Based on the Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law (hereinafter referred to as the "EU Directive"), NUDZ has established an internal reporting system for receiving reports, handling them, and protecting the identity of the whistleblower.

Individuals acting as whistleblowers have the opportunity to report potential unlawful activities that:

• Have the characteristics of a criminal offense or misdemeanor, or violate legal regulations or European Union legislation,
• And of which the whistleblower became aware in connection with their work or other similar activities.

Areas for which reports can be submitted:

• Financial institutions, financial services, financial products, and financial markets;
• Corporate income taxes;
• Prevention of money laundering and terrorist financing;
• Consumer protection and safety and compliance with product requirements according to legal regulations;
• Transport safety, transportation, and road traffic;
• Environmental protection, food and feed safety, and animal protection;
• Radiation protection and nuclear safety;
• Public procurement, public auctions, and competition;
• Protection of public order and safety, life, and health;
• Protection of personal data, privacy, and the security of electronic communications networks and information systems;
• Protection of the EU's financial interests;
• Functioning of the internal market, including the protection of Union competition rules and state aid.

Whistleblowers are entitled to protection under the EU Directive if they had reasonable grounds to believe that the reported information about the breach was true at the time of reporting (i.e., the whistleblower must not knowingly make a false report).

It is prohibited to take retaliatory measures against the whistleblower in connection with the report. Retaliatory measures are defined as any direct or indirect actions or omissions that occur in a work context, are triggered by the report, and cause or may cause unjust harm to the reporting person.

Reports can be made through the internal reporting system and the external reporting system of the Ministry of Justice.

The person responsible for receiving and handling submissions is Mgr. Eva Hrdličková, phone +420 283 088 345 (in her absence, Ing. Hana Afxentiou, phone +420 283 088 485). The place for personal submissions is: National Institute of Mental Health, Topolová 748, 250 67 Klecany.

The technical and organizational setup for receiving and handling reports is designed to protect the identity of the whistleblower. Only the person responsible for receiving and handling reports, who is bound by confidentiality and must maintain the confidentiality of the report's content during the investigation and after the termination of their employment, is allowed to be aware of the whistleblower's identity and the content of the report.

Upon receiving a report, the whistleblower will be informed of the receipt within 7 days of its submission, and the whistleblower will be notified of the investigation results and the assessment of the report within 3 months of confirming the receipt of the report.

The responsible person will investigate the information in the report and, if confirmed, take appropriate actions, propose corrective measures, or take further steps, such as forwarding the report to law enforcement authorities, administrative authorities, or other relevant public authorities.

Reports can also be made anonymously. In the case of an anonymous report without providing contact details of the whistleblower, the responsible person will not be able to fulfill all the obligations arising from the EU Directive, such as informing the whistleblower about the receipt of the report or the investigation results.

NUDZ processes personal data of whistleblowers and affected persons mentioned in the report based on the fulfillment of legal obligations of the controller under Article 6(1)(c) of GDPR.