Reporting irregularities


A form intended for anonymous reporting of infringements in VRG S.A. in Cracow (the "Company") introduced in accordance with the procedure of anonymous reporting of infringements in the VRG S.A. Capital Group.

This form is intended for persons employed in the Company under a contract of employment, as well as on the basis of a contract of mandate, contract for specific work or other contract of a similar nature ("Notifying Entity") and is used to anonymously report to the Company any identified undesirable and unlawful activities including violations of ethical rules, procedures or standards, in particular regarding: (i) work organization, (ii) non-compliance with internal procedures, (iii) communication, (iv) embezzlement, (v) mobbing, (vi) harassment, (vii) ) discrimination.


The GDPR Information Clause:

1.The Company, i.e. VRG S.A. with its registered office in Cracow, ul. Pilotów 10, 31-462 Cracow is the personal data controller of the Notifying Entity ("Administrator").

2.The Administrator informs that:

a. providing personal data of the Notifying Entity is voluntary; the notification may be made anonymously;
b. the personal data provided by the Notifying Entity will be processed for purposes related to the reporting of the Irregularity pursuant to Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) ("Regulation");
c. personal data of the Notifying Entity will be stored for the duration of the investigation of the Irregularity, no longer than 6 months; in case of initiation of the investigation conducted on the basis of legal regulations, data shall be stored until the final conclusion of the investigation and for a further period of 12 months;
d. Notifying Entity has the right to demand from the Administrator access to personal data concerning the Notifying Entity, their correction, deletion or limitation of processing;
e. Notifying Entity has the right to lodge a complaint with the President of the Personal Data Protection Office;
f. personal data of the Notifying Entity will not be processed in an automated manner;
g. regarding data protection at the Administrator's premises, the Inspector of Personal Data Protection may be contacted at the e-mail address:

Report violation form