Whistleblowing system of Škoda Auto a.s.
according to Czech Act on the Protection of Whistleblowers
Information about Personal Data Processing
Through this document we, as the personal data controller – Škoda Auto a. s., registered office: tř. Václava Klementa 869, Mladá Boleslav II, post code: 293 01, Reg. No.: 00177041, registered in the Commercial Register kept by the Municipal Court in Prague under file ref. B 332, (hereinafter referred to as “Škoda Auto”) – provide you with information about personal data processing and your rights related to the processing.
The processing occurs as part of the following activities
Purpose of processing:
ID: 1114 - 24.02.2026
Whistleblowing system of Škoda Auto a.s. according to Czech Act on the Protection of Whistleblowers
Description of the purpose of processing:
We process your personal data for the purpose of verifying reports of potential violations of applicable legal regulations, as listed in the relevant Act No. 171/2023 Coll., as amended, on the protection of whistleblowers, and carrying out related actions and investigations. Furthermore, for the purpose of fulfilling the obligations of Škoda Auto a.s. arising from relevant legal regulations and for the purpose of protecting legitimate interests. Personal data related to such reports are processed internally, including the recording and identification of violations of applicable legal regulations and their subsequent resolution. We will provide you with more detailed information about this processing if you become involved in any related investigation as a data subject relevant to the whistleblowing systems process at Škoda Auto, including situations where we ask you for a statement or other form of cooperation during the investigation. If you yourself were the subject of an investigation, we will provide you with more detailed information about that investigation only if it does not prevent or negatively affect the achievement of the investigation's objectives.
Authorization to process:
We have a legal obligation to process your personal data according to Act No. 171/2023 Coll., as amended, on the protection of whistleblowers.
Categories of personal data that we process:
Identification details
Contact details
Data relating to internal control and investigations
Processing period and archiving:
5 years according to Act No. 171/2023 Coll., as amended, on the protection of whistleblowers.
Categories of processors or recipients to whom we may disclose personal data:
Group companies
Your personal data may be provided on request to public authorities, in particular the courts, the Police of the Czech Republic and other institutions active in criminal proceedings, to the necessary extent and within the bounds of the law.
Source of personal data:
Directly from the data subject. In exceptional cases, from third parties.
Transfer of personal data to third countries or multinational companies:
No
Automated decision-making on the basis of personal data:
No
Other information
The personal data may be subject to archiving in the public interest and used for the purposes of scientific, historical or statistical research. In justified cases, personal data may be subject to processing in order to resolve legal matters, including the performance of duties towards public authorities, and monitoring and continuous evaluation of legal risks.