Welcome to the Whistleblower
Protection System

We would like to recommend that you first familiarize yourself with the Whistleblower information that provides answers to frequently asked questions. At the bottom of this page you will find a form for reporting violations and irregularities.

FAQ - the most important questions and answers -
Information for the Whistleblower

Who is a Whistleblower? (see more)

A whistleblower is a reporting person working in the private or public sector who has obtained information about a breach in a work-related context, whether the employment relationship is ongoing, terminated, or yet to be entered.

Whistleblowers can be categorized into internal (employees, partners) and external (former employees, recruited persons, partners, shareholders, investors, volunteers, interns, contractors, suppliers, subcontractors, counterparties, etc.).

Important terms in relation to Whistleblower Protection (see more)

It is an act or failure to act, which is illegal and concerns EU acts and areas falling within its scope, or is contrary to the object, purpose of the provisions contained in EU acts and areas falling within the material scope.


The act of providing information on violations.

What violations can be reported by a Whistleblower?(see more)

The catalog of notifications is wide, however the EU Directive (DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2019/1937 of  October 23, 2019 on the protection of persons reporting breaches of EU law) (LINK

includes some example types of violations in such areas as:
  • government procurement (in this case corruption, cartels, bid rigging);
  • financial services, products, and markets, and the prevention of money laundering and financing terrorism;
  • safety of products and their compliance with regulations;
  • transport safety;
  • environmental protection;
  • radiological protection and nuclear safety;
  • food and feed safety, animal health and welfare;
  • public health;
  • consumer protection;
  • protection of privacy and personal data, and security of networks and information systems
  • security of the energy sector
  • banking sector security
  • security of key digital service providers (e.g. cloud computing services)
  • security of suppliers of basic utilities (gas, electricity, water).
Why is the EU Whistleblower Protection Directive so important?(see more)

It protects people who have wanted (even for a long time) to report some irregularities, but were afraid of the consequences. They now have the opportunity to do so, because the directive provides them with extensive protection. And not only them – also third parties associated with the applicant. The directive prohibits retaliation against the whistleblower. Until now, there was no single regulation in the Polish legal system that clearly provided protection to whistleblowers.

The Directive provides protection to the whistleblower in relation to the submission of the report
  1. Prohibition of retaliatory action.
  2. Support measures, including legal, financial, and psychological assistance.
  3. Means of protection against retaliation – appropriate legal provisions protecting persons who have made a report, including the lack of legal liability in justified situations.
  4. Measures to protect the persons affected by the report, including access to a fair trial, access to the file, presumption of innocence, right to defense and protection of identity.
  5. Sanctions for persons who obstruct the actions of the whistleblower, including acts of retaliation, initiating burdensome proceedings against Whistleblowers.
Retaliation against the reporting person is prohibited. List of prohibited activities (Pursuant to Article 19 of the EU Directive):
  1. Suspension, forced unpaid leave, dismissal or equivalent measures;
  2. Relegation or suspension of promotion;
  3. Delegation of duties, change of place of work, reduction of salary, change of working hours;
  4. Suspension of training;
  5. Negative performance appraisal or negative job opinion;
  6. Imposing or applying any disciplinary measure, reprimand, or other penalty, including financial penalties;
  7. Coercion, intimidation, mobbing, or exclusion;
  8. Discrimination, unfavorable or unfair treatment;
  9. Failure to convert a definite term employment contract into a indefinite term employment contract, where the employee might have had reasonable expectations that he or she would be offered permanent employment;
  10. Non-renewal or early termination of a definite term employment contract;
  11. Damage, including damage to a person’s reputation, especially on social media; financial loss, including economic loss and loss of income;
  12. Blacklisting on the basis of an informal or formal sector or industry agreement, which may result in the person not finding employment in that sector or industry in the future;
  13. Early termination or termination of a goods contract or a contract for the provision of services;
  14. Revocation of a license or permit;
  15. Referral for psychiatric or medical examinations.
Reliability of the reported information as a condition for the protection of the Whistleblower (see more)

In order to benefit from protection under the EU Directive, reporting persons should have reasonable grounds to believe, in the light of the circumstances and information at the time of reporting, that the issues they are reporting are true.

