It is a means of communication that PALEX enables to facilitate the communication of breaches of its Code of Ethics, Compliance System or the applicable legislation, in a completely confidential manner and, if desired, also anonymously.

You can consult the Policy of use of the Internal Information System in which all the applicable rights and guarantees are collected.

The person in charge of the Internal Information System. However, Human Resources and the Legal Department may also have access to the communication, when deemed necessary. The persons involved in the management of the communication are also subject to the duty of confidentiality and the privacy policy.

You may report harassment or discrimination situations. However, you may not use the Internal Information System to report or complain about vacation, payroll, interpersonal problems or other business organizational issues.

Integrity, accountability and transparency are core values for PALEX. We have an obligation to know and understand our Code of Ethics. We also have the responsibility to report any potential non-compliance that we become aware of.

The important thing is to act in good faith and that there is reason to believe that the reported facts are true. PALEX does not expect that it has investigated the facts to the fullest extent possible. If the investigation concludes that no infringement has occurred, but that the report has been made in good faith, there will be noretaliation. However, if it is found that you have made the communication in bad faith, communicating false information, you may be sanctioned and may assume the corresponding responsibilities.

In the communication process you may decide whether to report your personal data or not. If you decide not to do so, you will have to establish your own follow-up through the communication channel to see the progress and resolution of the communication made. You will be given a username and password to access the status of the communication. The channel is an independent means of PALEX and does not record IP information from where you connect.

Some tips to achieve maximum anonymity, in addition to informing that the report is anonymous, are:

• Make sure that in the description of the communication you do not include information from which it is easy to identify you. The same applies to the documents you attach as possible evidence.
• Do not report from a computer connected to the PALEX network, including a mobile phone connected to the corporate wifi. Report2box does not log information, but before it reaches our systems it must pass through our own control systems such as proxy's or firewalls and there may be configurations that allow us to know which services you connect to.
• You can use the open source browser TOR, which anonymises the IP address.

Unfortunately, for security reasons, only the person making the communication knows his or her access code and password. If you lose either of them, you will not be able to follow up the communication. This does not mean that the communication will not follow its course, but be aware thatthat you will not be able to see how it is progressing, nor provide more information if PALEX requires it.

In accordance with the provisions of the data protection regulations in force, the companies that make up PALEX with access to the Internal Information System are responsible for the processing, management and storage of the personal data of all persons involved in the consultations and communications. Both these companies and the external experts contracted comply with the technical and organizational measures necessary to guarantee the security of the data and avoid its alteration, loss and unauthorized processing or access.

The Internal Information System runs on a platform external to PALEX. The servers are located in DPC's in European territory. Your data is encrypted to avoid intrusion risks as much as possible.