your session and becomes invalid when you close your browser.

Type of personal data collected

Use of the whistleblowing system is on a voluntary basis. If you submit a report via the whistleblowing system, we collect only the personal data that you provide to us:

  • Your name, provided you disclose your identity,
  • Any other personal data arising from your report,
  • where applicable, the names of individuals and any other personal data relating to the individuals you mention in your report.


Confidential handling of reports and disclosure of data

Reports received are handled by a select group of expressly authorised and specially trained legal professionals at KERN CHERKEH and are always treated in confidence. The legal professionals at KERN CHERKEH examine the facts of the case and, where necessary, carry out a more detailed case-specific investigation. Every person who gains access to the data is bound by a duty of confidentiality.

If your report gives rise to a suspicion of a criminal offence, your report will be forwarded to the relevant investigative and law enforcement authorities, provided you have given your consent to this during the reporting process.

If your report does not give rise to any suspicion of a criminal offence but appears to be of value, your report will be passed on to the relevant sports association, provided you have given your consent to this on the reporting page.

The whistleblower’s personal data or identity will only be passed on to the law enforcement authorities or a sports federation if and to the extent that you have expressly consented to this as part of the reporting process.

Data subjects’ rights

Under European data protection law, you have the right

  • pursuant to Article 21 of the GDPR to object to the processing of your data, provided that the processing is carried out for the performance of a task carried out in the public interest (Article 6(1), first sentence, point (e) of the GDPR) or on the basis of legitimate interests (Article 6(1), first sentence, point (f) of the GDPR). If you exercise your right to object, we will immediately assess the extent to which the stored data is still necessary for processing a report. In this case, further processing will only take place if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms;
  • to withdraw your consent, once given, at any time in accordance with Article 7(3) of the GDPR. As a result, we may no longer continue the data processing that was based on this consent in future;
  • pursuant to Article 15 of the GDPR to request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended period of storage, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and information on the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
  • to request, in accordance with Article 16 of the GDPR, the rectification of inaccurate personal data or the completion of your personal data stored by us without delay;
  • to request, in accordance with Article 17 of the GDPR, the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • under Article 18 of the GDPR to request the restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer require the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing under Article 21 of the GDPR;
  • under Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller; and
  • under Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence or work, or for the location of our law firm’s registered office.


Retention period for personal data

Personal data is deleted in accordance with the retention periods for lawyers set out in Section 50 of the German Lawyers’ Act (BRAO) six years after the end of the year in which the reporting office ceases to process the case, unless we are obliged to retain the data for a longer period pursuant to Article 6(1)( (1)(c) of the GDPR due to retention and documentation obligations under tax and commercial law (under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)), or you have consented to further storage in accordance with Article 6(1), first sentence, point (a) of the GDPR.

Notes on sending attachments

When submitting a report or sending a supplement, you have the option of sending attachments to the relevant member of staff at KERN CHERKEH. 

If you wish to submit a report anonymously, please note the following security advice: files may contain hidden personal data that could compromise your anonymity. Please remove this data before sending. If you are unable to remove this data or are unsure, please copy the text of your attachment into the body of your report or send the printed document anonymously to the following address, stating the subject and the exact time (date and time) of your report:

KERN CHERKEH Rechtsanwälte Partnerschaft mbB
Sports Match-Fixing Reporting Centre
Königstraße 7
30175 Hanover
Germany