xITee k.s. promotes an open corporate culture based on trust, transparency, and compliance with legal and ethical standards. In accordance with Act No. 171/2023 Coll., on the Protection of Whistleblowers, the company has established an internal reporting system that allows for the safe reporting of potential illegal or unethical conduct.

The internal reporting system is intended for employees and other individuals who, in connection with their work or similar activities, have become aware of conduct that may be in violation of legal regulations, the company’s internal rules, or the principles of responsible business conduct.

What Conduct Can Be Reported

The reporting system is primarily intended for reports concerning:

• violations of laws,
• suspected criminal activity or misdemeanours,
• corrupt or fraudulent conduct,
• breaches of employment obligations,
• breaches of personal data protection rules,
• conflicts of interest,
• breaches of the company’s internal rules and ethical principles,
• other conduct falling within the scope of the Whistleblower Protection Act.

Whistleblower Protection

The company ensures the protection of whistleblowers who submit reports in good faith and have reasonable grounds to believe that the reported facts are true.

Any form of retaliation against a whistleblower is prohibited. The prohibition on retaliation applies in particular to termination of employment, reduction of salary, discrimination, disadvantage, or other forms of unfavourable treatment in connection with the submission of a report.

Access to reports is restricted exclusively to authorized persons who are bound by a duty of confidentiality and act in accordance with applicable laws.

Methods of Submitting Reports

Reports may be submitted via the following communication channels:

Email: whistleblowing@xitee.com

By phone: +420 725 258 907

In person: by prior arrangement with the designated person

Mark the envelope: “DO NOT OPEN – for the attention of the designated person only”

Designated person

The designated person responsible for receiving, assessing, and handling reports is: Mgr. Michaela Morong

The deputy to the designated person is: Mgr. Kateřina Hutová

External reporting system

The whistleblower may also use the external reporting system of the Ministry of Justice of the Czech Republic.

Personal Data Protection (GDPR)

xITee k.s. processes personal data provided in connection with reports in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and related legal regulations.

Personal data is processed exclusively for the purpose of receiving, assessing, and handling reports and ensuring the protection of the whistleblower in accordance with Act No. 171/2023 Coll., on the protection of whistleblowers.

Access to personal data is restricted to authorized persons who are bound by confidentiality and have implemented appropriate technical and organizational measures to secure the data.

Personal data is retained only for the period strictly necessary to fulfill the purpose of processing and to comply with the company’s legal obligations.

Data subjects have the rights set forth in the GDPR, in particular the right to access personal data, to have it corrected, to restrict processing, or to file a complaint with the Office for Personal Data Protection if they believe that processing is taking place in violation of legal regulations.