Policy for Information Security and Personal Data Protection
Trancerie Emiliane S.p.A. is aware that its information assets constitute a strategic role of absolute importance and represent a significant corporate asset to be protected.
Furthermore, it considers it essential to ensure the protection of natural persons with regard to their personal data, committing to process such data in full compliance with applicable regulations and in accordance with best practices currently available.
For this reason, Trancerie Emiliane S.p.A. has approved this information security policy, with reference to national and international standards, such as TISAX and ISO IEC 27001:2022, as well as the applicable regulatory requirements, such as the European Data Protection Regulation.
Information security is understood as the maintenance of:
- Confidentiality, that is, ensuring access to information only to authorized subjects;
- Integrity, that is, safeguarding the accuracy and completeness of information and processing methods;
- Availability, that is, ensuring access to information and associated assets to authorized subjects who request it without delays.
Furthermore, the protection of personal data is also understood as:
- Lawfulness, fairness and transparency of processing with respect to the data subject;
- Purpose limitation of processing;
- Data minimization: that is, data must be adequate, relevant and limited to what is necessary with respect to the purposes of processing;
- Accuracy and updating of data, including timely deletion of data that is inaccurate with respect to the purposes of processing;
- Storage limitation.
Trancerie Emiliane S.p.A. commits to ensuring the Confidentiality, Integrity and Availability of information not only with respect to its corporate assets, but also with respect to its customers, employees and stakeholders in general, applying as a corporate culture, the principles of need to know and responsibility.