EGTC Infra Whistleblower's Channel

Register your report Follow-up your report

Contacts

EGTC Infra Whistleblower's Channel has other ways of contact.

0800 721 9578

Business days: Available from 7 a.m. to 8 p.m.

transparenciaegtc
@deloitte.com

Any time.

Voicemail

Business days: Available after 8 p.m.
Weekends and national holidays: all day.


Register your report

EGTC Infra values integrity, transparency and accountability in relations with all its stakeholders. Therefore, true and honest information and care for the ethical conduct of its leaders, employees and suppliers are always valued.

This Channel was established so that our employees, suppliers, customers, service providers, subcontractors, partners and third parties in general can register complaints of possible suspicions of violation by the company's employees, the current legislation and / or the precepts established in our Code of Ethics.

EGTC Infra's Whistleblowing Channel is handled by a serious and independent company, which will ensure the confidentiality of your information. There is no record of the IPs of the computers of the users of the system via the internet.

Get to know EGTC Infra's Code of Ethics clicking here.

You can also register your report by sending an email to: transparenciaegtc@deloitte.com, or by contacting us on 0800 - 721 - 9578.

   


Dúvidas Frequentes


EGTC Infra has three ways of contacting the EGTC Infra Complaint Channel, they are:
• 0800 721 9578
• transparenciaegtc@deloitte.com
• https://ethicsdeloitte.com.br/egtcinfra

Any internal or external situations involving EGTC Infra employees or contracted outsourced professionals that violate the Code of Ethics, the Third Party Code of Conduct, EGTC Infra's Compliance Policies and current legislation must be reported, always in good faith.

Remember, it is not a channel of complaints, compliments or suggestions. All interested parties should report unlawful acts and unethical behavior, such as:
• Discrimination of any kind - religious, social, racial, sexual, political, educational, cultural - or any other act that harms human individuality;
• Sexual or moral harassment;
• Use of EGTC Infra's communication systems and channels for the dissemination of any offensive content, such as hoaxes, rumors, pornography or other forms of discrimination;
• Defamation of the name or image of the company, its employees, shareholders and other partners; • Any form of data falsification and plagiarism;
• Payment or receipt of bribes or bribes, or gifts, gifts, entertainment or hospitality as a form of corruption;
• Practice of anti-competitive activities;
• Practice of illicit in bidding procedures and public or private contracts;
• Unlawful acts, such as theft, theft, sabotage, conflicts of interest, fraud and others;
• Improper use and lack of zeal with the assets of EGTC Infra and Third Parties that are under its custody and responsibility, especially the public patrimony;
• Execution of works or businesses competing with the activities of EGTC Infra;
• Marketing of products or services or any other type of activity unrelated to work functions during office hours;
• Guard or possession of weapons of any kind on the premises of EGTC Infra by employees or visitors, except by legally authorized professionals;
• Non-compliance with the laws and other aspects of the Code of Ethics, the Third Party Code of Conduct or the compliance policies of EGTC Infra.

If you're unsure about the right thing to do, ask yourself questions like:
• Is the action consistent with EGTC Infra's values and policies?
• Is this action fair and legal?
• Will EGTC Infra's good reputation and/or my personal reputation be preserved?
• Can I be proud of these actions when I tell my family? If you answer "no" to one of these questions or if you have questions, stop and seek guidance from the Compliance area.

When received, the complaint will undergo preliminary analysis for treatment. The scope of the treatment is precisely to ascertain, in an exempt and independent way, the veracity of the information provided. Some accusations turn out to be unfounded. Sometimes this is due to lack of evidence or having received fragmented and incomplete information. Therefore, it is important to provide as much information and evidence as possible.

You will be identified only if it is of your choice, as the report can be made anonymously, without you citing your data. The Whistleblowing Channel is under the management of Deloitte, an independent company that guarantees the security and anonymity of all reports made from anywhere, such as from your work computer, home or any internet portal.

There is no set deadline. All complaints are evaluated and dealt with. The time of investigation will depend on the complexity of the case.

The whistleblower will be able to follow the updates of their report through the Whistleblowing Channel on the internet or by phone, using the protocol number and password. On the internet, a section called "Conclusions on the Report" will be available, where you will have final information about your complaint. Details of what was done are not disclosed in order to ensure the confidentiality of the process. However, the whistleblower should notice, on a daily basis, improvements related to the fact reported in their work environment.

You will receive a protocol and a password to follow the progress of the report by calling 0800 721 9578 or by the website: https://ethicsdeloitte.com.br/egtcinfra. You may also be able to provide additional information about the event to assist in the investigation.

EGTC Infra has a Policy of Communication Channels and Against Retaliation, which guarantees protection to any employee who provides information or assistance to investigations related to possible violations.

The protocol and password are issued only when the registration is made by phone (when there is the support of an attendant, from 7am to 8pm, on weekdays), internet and e-mail. Calls that occur from 8 p.m. to 7 a.m. are recorded on an answering machine and analyzed in the same way as all complaints. The only difference is the impossibility of issuing a follow-up protocol and password if the report is anonymous. If you identify yourself in the recording, the day after your contact, an attendant will contact you, clarify any doubts and inform you of the protocol and password of follow-up.


Privacy Notice

By registering a report on this Confidential Complaints Channel (via website or toll free phone), you may provide us personal data (information that identifies or may lead to the identification of a natural person) and sensitive personal data (racial or ethnic origin, religious belief, political opinion, union membership, or religious, philosophical or political organization, health or sexual life data, genetic or biometric data) about you; Protester, denounced or third party mentioned in the report.

This Privacy Notice it is intended to clarify how DELOITTE treats your personal data and sensitive personal data (collectively referred to herein only as personal data) when you contact us to use the services of the Confidential Complaints Channel or when you are targeted or mentioned in a report.

