Víntegris Information Security and Privacy Protection Policy

Vintegris Management is aware that information, personal data of our users and clients, and organizational knowledge are very important assets for the organization and, therefore, require adequate protection.

With the aim of responding to the trust placed in us by our clients and ensuring the quality of the services offered, Vintegris has implemented an Information Security and Privacy Management System designed to carry out effective management of the risks to which they are exposed and, thereby, guarantee adequate internal control of these risks, minimize any potential damages that may arise and provide services appropriately.

With this Policy, Vintegris’ Management commits to preserving the integrity, availability, and confidentiality of information assets, as well as the necessary traceability and authenticity. This Policy also provides the framework for our Information Security and Privacy Management System, which will allow us to:

• Establish the necessary objectives and responsibilities.
• Integrating Information Security and Privacy Protection into all of the organization’s processes and services.
• Implementing controls and measures necessary to minimize risks to information security and privacy.
• The preservation of the company’s knowledge and intellectual property.
• Compliance with business, contractual, legal and regulatory requirements.
• The application of the guidelines, standards and procedures that are established in due course.
• Awareness and continuous training of all staff.
• The fully satisfactory resolution of incidents and the learning from them.
• A process of review and continuous improvement.
  
  

The scope of this Policy includes all Vintegris employees, all personnel subcontracted by Vintegris and all external collaborating companies that access Vintegris Information, as well as the information systems that support business processes and services provided.

Whatever the job title and functions of each employee at Víntegris, we are all fully responsible for its application in our area of action, thus ensuring its effectiveness, continuous improvement and the satisfaction of external and internal clients and users.

This Information Security and Privacy Protection Policy is disseminated, understood, implemented and updated at all levels of the company, as well as made available to the general public.

In Barcelona, on February 28, 2024, Matthew Walsh, CEO of Vintegris.