The Company’s Policy for Information Security and Personal Data Protection is:

• The protection of the company’s information assets and personal data through the implementation of an Information Security and Privacy Management System in accordance with the international standards ISO 27001 and ISO 27701.
• The safeguarding of the confidentiality, integrity, and availability of information belonging to the company, its customers, and its partners during storage, processing, and transmission.
• The continuous and effective response to the needs and expectations of customers, partners, and other interested parties regarding information security and personal data protection.
• Compliance with all applicable legal, regulatory, and contractual requirements related to information security and personal data protection.
• The identification, assessment, and management of risks related to information security and privacy, ensuring that appropriate measures are implemented to prevent incidents and minimize potential impacts.
• The continuous improvement of the Information Security and Personal Data Management System for the benefit of the company, its management, employees, and customers.
• The clear definition of roles, responsibilities, and procedures related to the protection of information and personal data across all company activities.
• Continuous information, awareness, and training of employees on matters related to information security and data protection.
• Informing and raising awareness among customers, suppliers, subcontractors, and partners regarding their responsibilities in relation to information security and personal data protection.
• The provision of the necessary resources, technical infrastructure, and organizational measures to ensure the effective protection of information and personal data.
• The promotion of a culture of security, trust, and responsible data management throughout the organization.

Download our Information Security & Personal Data Protection Policy