Legal basis.
- Kosovo Law No. 06/L-085 on Protection of Whistleblowers
- EU Directive 2019/1937 on the protection of persons who report breaches of Union law
- Internal HEXATECH Whistleblowing Policy, approved by the Managing Director
What to report.
The channel receives reports of:
- Suspected breaches of law or regulation (including bribery and corruption, sanctions, export control, data protection, competition, tax)
- Breaches of HEXATECH policy (Code of Conduct, Anti-Bribery, Supplier Code)
- Fraud, theft, or misappropriation
- Threats to health, safety, or the environment
- Bullying, harassment, or discrimination
How to report.
Reports can be made:
- In writing to the Compliance Officer at info@hexatech.biz (attention: Compliance Officer)
- By letter to the registered office, marked "Confidential — Compliance Officer"
- In person to the Compliance Officer
- Directly to the Managing Director or a Board member where the report concerns the Compliance Officer
- Through a designated third-party independent channel (to be appointed and published here)
- To the competent external authority — Kosovo Anti-Corruption Agency or the appropriate regulatory or law-enforcement body
Confidentiality and protection.
The identity of a reporter is treated as confidential and disclosed only where necessary to investigate, and then only to those who need to know. Retaliation against a reporter acting in good faith is a breach of policy and may constitute a criminal offence under Kosovo Law No. 06/L-085.
Anonymous reports are accepted and investigated to the extent the information provided permits.
Process.
- Acknowledgement within 7 days of receipt.
- Preliminary assessment by the Compliance Officer (or alternate channel).
- Investigation as warranted, with access to necessary records and personnel.
- Findings, conclusions, and recommended action reported to the Managing Director or Board as appropriate.
- Feedback to the reporter within 3 months of the report, to the extent confidentiality and legal requirements permit.
- Annual aggregated reporting to the Compliance Committee.