INFORMATION AND PERSONAL DATA SECURITY POLICY

The Management of BLEND TECHNOLOGIES S.A. aims to and is committed to:

•               Meeting the needs of its customers in every interaction they have with the company.

•               Ensuring the security and protection of information concerning all stakeholders of the company.

•               Continuously improving the quality of the services and products it provides to its customers, in order to meet their needs to the maximum possible extent.

•               Providing all necessary resources for the implementation and continuous improvement of the Information Security Management System.

•               Operating the business efficiently by strictly adhering to all relevant legislation related to its activities, including information security.

The Information Security and Personal Data Protection Policy, as well as the information security and personal data protection objectives, are defined and are fully compatible with the company’s framework and strategic direction. The objectives are set and maintained as part of internal control processes, monitoring, and system reviews, with the ultimate goal of increasing customer satisfaction. Increasing sales at all levels of the business, while maintaining or increasing the staff who interact and collaborate, works in synergy with high customer satisfaction, the elimination of complaints, and addressing system non-conformities.

In these frameworks, BLEND TECHNOLOGIES S.A. aims to:

•               Develop and establish simple and flexible operational procedures.

•               Standardize work methods.

•               Ensure the stability of the security of the services and products offered.

•               Develop mechanisms for early prevention, identification of problems, and information security.

•               Improve and modernize the organizational structures of the company.

•               Increase customer satisfaction.

It is the belief of BLEND TECHNOLOGIES S.A. that the implementation of the Information Security and Personal Data Protection Management System according to the standards ISO 27001:2022 and ISO 27701:2019 will greatly contribute to achieving the company's objectives.

We firmly believe that the quality and security of information and personal data are achieved through the proper organization of the company, as well as through the analysis, documentation, institutionalization, and implementation of clear operational procedures and specific policies, which are strictly followed by all until the desired final result is produced.

We declare that in the company:

•               Security is a guiding principle of all its activities.

•               The security of information and personal data is fully aligned with the company’s operational philosophy.

•               The ultimate judges of the quality of our services and products are our customers.