This requirement ensures that the reporting person will not be deprived of protection if he or she has reported inaccurate information on violations as a result of an unintentional error. Similarly, reporting persons should be entitled to protection under this Directive if they have reasonable grounds to believe that the information reported falls within its scope. The motives that the reporting persons are driven by when submitting a report should not play a role in deciding whether they should be granted protection.

At the same time, protection should not apply to persons reporting information that is already fully publicly available, or in the case of unjustified gossip and rumors.

What does our whistleblower protection system provide? (see more)

The reporting channels have been designed, established, and operated in a manner ensuring confidentiality and protection of the Whistleblower’s identity (but also of third parties mentioned in the report) and preventing unauthorized access to them.

Who and how will the signal from the Whistleblower be sent?(see more)

In the case of our system, the message will be sent automatically (without the intermediation of any other people, including our employees) directly to the authorized person designated to receive such messages in the organization to which the report applies (if he or she has a valid contract).

The scope of the information provided will be original (it will not be modified in any way), only the data that the Whistleblower enters in the report will be provided (for example, the IP number of the device used by the Whistleblower will not be disclosed to the above-mentioned person). The notification will be forwarded in real time – the time it takes for the message to reach the addressee depends on the speed of the Sender’s and the Recipient’s connection. We recommend that the Recipient of the message inform the Whistleblower about the receipt of the notification and about further follow-up actions that will be taken in accordance with the procedure adopted in the organization.

What is follow-up action? (see more)

The follow-up actions are aimed at examining and assessing the truthfulness of the allegations contained in the report and remedying the violations that are the subject of the report. They are to be based on, in particular, an internal investigation, explanatory proceedings, and taking all possible measures to prevent the incidents covered by the report in the future.

When can I expect information regarding my Report? (see more)

The detailed procedure for examining reports and the deadlines for replying are described in the internal procedure of the organization that the report concerns – as a rule, the time for confirming receipt of the report should not exceed seven days, and the time for providing a reply to the Whistleblower should not exceed three months.

How can I, as a Whistleblower, report irregularities? (see more)

All possible channels for reporting irregularities have been defined in the internal procedure of the organization that the report concerns – one of them is the option to use the following form for reporting violations.

What and how to include in the Report of Irregularities? (see more)

You can submit a report of any content – however, we suggest that in order to facilitate the proper assessment of your report and provide you with appropriate protection you follow the guidelines below:

  1. Specify the property that, in your opinion, has been threatened or infringed. Does it concern, for example, the employer’s property, work environment, employee safety, mobbing, discrimination, the natural environment, consumer safety, public finances, etc.?
  2. Determine what you believe the scale of the threat or breach is.
  3. Use facts. For information that you are unsure about, confront it with other sources, seek confirmation from other sources so that you can demonstrate at least due diligence. If you are unsure, use appropriate language.
  4. Never provide information that is knowingly inaccurate. This disables any protection of you.
  5. Try to obtain evidence. It is not your role to conduct evidentiary proceedings, but you may find yourself needing to prove the truth of your words. In further proceedings, copies of emails, documents, your dated notes from conversations with the employer, etc. may prove to be invaluable. In your Report, you can describe what you have at your disposal so that you can later send it to the person who will be considering your Report.
  6. Use correct language. You take responsibility for your words.

If you are unsure of a potential misconduct or lack the evidence, weigh your words. Replace phrases such as “an offense has been committed” by “it appears to me that an irregularity may have occurred”. You can also directly write about the uncertainty, e.g. “Although I do not have evidence, circumstances such as […] have raised my concerns about the correctness of the actions taken/the situation (…)” etc.

Do not exaggerate the description of the facts and avoid extreme phrases. Use language proportional to the seriousness of the irregularity and the seriousness of the breached good. If it concerns petty thefts in the workplace, the term “crime” will be inadequate and excessive.

Avoid expressions that are offensive or violate someone’s personal rights. Avoid words such as, for example, “thief”, “criminal”, or “stolen”, even if you are sure that an act involving the misdemeanor of theft has been committed. Describe the situation. You will then remain neutral and credible.

