Whistleblowing at LAGERBOX

Welcome to the LAGERBOX Whistleblowing System. This platform provides a secure way to report potential legal violations or significant risks confidentially or anonymously. Our aim is to make the submission of reports as straightforward as possible and to support transparent, compliant corporate governance.

What can be reported?

The whistleblowing system is intended for reporting actual or suspected violations of legal regulations in the following areas:

• Consumer and customer protection
• Environmental and climate protection
• Financial services, financial products, and financial markets
• Prevention of money laundering and terrorist financing
• Food and feed safety, animal health and animal welfare
• Public procurement
• Criminal offenses according to Sections 302–309 of the German Criminal Code (StGB)
• Product safety and product conformity
• Protection of personal data, privacy, and IT security
• Public health
• Radiation protection and nuclear safety
• Traffic safety

Additionally, significant internal compliance violations and matters posing substantial risks to LAGERBOX may also be reported.

Compliance at LAGERBOX

Lawful and rule-compliant conduct is a key part of our corporate culture. Compliance means adhering to legal requirements, regulatory standards, and internal policies. The aim is to prevent potential harm and to strengthen the trust of our employees, partners, and customers.

Missing or insufficient compliance can lead to far-reaching consequences, including fines, liability claims, reputational damage, financial losses, or legal repercussions. A reliable whistleblowing system is one of the essential components of an effective compliance management framework.

How does the whistleblowing system work?

Reports of potential legal violations or compliance risks can be submitted via the secure online portal. If desired, the system can be used fully anonymously.

Once a report is submitted, it is automatically forwarded to the designated internal case handler. This person is responsible for confidentially reviewing the matter and coordinating any further steps. If necessary, follow-up questions or additional information may be exchanged through the system — anonymity remains protected as long as no personal data is provided.

Confidentiality and anonymity

Protecting your identity is a top priority. If you choose to submit your report anonymously, no personal data will be processed. If you voluntarily provide your name, we will treat this information with strict confidentiality and in accordance with applicable data protection laws.

The technical system, operated by a specialized service provider, ensures secure and encrypted transmission and storage of all reports. Neither LAGERBOX nor the service provider has access to your identity unless you explicitly disclose it.

What happens after a report is submitted?

• Your report is reviewed by the responsible case handler.
• You will receive a confirmation of receipt if contact details are available or if you choose to communicate via the anonymous access function.
• All further communication takes place exclusively via the secure chat function within the portal.
• Every step taken to clarify the matter is documented and carried out with strict confidentiality.
• Once the process is completed, you will receive feedback on the outcome or the current status of the investigation — if technically possible or if requested by you.

After submitting your report, you will receive access credentials that allow you to track the progress of your case. Please store these credentials safely, as they cannot be recovered or reissued.

Responsible use

Please use the whistleblowing system responsibly. False or intentionally misleading reports can have serious consequences for affected individuals and may result in legal action. Only provide information that you believe to be accurate to the best of your knowledge.

Information pursuant to Art. 13 GDPR

The following information applies only if you provide personal data as part of your report:

• The controller responsible for data processing is LAGERBOX.
• Personal data is processed solely for the purpose of handling your report.
• Processing is carried out based on the legal requirements of the Whistleblower Protection Act (HinSchG) and legitimate interests in clarifying potential violations.
• Your data will only be accessible to authorized internal parties and will not be shared with unauthorized third parties.
• Data is stored only for as long as necessary for processing the report and to comply with statutory retention periods.
• You have the right to request access, rectification, deletion, or restriction of processing in accordance with the GDPR, unless you choose to remain anonymous.

If you report anonymously, no personal data will be collected or processed.

REPORT VIOLATION

LAGERBOX - Give things a home