Whistleblower

Matas har implementeret et Whistleblower-system, hvor igennem det er muligt anonymt at indberette alvorlige overtrædelser af love og regler, hvis man gerne vil undgå at benytte de normale kommunikationskanaler. Alle medarbejdere, bestyrelsesmedlemmer, revisorer, advokater, leverandører og andre med arbejdsrelateret tilknytning til Matas A/S eller dets datterselskaber kan foretage indberetninger via systemet.

Læs mere her.

Hvis du ønsker at indberette en alvorlig forseelse om overtrædelse af love og regler foretaget i Matas organisation, men ikke mener, at Matas bør håndtere din indberetning, kan du foretage en ekstern indberetning til Datatilsynets whistleblowerordning, som du finder HER.

Privacy Policy

Which matters can be reported through the Matas Group whistleblower scheme?

You may use the reporting system to report serious breaches of law and other serious matters in any company within the Matas Group. This includes, for example, issues relating to bribery and corruption, breaches of competition law, fraud, financial crime, serious breaches of food safety requirements, significant breaches of occupational health and safety requirements, physical and psychological violence, sexual misconduct, harassment and discrimination, personal data protection, the rights and protection of individuals, serious environmental damage, or conflicts of interest.

Reports concerning dissatisfaction with pay and employment conditions, interpersonal collaboration issues, or breaches of the smoking or alcohol policy, etc., should be made through the ordinary internal channels. If such matters are reported through the reporting system, they will be deleted immediately and the report will be closed.

The following companies are part of Matas Group:

• Matas A/S
• Matas Operations A/S
• Kicks Group AB (Sweden)
• Kicks Norge AS (Norway)
• Kicks Kosmetikkedjan OY (Finland)
• Graenn A/S
• Firtal Group ApS
• Web Sundhed ApS

Data Controller Receiving Your Information

For the purposes of this policy, “the organisation” means Matas Operations A/S, Rørmosevej 1, DK-3450 Allerød, CVR no. 27528430, which receives reports on behalf of all companies in Matas Group and acts as the data controller.

Logging

Reports are registered anonymously in the system. The only information recorded is the report itself. No log is kept of the IP address or machine ID of the computer from which the report is submitted.

Correction of Recorded Information

If you become aware that you have submitted incomplete or incorrect information, you should simply submit a new report in the system referring to the previous report and describing what needs to be corrected.

If, when creating a report, you chose to set up a secure mailbox, you may make the correction by logging into the system using your case number and your self-selected password.

Disclosure of Recorded Information

As a general rule, the information recorded in the system will not be disclosed to any third party outside the organisation and the Matas Group company to which the report relates. However, information may be disclosed in the following circumstances:

• Disclosure to an external lawyer or auditor in connection with the handling of the report, cf. section 11(2) of the Danish Whistleblower Protection Act.
• Where the conditions set out in section 26(2) or 26(3) of the Danish Whistleblower Protection Act are met.
• Where required by other applicable legislation.

Your Personal Information (Name, Email Address and Telephone Number)

If you provide personal information, please note that the organisation may use your personal information in investigating the matter and in any subsequent legal proceedings relating to the matter.

The organisation guarantees that your data protection rights will be respected without restriction and that your personal information will only be used as described above.

The organisation will not share your personal information with any third party outside the organisation and the Matas Group company to which the report relates, except in the cases described above in the section “Disclosure of Recorded Information”.

Deletion of Recorded Data

Recorded data may only be retained for as long as necessary.

Once it is no longer necessary to retain the recorded information, the information will be deleted.

IT Security

The reporting system is hosted by WhistleB Whistleblowing Centre AB (“WhistleB”), which is an independent third party and guarantees the security and anonymity of the system.

WhistleB has implemented the necessary technical and organisational measures to protect personal data against accidental or unlawful destruction, loss or deterioration and against unauthorised access or misuse. The handling of personal information is subject to strict controls and procedures and complies with good practice in this area.

All data transmission and storage are encrypted. No unencrypted information is transmitted over the public internet.

Anonymity

The system does not log IP addresses or machine IDs, nor does it use cookies.

If a report is made from a computer connected to the organisation’s network, there is a risk that the websites visited may be logged in the browser history and/or the organisation’s logs. This risk can be eliminated by submitting the report from a computer that is not connected to the organisation’s network.

If you upload documents, please be aware that they may contain metadata that could compromise the reporter’s identity. You should therefore ensure that any compromising metadata has been removed from a document before uploading it.

It is optional whether you submit a report anonymously or with personal information. If a reporter chooses not to remain anonymous, the reporter’s identity will be known to the persons handling the case. In that event, the reporter may be called as a witness in any subsequent legal proceedings.

Please note that if, in connection with your report, you choose to provide additional information from which you may be identified directly or indirectly, the organisation will also process that information in connection with the handling of the report. This also applies if you have chosen to remain anonymous.

What Is the Legal Basis for the Organisation’s Processing of Information in the System?

The legal basis for the processing of your information is as follows:

• The processing is necessary for the purposes of pursuing a legitimate interest in handling unlawful conduct, and that interest clearly overrides the interests of the data subject, cf. Article 6(1)(f) of the General Data Protection Regulation.
• Processing is necessary for the establishment, exercise or defence of legal claims, or whenever courts are acting in their judicial capacity, cf. Article 9(2)(f) of the General Data Protection Regulation.
• Processing is necessary for compliance with a legal obligation to which the organisation is subject, cf. Article 6(1)(c) of the General Data Protection Regulation.
• Processing is necessary to comply with section 9(1) of the Danish Whistleblower Protection Act, cf. Article 6(1)(c) of the General Data Protection Regulation.

Your Rights

Under the General Data Protection Regulation, you have a number of rights. If you wish to exercise these rights, please contact kundeservice@matas.dk.

Right of access

You have the right to obtain access to the personal data that the organisation processes about you, as well as certain additional information. However, the right of access must not adversely affect the rights and freedoms of others.

Right to rectification

You have the right to have inaccurate personal data concerning you corrected.

Right to erasure

In special circumstances, you have the right to have information about you deleted before the time at which the information would otherwise be deleted in the ordinary course.

Right to restriction of processing

In certain circumstances, you have the right to obtain restriction of the processing of your personal data. If you are entitled to restriction of processing, the organisation may thereafter process the information only — other than storing it — with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or an important public interest.

Right to object

In certain circumstances, you have the right to object to the organisation’s otherwise lawful processing.

You can read more about your rights on the website of the Danish Data Protection Agency here: https://www.datatilsynet.dk/borger

Questions

Matas Operations A/S is the data controller for the processing of the personal data that you report and may be contacted through the usual communication channels by email at kundeservice@matas.dk or by telephone at +45 4816 5544. This also applies, if you have any questions regarding the technical protection of personal data.

Complaint

If you wish to complain about our processing of your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency. You can read more about the Danish Data Protection Agency on its website: www.datatilsynet.dk or contact it by email at dt@datatilsynet.dk or by telephone at +45 3319 3200.

Versions

This is version 7 of the privacy policy for the Matas Group whistleblower scheme, dated May 12, 2026.