Whistleblowing system

To submit a report

If you notice or suspect any irregularities or other misconduct in connection to SCA's operations, it is important that you report this immediately (whistleblowing). By raising your voice, you help protecting SCA's employees and our brand.

SCA encourages you to be open with your identity, but it is also possible to file a report completely anonymously. However, an anonymous report can often be more difficult to investigate and follow up.

The whistleblowing system

The whistleblowing system is an encrypted reporting channel provided by an external party. You submit your report via the following link: https://report.whistleb.com/sca.

Visselblåsare

How will your report be handled?

Reported cases are handled by independent and autonomous functions appointed by each business unit within SCA. All cases are handled and investigated confidentially, promptly and professionally.

You will receive feedback from SCA once you have submitted your report and you will also receive updates on the progress of the case. The amount of information that can be provided is determined on a case-by-case basis and depends, among other things, on what privacy considerations are deemed necessary.

Protection of reporters

Anyone who reports a genuine suspicion in good faith is protected against any form of retaliation and other unfavorable treatment because of it. This protection also applies to anyone associated with a reporter, such as relatives, colleagues or anyone who has helped with the reporting. SCA also does not tolerate retaliation because someone has approached their labor organization to consult on reporting. Similarly, it is strictly prohibited to prevent or attempt to prevent anyone from seeking such consultation.

Processing of personal data in whistleblowing cases

SCA processes personal data only to the extent it is necessary to assess and investigate a reported case, or if it is required in order to be able to provide such information that is necessary for measures to be taken in relation to the findings in a case, for reports to be used as evidence in legal proceedings or to fulfill disclosures made in accordance with law or regulation. Personal data processed in the context of a case are deleted as soon as the purpose of the processing ceases and no later than two years after the end of the investigation. Personal data that are clearly not relevant to the processing of a particular report are not collected and should be deleted as soon as possible if they have been collected by mistake.

As a reporter, you have the right to request in writing, free of charge, information about the personal data we process about you. You may at any time request that we rectify any inaccurate information about you. You also have the right to object to our processing, ask us to erase or restrict the personal data we hold about you and for us to provide you with a copy of that personal data. We may have the right to deny your request if it would hinder the investigation or involves a risk of destroying evidence.

If you are dissatisfied with how we process your personal data, please contact the SCA’s GDPR management organization: Privacy notice – GDPR – SCA. You also have the right to file a complaint with the supervisory authority:

The Swedish Authority for Privacy Protection

Box 8114

104 20 Stockholm

E-mail: imy@imy.se