All personal data collected in this Confidential Complaints Channel will be treated by DELOITTE in accordance with the provisions of the General Law on Protection of Personal Data (Law No. 13,709/2018 – "LGPD") and relevant regulations.

For more details on the measures we apply in the treatment of personal data, please visit DELOITTE's Privacy Policy via the link

1. What types of personal data are collected?

Will be collected only the personal data provided voluntarily by the Protester through the registration of the report in this Confidential Complaints Channel - via website or toll-free phone.

Any personal data informed in the report that is considered excessive, unnecessary or that has no relevance to the investigation of what happened will be disregarded and will only be stored for the purpose of maintaining the entirety of the original text contained in the report, for the period necessary to achieve the processing purposes.

Protester

The personal data of the Protester will be collected according to the identification profile chosen, and may include name, gender (statistical purposes), position, area, e-mail, telephone, mobile phone, type of audience and voice recording (reports via toll free phone).

In addition, any other personal data contained in the report and files attached by the Protester may be collected, which may include images, voice recordings and other types of personal data.

Denounced and third parties

The following personal data may be collected of the accused and third parties from a report voluntarily registered by the Protester:

i) first name, surname, position and workplace;
ii) description of suspected violation of the Company's Code of Ethics, policies, and/or applicable law and regulations, including all relevant facts and details;
iii) any other personal data that may be mentioned by the Protester during the description of the event, which may include images, voice recordings and other types of personal data.

This Confidential Complaints Channel is not designed or intentionally targeted to collect personal data from children and adolescents. However, in any situations where the collection of these types of personal data is necessary in the context of receipt and investigation of a report, the treatment will take place in the best interests of the child and / or adolescent and all provisions of the LGPD and pertinent regulations will be respected.

2. What is the purpose of collecting personal data?

Protester:

The processing of personal data aims to allow the identification and contact between DELOITTE and /or the COMPANY and the Protester to clarify doubts, collect additional information and progress of the investigations, respecting, in any case, the identification profile chosen by the Protester (identified, confidential or anonymous). In addition, this data may be processed for the purposes of compliance with legal or regulatory obligations, regular exercise of rights and statistical analysis (in an anonymized manner).

Denounced and third parties

The collection of this personal data is intended to verify the facts reported and take appropriate action, in accordance with applicable legislation. Such investigation will be carried out by the COMPANY, and DELOITTE is merely an intermediary, responsible only for the sharing of personal data and reports registered in this Confidential Complaints Channel. In addition, this data may be processed for the purposes of compliance with legal or regulatory obligations, regular exercise of rights and statistical analysis (in an anonymized manner).

3. What is the legal basis that justifies the processing of personal data?

All personal data collected will be processed based on the COMPANY's legitimate interests and sensitive personal data based on regular exercise of rights, since both treatments, in the context and scope of the services provided by DELOITTE, aim to assist the COMPANY in the investigation, prevention and mitigation of behaviors and misconduct that violate the COMPANY's Code of Ethics, internal policies, laws and regulations.

It is also possible that the processing of personal data and sensitive personal data occurs to comply with legal or regulatory obligations, depending on the alleged misconduct practiced.

4. With whom do we share the personal data collected?

The personal data of the Protester, denounced and third parties may be shared with:

i) The COMPANY, for the purposes of knowledge and investigation of the content of the report, always respecting the identification profile of the Protester;
ii) Authorities, Agencies and Government Entities, to comply with legal or regulatory obligations and regular exercise of rights;
iii) Technology companies that manage the integrated systems or responsible for the storage and guarantee of security in the processing of the personal data collected; and
iv) Third-party companies that will replace DELOITTE in the provision of Confidential Complaints Channel services to the COMPANY.

For more details on the shares described above, please contact the DELOITTE Clerk /DPO (Data Protection Officer) via the link Contact us.

5. How long is personal data stored?

Personal data will be kept only for as long as necessary to fulfill the purposes described in this document or as necessary to comply with legal or regulatory obligations and regular exercise of rights. When personal data is no longer necessary or relevant to the intended purposes, its erasure will be provided.

For statistical purposes, personal data will remain stored in an anonymized manner.

6. What are the rights relating to personal data?

According to the LGPD, the owners have several rights over their personal data, among them: confirmation of processing, access to personal data, updating and correction of incorrect, incomplete or inaccurate personal data; anonymisation, blocking and deletion of personal data that are unnecessary, excessive or non compliance with LGPD; opposition to the processing of personal data, when we no longer have a legitimate or legal need to process it; information on the sharing of personal data with public and private entities.

These rights are not absolute and should be interpreted in the light of legislation and other regulations. Thus, DELOITTE will evaluate legal claims individually in order to maintain the confidential nature of the Confidential Complaints Channel and not compromise the progress of investigations that may be ongoing with the COMPANY.

It is noteworthy that when the Protester chooses not to identify himself when recording the report, DELOITTE will not be able to guarantee access to the rights provided for in the LGPD since it will not have access to the identification data of the owner.

If you would like to access any of your rights provided for in the LGPD for free, please contact deloitte's DPO through the link Contact us.

7. Security

DELOITTE adopt technical and organisational measures to protect personal data from unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication or any form of improper or unlawful treatment.

In addition, access to personal data is restricted only to DELOITTE professionals who need to access it to develop activities related to the treatment of the report.

Whenever possible and applicable, anonymization and encryption techniques will be adopted for the security of personal data.

8. Alterations

This document may be changed without the need of prior notice, such as in cases of change in legislation or any decision or guidance of the National Personal Data Protection Authority ("ANPD"). The Protester may periodically review the altered content to have access to such modifications.