Whistleblower Reporting System

As norbloc we are committed to maintaining the highest standards of ethics, integrity, and transparency in all our operations. As part of our dedication to these values, we have established a Whistleblower Reporting System in accordance with Directive 2019/1937.

Employees, contractors, and other stakeholders are encouraged to report any concerns about potential wrongdoing, unethical behavior, or violations of company policies. We assure protection against retaliation for individuals who make good-faith reports. Our organization strictly prohibits any form of retaliation against whistleblowers. To facilitate the reporting process, we have established a secure and confidential reporting channel.

Reports may be submitted by contacting the designated Whistleblower Reports Receiver at whistleblower@norbloc.com.

We note that whistleblowers have the option to remain anonymous during the reporting process, and every effort will be made to protect the identity of the reporter. All reports will be promptly and thoroughly investigated.

Purpose
The purpose of this Whistleblowing Policy is to provide norbloc employees and stakeholders with a secure, confidential mechanism to report unethical, illegal, or improper conduct, particularly concerning information security and privacy. This policy supports norbloc’s compliance with ISO 27001 and ISO 27701 standards by ensuring all reports are investigated thoroughly, confidentially, and without fear of retaliation.
Scope
This policy applies to all norbloc employees, contractors, suppliers, and other stakeholders. It covers a broad range of concerns, including but not limited to:
- Violations of information security protocols and privacy requirements
- Fraud, theft, and other financial misconduct
- Unauthorized access or use of personal data
- Harassment, discrimination, or abusive behavior
- Environmental, safety, and health violations
- Any other unethical or improper conduct affecting norbloc’s operations
Definitions
- Whistleblower: An individual who raises a concern about potential wrongdoing within norbloc.
- Whistleblowing: The act of reporting suspected misconduct, illegal activities, or policy violations by individuals within norbloc.
Reporting Procedure
norbloc encourages employees and stakeholders to report concerns as soon as possible. Reports can be submitted through the following confidential channels:
- Email: whistleblower@norbloc.com
- Direct Reporting to DPO: Elona Prifti, email: elona@norbloc.com
Confidentiality
norbloc is committed to maintaining the confidentiality of the whistleblower. All reports will be handled with strict confidentiality, and information will only be disclosed to those involved in the investigation and resolution process.
Protection from Retaliation
norbloc strictly prohibits any form of retaliation against individuals who report concerns in good faith. Retaliation, including termination, demotion, harassment, or adverse employment actions, is a violation of this policy. Individuals found to engage in retaliation will face disciplinary actions, including possible termination.
Investigation Process
Upon receiving a report, norbloc’s DPO will initiate the following process:
- Initial Assessment: Review the reported concern to determine the nature and validity.
- Investigation: Conduct interviews, review relevant documents, and gather necessary evidence.
- Conclusion: Summarize findings and recommend corrective actions.
- Follow-Up: Ensure that corrective actions are implemented and monitor the situation for compliance.
False Allegations
norbloc expects all employees to report in good faith. Intentionally false or malicious reports will be treated as misconduct and may result in disciplinary action.
Policy Review
This Whistleblowing Policy will be reviewed annually or when required to ensure it aligns with norbloc’s compliance obligations, including updates in ISO 27001 standard.
Contact Information
For any questions regarding this policy, please contact norbloc’s DPO Elona Prifti at elona@norbloc.com.

Whistleblower Reporting System

© 2024 Norbloc. All rights reserved