The Company's Management Board is aware of the importance of the security of information processed in the Company and creates conditions to ensure their safety, including by securing them protection of financial resources, as well as employment of qualified staff.

The Company's Management Board undertakes to meet the related legal and contractual requirements with information security, especially in the field of personal data protection regulations and information constituting a trade secret.

Information Security Management is implemented in particular through regulations contained in internal regulations and documents of the management system, covering all areas of the Company's operations by creating the Information Security Management System (ISMS).

Each person at their assigned workplace is responsible for information security. Information security is supervised by managers of organizational units at all levels of management.

Information security is implemented through the following continuous activities:

• monitoring the state of security (technical and organizational devices, regulations formal and legal) and the risks associated with it;
• employee training (providing current knowledge);
• making employees aware of the importance of their involvement in the implementation of the policy information security;
• informing employees about the consequences of lack of due care about information security or information security breaches;
• reporting incidents related to information security.

t is the responsibility of the Company's employees to comply with applicable rules of conduct indicated in the ISMS documentation. The Company's Management Board undertakes to constantly improve the implemented Management System Information Security.