Complaint process of our company

Rules of procedure for complaints under the LkSG (SCDDA) at Bizerba SE & Co. KG 

1. Aim and scope

These rules of procedure describe the process and requirements for submitting and processing anonymous complaints about human rights and environmental risks or violations related to our company or our suppliers.

2. Submitting a complaint

You can submit your complaint anonymously via this online portal. You can write the report in your national language. The portal automatically translates it into the language you need. There are no costs for you in reporting it.

3. Content of the complaint

Please provide the following information as far as possible: Description of the incident: Detailed description of the incident or observation. Place and time: Specify the place and time of the incident. People or areas affected: Information about the people or areas affected. Evidence or information: Any type of evidence or information that can contribute to the investigation.

4. Confidentiality and protection Confidentiality:

Your complaint will be treated confidentially. Even if you remain anonymous, your identity, if known, will be protected. Protection against reprisals: We do everything we can to ensure that you do not suffer any disadvantages as a result of submitting the complaint.

In order to maintain the confidentiality and protection of your personal data, numerous technical and organizational measures (TOMs) have been implemented in accordance with Art. 32 GDPR. The Innolytics AG platform we use processes all customer data in an ISO 27001-certified data center in Germany. Innolytics may use the following subcontractors for the data processing for the services mentioned: Incoming user requests are processed via a traffic manager in the Microsoft Azure Cloud in Frankfurt/Main. This forwards the user requests to the Innolytics web server with the lowest load in order to ensure a continuously high access speed. The software is hosted in a multi-server architecture at Hetzner Online GmbH in Bavaria. The web servers and the database server are separate from each other. Files (images, videos, etc.) are stored in the S3 service of the Amazon AWS Cloud in Frankfurt/Main or at Microsoft Azure in Frankfurt/Main. The backup server is Microsoft's Azure Cloud in Frankfurt and the Strato HiDrive system in Berlin.

There are agreements on contract data processing in accordance with Art. 28 (3) GDPR. If subcontractors are brought in by Innolytics,

the contractual agreements with the subcontractors must be designed in such a way that they meet the requirements for confidentiality,

data protection and data security between the contracting parties to this contract. The licensee must be granted control and inspection rights in accordance with Section 7 of this agreement in these contracts with the subcontractors in such a way that they entitle the licensee,

without prejudice to Innolytics' responsibility for the subcontractors, directly to the subcontractors. Innolytics

is obliged to provide the licensee with information on the essential content of the contract and the implementation

of the data protection-related obligations by the subcontractors upon request.

Innolytics AG is responsible to the licensee for all actions and omissions of the subcontractors it employs.

5. Processing the complaint Confirmation of receipt:

If the complaint is not submitted anonymously, a confirmation with a case number and access data will be displayed immediately after the report has been completed and sent by email to the email address you provided. Anonymous whistleblowers will immediately receive a confirmation with a case number to protect their anonymity.

Review and evaluation: Your complaint will be assigned to a person trained in the LkSG and its confidentiality requirements for complaints and will be examined by that person or sent to an independent team for examination as an anonymized factual presentation. The person making the report will receive initial active feedback within 24 hours.

Measures: If the complaint is justified, appropriate measures will be taken to resolve the problem.

6. Feedback Information about the status:

You can find out about the status of your complaint at any time using the case number. Final report: You will receive a final report after the investigation has been completed. Please log back into the system no later than 14 days after your report. Then you will find out more about the current status.

7. Documentation and follow-up Documentation:

All complaints and measures are documented to enable follow-up and to monitor the effectiveness of the measures. Continuous improvement: Your complaints help us to continuously improve our processes.

8. Contact

If you have any questions about this procedure, you can also contact our: Email: [email address] compliance-scdda@bizerba.com Conclusion We thank you for your commitment and courage in pointing out possible risks and violations. Your support helps us to fulfill our responsibility along the supply chain and to make improvements.

Here you have the opportunity to complain anonymously:

• Complaints about services and products
• Reports of criminal offenses and unethical behavior
• Complaints about human rights abuses and environmental violations by our suppliers