Information security policy

Information security policy

Emicela considers that information, especially that related to customers, suppliers and employees, is a critical asset that must be adequately protected to ensure the proper functioning of the company.

This security policy aims to ensure the confidentiality, integrity, availability and privacy of information, as well as compliance with the different applicable standards and requirements in force at any given time, maintaining a balance between risk levels and the efficient use of resources through proportionality criteria. In fact, it provides a reference framework for the establishment of information security objectives.

The policy applies to all employees, managers and internal and external users of Emicela.

In order to develop the organization’s express commitment to the continuous improvement of the management system, the following information security management principles have been established:

• Ensure that Emicela’s Information Systems have the appropriate level
  of security and resilience.
• Make all users aware of security risks and ensure that they have the necessary training and technological capabilities to protect the security of the organization’s information systems.
• To provide the organization with procedures and tools for analysis, prevention, detection, response and recovery that allow it to adapt quickly to changes in the technological environment and to new threats.
• Ensure compliance with the LOPDGDD in the relationship with suppliers, customers and employees, with appropriate security measures.
• Collaborate with relevant government bodies and agencies for the improvement of Emicela’s safety and compliance with current legislation.
• Specify a set of roles and responsibilities in security matters, clearly defined and assigned in the corporate organization chart.
• Diligence on the part of all users in the communication of possible security incidents.
• Support a process of continuous review and updating of the security management model to adapt it at all times to emerging threats that may affect the organization.
  

This policy was reviewed and approved by Emicela’s Management as of 13-05-2025.

If you need any additional information about our information security policy or have any suggestions in this regard you can send an e-mail to the following address: info@emicela.es.