Whistleblowing
Heimstaden has a specific Policy to cover Whistleblowing.
Our whistleblowing solution enables anonymous reporting about irregularities that are in breach of applicable legislation and our Code of Conduct. All reports are received either through internal channels (email, phone, letter or personal visit) or by an external agent channel – 2Secure, and handled by the Governance, Risk, and Compliance (GRC) function at Heimstaden. The Policy, the external system/provider, and internal processes are in line with the EU Whistleblower directive. When investigation is finalised the relevant business function owner and the People & Culture function will suggest a solution and all concluded actions will be followed-up by the GRC function. This to ensure separation of duties in the process.
Reporting can take place in writing via the website https://wb.2secure.se/wbui/ or verbally by phone at +46 771 77 99 77. You can remain anonymous. If you like to report via an in-person meeting, this can be requested by registering a report on the website mentioned above. When registering a report, you are assigned a unique case number and password, which must be saved in order for you to actively log into the website, monitor the report and communicate with the case officer at 2Secure. Before you submit a whistleblowing report, either through 2Secure’s website or by phone, please ensure that you use the correct company code. You can find all company codes here.
A report can also be raised with the Heimstaden representative, relevant line manager, People & Culture function or to the Governance, Risk, and Compliance (GRC) function. If you have questions, please use the email compliance@heimstaden.com. If you would like to raise a concern through Heimstaden’s internal channel, please use raiseyourvoice@heimstaden.com.
The more information you can provide, the better. If possible, please specify the timing of the event(s), a description of what you have observed in as much detail as possible, as well as any knowledge of previous related incidents.
Once a report has been registered, it is processed by the GRC function (Group or local) at Heimstaden, who will lead, plan, and perform the investigation of the issue reported. If the primary contact person is the subject of the report, another person on the contact list will be informed.
Heimstaden takes the protection of personal privacy very seriously. Click here to learn more about how your personal data is protected.
If you wish to whistleblow through an external authority or learn more about Statutory Informant protection, please visit our local websites for more information.