GLARTEK

Information Security Policy Statement

The following statement is the Information Security Policy Statement for Glartek, referred to in the following statement as “we”, “us” or “our”.

We have committed to implementing and maintaining an Information Security Management System, in accordance with the requirements of ISO 27001:2013. This covers the security of processed and stored information concerning customers and business partners associated with Glarevision S.A. products and services.

We handle information assets that can take various forms including, but not limited to, data printed or written on paper, stored electronically, transmitted by electronic means, stored on electronic media, and spoken in conversations. Information assets may include personal data. Information will be protected from loss of confidentiality, integrity, and availability.

Information relating to customers and business partners must have adequate safeguards in place to protect it and to ensure compliance with the various applicable regulations, along with protecting our reputation and that of our business partners.

We are committed to respecting the privacy of all our customers, protecting any customer data from outside parties, and ensuring that their requirements are met unless otherwise required to do so by law. To this end, Management is committed to maintaining a secure environment in which to process confidential information. We are also committed to the overall continual improvement of the Information Security Management System, including Management setting and reviewing security objectives.

This policy statement is communicated to all employees and is displayed on the website for external interested parties to access.

Chief Information Security Officer  – has overall responsibility for maintaining this policy and providing guidance on its implementation. All managers are directly responsible for ensuring that policies and procedures are followed within their business areas. It is the responsibility of each employee to adhere to the business Information Security Management System policies and procedures.

 

This information security policy statement has been approved by the Management Committee and issued under the signature of the Chief Information Security Officer.