Rules of procedure for the processing of tips

1. introduction:
As an international payments regulator, we are always aware of our responsibility for ethical and lawful behaviour and therefore act on the basis of strict values and principles. Our corporate mission statement is based - regardless of hierarchy and position - on responsible and reliable dealings with colleagues, business partners, customers and animals. We also expect this responsible and reliable approach from our business partners along the supply chain, which is why we also require them to adhere to high standards with regard to the treatment of people and animals.

Our whistleblower system is designed to help report suspected or actual violations of laws, applicable laws and other internal and external regulations to EFIS European Financial Services AG anonymously or confidentially. The complaints procedure described here includes the complaints procedure in accordance with the Supply Chain Act (SCA) and the Whistleblower Protection Act (WPA).

2. scope of application: 
These rules of procedure apply to the receipt and processing of information of all kinds relating to suspected or actual compliance violations at European Financial Services AG and the associated supply chains. The complaints procedure described here includes the complaints procedure in accordance with Section 8 of the German Supply Chain Act (SCA). The processes described in this complaints procedure apply to all information received via the reporting channels mentioned in section 3.2.

3. submission of notices:
3.1 Authorised group of persons:
Any person, regardless of their relationship to EFIS European Financial Services AG, is entitled to report suspected or actual compliance violations within EFIS European Financial Services AG and the associated supply chains via one of the reporting channels mentioned in section 3.2.  

3.2 Reporting channels:
Information on suspected or actual compliance violations can be reported to EFIS European Financial Services AG via the following channels:
  • Electronic whistleblowing system: https://efis.fnmz-whistleblowing.com 
  • Post: EFIS European Financial Services AG, Blumenfeldstrasse 15, 9403 Goldach
Irrespective of the reporting channel chosen, reports can be made anonymously or confidentially, stating the name. It should be noted that anonymity can only be guaranteed via the electronic whistleblowing system. All reports, regardless of the reporting channel and the form of the report (anonymous or confidential), are processed with the utmost confidentiality and under the protection of personal data.

3.3 Reference objects:
Can be reported:
  • actual or suspected violations of laws, other directly applicable legal provisions and other binding internal and external regulations
  • human rights and environmental risks as well as violations of human rights or environmental obligations due to business activities in our own business area or those of a supplier in accordance with the German Supply Chain Act 
In particular, however, information on actual or suspected violations in the following areas can be reported:
  • Anti-Money Laundering Act (AMLA)
  • Data protection
  • Environmental protection
  • Conflicts of interest
  • Manipulation of business documents/balance sheets
  • Antitrust and competition law
  • Violations of principles of behaviour in the workplace and human rights
It should be noted that product and service-related customer concerns and complaints will not be processed. These should be addressed directly to Customer Service at money@efis.ch. 

3.4 Contents of the notice:
In order to process a tip efficiently and quickly, it is helpful to provide as much detail as possible. The following key questions can help the person providing the information to formulate their report:
  • Description of the complete facts of the case in chronological order:
    • What happened?
    • When did the incident occur/is the incident still ongoing?
    • Where did the incident take place?
    • Who is/are the person(s)/group(s) of people affected?
    • What damage resulted from the incident?
    • Who could be responsible for the incident?
  • Which law, legal provision or regulation has been violated and what is the connection between the violation and EFIS European Financial Services AG?
  • What evidence is available (photos, videos, documents, witnesses, etc.)?
  • What expectations do you have of EFIS European Financial Services AG and what is the specific aim of the complaint?
  • Have other persons (both within and outside EFIS European Financial Services AG) already been informed about the grievance?
The key questions listed here are intended to support the person making the notification in formulating the notification and to ensure and speed up the proper processing of the notification. It is not necessary to provide information on the aspects listed in the key questions in order to process the report. In order to ensure that the report is processed successfully and to clarify any queries that may arise, it is recommended that a means of contacting the person submitting the report be set up. When submitting a report via the electronic whistleblowing system, this contact can also be made anonymously. 

4. procedure for processing a notification:
4.1 Confirmation of receipt of the notification:
The whistleblower will receive confirmation of receipt no later than seven days after submitting the report via the electronic whistleblowing system.

If the notification is submitted by post, a written confirmation of receipt will be sent by post within seven days of receipt of the notification, provided that a sender is known.

4.2 Processing of information:
Initial assessment: After receiving a report, the case handler first carries out an initial assessment of the report to determine whether the facts described in the report justify a more in-depth examination and processing. If the case handler requires further information in order to carry out the initial assessment, the person making the referral will be asked to provide further information. If, during the initial assessment, the case handler determines that the facts/allegations described in the report are irrelevant or that there is not enough information to conduct further investigations, the case will be closed.

Clarification of the facts: Various investigations are carried out as part of the clarification of the facts. The scope and nature of these investigations depends on various factors, including the nature of the allegations made, the parties allegedly involved, the protection of attorney-client privilege and data protection and the confidentiality of information. Furthermore, the case handler is authorised to request additional information from the whistleblower.  

The duration of the clarification of the facts depends in particular on the complexity of the case, the necessary investigative measures, the availability of information and the parties involved.  The case handler endeavours to clarify the facts as efficiently and swiftly as possible. The whistleblower will receive final feedback on the reported case no later than 90 days after receipt of the report.

Results of the fact-finding investigation: Depending on the results of the fact-finding investigation, the case handler will take measures to appropriately address any violation/risk that may have been identified. These measures may include the separation of employees or the termination of a supplier relationship.

4.3 Communication with the whistleblower:
The whistleblower is authorised to provide further information on the reported transaction at any time. For this purpose, the reporting person may use all reporting channels listed under point 3.2; however, it is assumed that EFIS European Financial Services AG can clearly assign the additional information to the report.

EFIS European Financial Services AG will contact the whistleblower in the following situations:
  • Within seven days of receipt of the notice of confirmation of receipt
  • Between the confirmation of receipt and the final feedback to request additional information if necessary
  • Within 90 days of receipt of the report to provide final feedback to the person making the report

5. principles on the procedure for processing notifications:
5.1 Confidentiality:
The incoming information is received by case handlers. In the event that other departments need to be involved in clarifying the facts, the employees responsible for processing the tip-offs will treat the information obtained confidentially towards other persons.

The identity of whistleblowers will not be disclosed if they so wish and if this is legally possible. Any statutory disclosure and reporting obligations remain unaffected by this. 

5.2 Protection of whistleblowers:
The protection of whistleblowers has the highest priority. Whistleblowers who report suspected or actual violations of laws, applicable regulations and internal and external rules and who do so in good faith and to the best of their knowledge do not have to fear any unfavourable measures under the scope of these Rules of Procedure. In the event of recognisable misuse of the reporting procedure, i.e. the reporting of information that is obviously irrelevant and does not require any further investigation, legal action may be taken against the person making the report.

5.3 Impartiality:
Impartiality is ensured by organisational decisions. In particular, the employees of EFIS European Financial Services AG act independently of instructions when reviewing the information. 

5.4 Fair procedure:
The applicable laws and company regulations, as amended from time to time, are complied with during the clarification of the facts and the investigation.

5.5 Presumption of innocence:
Investigations are conducted neutrally and objectively in accordance with the presumption of innocence.

6. data protection: 
The examination of reports received (including the deletion and storage of data) is carried out on the basis of the data protection regulations (GDPR) and the relevant internal company regulations. For further information on data protection, please refer to our data protection notice in the electronic whistleblower system.