Skip to main content does not support Internet Explorer, please switch to another browser.

Whistleblowing and reporting of misconduct

At Alandia, we strive to conduct our business according to the highest ethical standards and in compliance with applicable laws and regulations. Alandia’s corporate governance and internal controls are designed to detect and prevent violations and other misconduct. If you are an employee, service provider, or board member and suspect any violations or unethical behavior, we encourage you to report your suspicions using the external reporting tool provided by &Frankly.

Please follow this link to file a report. Whistleblower (

Alandia’s whistleblowing policy follow the Finnish Whistleblower Act. The law implements Directive (EU) 2019/1937 on the protection of persons who report breaches of Union Law (the Whistleblower Directive).

Who can report

The following reporting persons are covered by the protection of the Whistleblower Act:

  • Employees including interns and summer workers.
  • CEO and board members.
  • Employees of subcontractors and service providers.

The provisions on protection also apply to reporting persons who have acquired information about violations in connection with negotiations for a job as mentioned above or in connection with work that has subsequently ceased.

Other persons using the reporting channel are not covered by the protection of the law.

What can you report?

Violations of EU legislation and national legislation listed in the Whistleblower Act can be reported through the whistleblowing function. Violations relating to other legislation can also be reported through the whistleblowing function, but are not covered by the protection of the Whistleblower Act. The following areas of legislation are covered by the Whistleblower Act:

  • Public procurement
  • Financial services, products, and markets
  • Prevention of money laundering and terrorist financing
  • Product safety and conformity
  • Environmental protection
  • Consumer protection
  • Protection of privacy and personal data, and security of network and information systems
  • Competition rules

What not to report

The whistleblower function should not be used to report inaccurate or unfounded information. The whistleblower function should also not be used to report information or questions that are not related to regulations covered by the Whistleblower Act. Complaints should be directed to and handled in accordance with our complaint policy. Questions regarding claims are handled in accordance with the instructions attached to each decision.

How to report

Reports can be submitted orally and in writing to our compliance officer or through the digital reporting tool that ensures the anonymity of the reporter. Reports are received by the compliance officer.

How the report is handled

Reports are handled confidentially. Confirmation of receipt of a report is given within seven days of receiving a report. The person responsible for handling a report will take necessary measures to investigate the accuracy of the report and to intervene if necessary in case of a violation. The reporting person will be directly informed of the continued handling of the complaint unless the person has requested not to be contacted.

The person responsible for handling a report will inform the reporting person within three months of sending a confirmation of receipt of the report about the actions taken based on the report.

Whistleblower rights

The reporting person is protected in accordance with the Whistleblower Act. This means that the employer may not retaliate against the reporting person for reports covered by the Whistleblower Act. A general prerequisite for obtaining protection is that the reporting person has good reason to believe that the information on a violation is correct and that the information in question falls within the scope of the law.

Confidentiality and processing of personal data

Reports are treated confidentially and in accordance with the purpose of the Whistleblower Act. Persons who are responsible for investigating a report, preparing proposals for actions based on a report, and persons who make decisions based on a report have the right to access the contents of the report. If required by law, information can be shared with authorities and third parties.

Reports are deleted five years after the day the report was received, unless the report is needed to protect Alandia’s or the reporting person’s rights or obligations. The right of the data subject to access data as provided for in Article 15 of the Data Protection Regulation may be limited in relation to personal data reported under the Whistleblower Act, if necessary and proportionate to secure the accuracy of the report or protect the identity of the reporting person.