Yes. Uriach's Compliance Channel is open so that different actors in the business ecosystem can help detect unlawful activities. In any case, if it is a matter of complaints about the service offered, there are other channels available for submitting such complaints.

In accordance with current data protection legislation, GRUPO J. URIACH, S.L. is responsible for the processing, management and storage of the personal data of all persons involved in queries and complaints. Both the Group and the external experts engaged comply with the necessary technical and organisational measures to guarantee the security of the data and to prevent its alteration, loss and unauthorised processing or access. The platform is designed to apply the current regulations on personal data protection, in particular Article 24 GDPR, relating to reporting channels.

Unfortunately, for security reasons, only the person making the report knows his or her access code and password. If you lose either of them, you will not be able to follow up on the report. This does not mean that the report will not follow its course, but simply that you will not be able to monitor its progress or provide more information if Uriach requires it.

In that case, we encourage you to re-file the report and inform us of what has happened so that you can follow up on it.

In the reporting process you can decide whether to provide your personal data or not. If you choose not to, you will need to set up your own follow-up through the whistleblower channel to track the progress and resolution of your case.

The channel will provide you with a username and password to access and check the progress of the report. However, please bear in mind that filing an anonymous report could hinder the traceability and success of the investigation. In this situation, please be advised that we may ask for your permission to disclose your identity to us.

Yes. You can review the Code of Ethics here.

No, this channel is not intended to handle urgent or emergency situations. Depending on the type of emergency, you should contact the authorities or emergency services. In less serious cases linked to your work, you can contact your line manager, the People department or the Legal & Compliance department.

The important thing is to act in good faith and that there is reason to believe that the facts reported are true. Uriach does not expect the whistleblower to investigate the facts. The Risk and Compliance Committee is responsible for this function. If the investigation concludes that no infringement has taken place, and that the complainant has acted in good faith, the complainant should not fear any retaliation.

It is a means of communication that Uriach makes available to all Uriach collaborators. This channel can be used to send communications relating to the scope of application of the Code of Ethics or any other applicable internal or external policies and regulations.

Criminal conduct established both in the Spanish Criminal Code and in the regulations of other countries in which Uriach operates, which is carried out by a legal representative or employee, for the direct or indirect benefit of Uriach. This includes: Crimes of discovery and disclosure of secrets, corruption in business, influence peddling, harassment or offences against moral integrity, among others.

Acceptance of the complaint/query will be communicated within a maximum of 5 days. The investigation period may last up to 6 months, if warranted by the complexity of the case.

The reporting channel operates on an external platform that has the necessary security measures in place to protect the confidentiality of the information stored. Among other measures, we inform you that your data is encrypted to avoid risks of intrusion as much as possible. Furthermore, it is worth mentioning that the servers are located in European data centres, thus guaranteeing European security standards.

The chairwoman of the Risk and Compliance Committee will receive the report and evaluate the facts to determine whether there is sufficient evidence of a breach of the Code of Ethics and, by extension, of the applicable laws and/or Uriach's internal regulations.

In the event that the complaint is admissible, the Risk and Compliance Committee will be informed in order to initiate the corresponding investigation. If deemed necessary, the investigation will be outsourced.

The persons involved in the investigation are also subject to the duty of confidentiality and the privacy policy.

If the chairwoman or secretary of the Risk or Compliance Committee is involved in the complaint, it will be handled by the secretary-director.

The chairwoman of the Risk and Compliance Committee will receive the report and evaluate the facts to determine whether there is sufficient evidence of a breach of the Code of Ethics and, by extension, of the applicable laws and/or Uriach's internal regulations.

In the event that the complaint is admissible, the Risk and Compliance Committee will be informed in order to initiate the corresponding investigation. If deemed necessary, the investigation will be outsourced.

The persons involved in the investigation are also subject to the duty of confidentiality and the privacy policy.

If the chairwoman or secretary of the Risk or Compliance Committee is involved in the complaint, it will be handled by the secretary-director.

The Channel is managed by regulatory compliance specialists from Uriach companies, with the collaboration, if necessary, of external experts.

Integrity, accountability and transparency are core values for Uriach. As Uriach employees, we have an obligation to know and understand our Code of Ethics. We also have a responsibility to report any possible non-compliance with our Code of Ethics or other regulations, thereby forming part of Uriach's continuous improvement.