Ethics and whistleblowing channel

The internal reporting system of XSEC by IberFácil. Here you can report, with your name or anonymously, wrongdoing or harassment you have learnt about in a work or professional context.

Make a report Check my report

What you can report

Serious or very serious criminal or administrative offences, breaches of European Union law, fraud, data protection breaches and any workplace harassment, sexual harassment or sex-based harassment.

Who can use it

Anyone who works or has worked with us: staff, trainees and candidates, self-employed people, suppliers, subcontractors and their workers, shareholders and members of management bodies.

How it works

You can write through this form or ask to report orally: by phone, by voice message or at an in-person meeting, held within seven days at the latest.
When you send it you get a tracking code and a key. With them you check the status and talk to whoever handles your report, without identifying yourself.
We will confirm receipt within seven calendar days at the latest.
We will answer within three months at the latest, extendable by three more only in especially complex cases.
If the facts may be a crime, they will be referred to the Public Prosecutor.

Your safeguards

Confidentiality: your identity, if you give it, is only known to the people who run the channel and is never disclosed to the person the facts refer to.
Real anonymity: if you choose to report anonymously we do not keep your name, your IP address or your browser details, and this page uses no cookies.
No retaliation: nobody may suffer any negative consequence for reporting in good faith.
Presumption of innocence and the right to be heard of the person the facts refer to.
Independence: anyone involved in the facts is kept away from handling the report.

External channels

You can also go, directly or after using this channel, to the competent public authority:

Autoridad Independiente de Protección del Informante, A.A.I.

Data protection

Controller: XSEC by IberFácil. Purpose: to handle the report and, where appropriate, investigate the facts. Legal basis: compliance with the legal obligation to have an internal reporting system (Spanish Law 2/2023, art. 30).

Your identity will always be kept confidential: it will not be disclosed to the people the facts refer to or to third parties, except to the courts, the Public Prosecutor or the competent administrative authority within an investigation.

Only the System Manager and the investigator access the data; and, where appropriate, human resources or legal services.

If no investigation is opened, the data are deleted three months after receipt; the register never keeps them for more than ten years.

You can exercise your rights of access, rectification, erasure, objection, restriction and portability with XSEC by IberFácil, and complain to the Spanish Data Protection Agency.

Ethics channel of XSEC by IberFácil. External channels: Autoridad Independiente de Protección del Informante, A.A.I.

This page uses no cookies or analytics and does not keep your IP if you report anonymously.