Never use invectives. Invectives drastically lower your chances of being protected, even if the situation you are reporting is objectively outrageous. Invectives, as a rule, do not fall within the limits of permitted criticism. Their use will also discourage your potential allies from contacting you and engaging in dialogue. Invectives destroy your credibility both at the workplace level and in contacts with state authorities, journalists, or other entities. Avoid conflicting language.


Remember that all the information you provide below will be automatically forwarded to the person responsible for accepting reports in the organization which the report concerns.
(provide only the information you want, e.g. instead of your first and last name, you can use a nickname):
Your email address at which an authorized person from the organization will be able to contact you to provide details of your report and inform you about the results of the investigation. Remember that you can set up an anonymous email on one of the generally available portals to prevent identification of your personal information.
The email address of the authorized person in the organization to which the report is addressed (you can check the email address in the procedures in force in the organization) – providing a correct email address is a necessary condition for the report to reach the appropriate person. Providing an incorrect email address will result in the failure to provide information.


Our goal is to constantly improve our services and your opinions can help achieve it.
We would be very grateful for all your assessments, opinions, and observations regarding the quality of information on this website, the methods of its use, and technical conditions.
(1 – very bad, 10 – excellent)
In accordance with the applicable regulations (GDPR), we are obliged to inform you about the principles of personal data processing. Ladies and Gentlemen, this communication is addressed to natural persons. We kindly inform you that the owner of the site is DORADCY 365 Sp. z o.o. and in relation to the services provided, in accordance with Art. 13 of the General Data Protection Regulation of 27 April 2016 (GDPR), we would like to inform you that the Administrator of your personal data is DORADCY 365 Sp. z o.o., 53-135 Wrocław, ul. Januszowicka 5, phone no. 500 181 151, email: The purpose of processing personal data is to provide the Whistleblower Protection Service to the extent specified in the contract between the Data Administrator and the Customer ordering the service (which may be, depending on the relationship with the Whistleblower: the Employer, Contractor, Potential Employer, etc.). The standard rule is the obligation of the Data Administrator to provide a designated person on the part of the Customer ordering the service - a message with the original (unmodified) content provided by the Whistleblower. The data administrator will not disclose - without the consent of the Whistleblower - any data, including his or her personal data, to the Customer ordering the service. On the other hand, he or she will be obliged to disclose all the data he or she possesses about the Whistleblower at the request of authorized bodies, including law enforcement (Police, Prosecutor’s Office, Courts) if these bodies request the Data Administrator to disclose such data. The legal basis for the processing of Whistleblower’s data is, in principle, Art. 6 sec. 1 point a. Personal data belonging to you, due to the services provided, may be transferred to other recipients, i.e. processors that constantly cooperate with the Administrator, i.e. hosting service, or an entity servicing the Administrator in IT matters, entities offering billing services, including through the ICT system, legal advisors, auditors, experts in the field of personal data protection and IT, and similar persons with whom we cooperate in order to perform the tasks of our Company. Unless it results otherwise from the nature of the message sent by you, the period of processing is the duration of the contract with the Ordering Customer, and then for the period of settlement of the contract, as well as for the period necessary to defend claims and resulting from legal provisions. Please be advised that you have the right to request access to your personal data, the right to rectify it, delete it, limit processing and the right to object to the processing, as well as the right to transfer personal data. Please be advised that you may withdraw your consent to the processing of your personal data at any time (without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal). Please be advised that you have the right to lodge a complaint regarding possible irregularities in the processing of personal data to the competent supervisory authority. Your personal data will not be subject to the automatic decision-making process, and will not be profiled or transferred to third countries. If you wish to obtain additional information on the processing of your personal data, including information on the current basis for the processing of personal data, please contact us at
Właścicielem marki Ochrona Sygnalistów365
jest DORADCY 365 Sp. z o.o.
ul. Januszowicka 5
53-135 Wrocław

Obsługujemy Klientów z całej Polski
Jesteśmy po toaby odciążyć Cię od biurokratycznych procedur
Odwiedź nasze strony społecznościowe
Organically grow the holistic world view of disruptive innovation via empowerment.
OUR LOCATIONSWhere to find us?
GET IN TOUCHAvantage Social links
Taking seamless key performance indicators offline to maximise the long tail.

Copyright DORADCY365