Communication through post office box

You may report possible breaches or deviations from the Code of Conduct and / or the Protocol for the Prevention of Situations of Workplace, Sexual or Sexual Harassment by writing to PO Box 19312, 28080 Madrid.

 

To download the documentation, click here:

 

Data Protection

 

WHISTLEBLOWING CHANNEL 

Data Controller 

Fomento de Construcciones y Contratas, S.A. (FCCSA), with Spanish TIN: A28037224, C/Federico Salmón 13, 28016 Madrid. Website: www.fcc.es Contact protecciondedatos@fcc.es. Where the situation so requires, other FCC Group entity(ies) involved in handling the allegation may be the data controller(s).

 Purpose/legitimacy

Assess the allegations and, where appropriate, undertake the analysis, investigation and actions corresponding to each case in accordance with the FCC Group's Compliance Model.

When the whistleblowing system is implemented by legal obligation, article 6.1.c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and article 8 of Spanish Law 3/2018 of 5 December. When the whistleblowing channel is not mandatory or the processing results from a public disclosure, Article 6(1)(e) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. The processing of special categories of personal data in the framework of the handling of the allegation, according to Article 9(2)(g) of Regulation (EU) 2016/679. In general, it is also based on Article 6(1)(f) of Regulation (EU) 2016/679, in relation to the FCC Group Compliance Model.

The obligation arises primarily from the following laws: Law 10/1995 (Spanish Penal Code); Law 3/2007 (Gender Equality Act); Law 2/2023 of 20 February regulating the protection of whistleblowers and the fight against corruption

Recipients of assignments System Manager, Compliance Committee, Corporate or Area Compliance Officer, person/s in charge of the investigation, HR of FCCSA or of the Entity where the employee works, Independent Whistleblower Protection Authority and, in the event that the allegation may be subject to administrative and/or judicial action, the data of the data subject could be communicated to the competent authorities (Labour and Social Security Inspectorate, State Security Forces and Corps, Judges and Courts, Public Prosecutor's Office, European Public Prosecutor's Office, etc.) for the investigation, enquiry and punishment of the act, where appropriate. You can request further information about the recipients of your data by sending an e-mail to protecciondedatos@fcc.es indicating the specific processing or use for which you would like information. 

Type of data

Identification and contact particulars, data on administrative or criminal convictions, data on personal characteristics (family details, date of birth, age, sex, nationality), data on social circumstances (hobbies and lifestyle, membership of clubs, associations), academic and professional data (training, qualifications, professional experience, membership of schools), employment details (job title), economic, financial and insurance data, data on transactions, goods and services, as well as any other data that may form part of the file. 

Origin

The data have been collected directly from the data subject him/herself or submitted by the whistleblower or notifier of the allegation.  

International transfers 

As specified above, the data may be transferred to the Entity to which the employee belongs or to the head of the Area. Some of the above companies may be located outside the European Economic Area or in a country that does not provide an adequate level of data protection in accordance with the European Commission - thus resulting in an International Data Transfer (IDT). This IDT is secured by appropriate safeguards (such as standard contractual clauses, binding corporate rules or the conditions of Article 49 GDPR), ensuring the security of the data and exclusively for the same purposes as described above.

Storage

The personal data processed will be deleted after three months from the time they are entered, except where this is necessary for the investigation of the allegation or to demonstrate the correct implementation of the whistleblowing system. Likewise, once the procedure has been completed, they will be blocked and subsequently deleted once the time limit for any actions that may arise has elapsed.  

Rights of data subjects

You may exercise your rights to access, rectification, erasure, portability, restriction and objection to processing, and not to be subject to decisions based solely on automated processing of your data, where applicable. To do so, written notification must be sent to Fomento de Construcciones y Contratas, S.A. - Information Security and Technological Risks Department. C/ Federico Salmón 13, 28016 Madrid or via e-mail to protecciondedatos@fcc.es. You must duly identify yourself and clearly indicate the right you wish to exercise. The exercise of these rights is free of charge.

Data subjects who believe that their personal data have not been processed in accordance with data protection regulations or need further information regarding data processing, may contact the FCCSA Data Protection Officer directly at the following address: protecciondedatos@fcc.es. If you are still not satisfied with the response, you may still lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).