Information security policy

Information security policy

In view of increasing competition in the technology sector and greater demands from users, the Management of Iertec Smart Technologies Sl. considers information security within its management system to be fundamental. It aims to provide services recognised for their quality, with optimal levels of reliability, ensuring appropriate information confidentiality and data integrity.

As a company providing ‘Design and development of electronic equipment’ services, Iertec aims to ensure that their security faithfully reflects the expectations of each user and stakeholder, thereby ensuring the company's future success.

To achieve these objectives, management provides appropriate resources to maintain and improve the Management System under ISO 27001, actively participates in establishing and monitoring strategic SECURITY objectives and reviewing the System, and carries out the necessary training
in information security within management.

In all its activities, the company remains firmly committed to complying with current legislation, particularly that relating to personal data protection and the provision of our services, as well as the contractual commitments entered into with its users and third parties.

To put the foregoing into practice, Management, aware of the importance of Information Security, has decided to implement a Management System based on UNE-EN ISO/IEC 27001 in our processes. Management declares and adopts the following principles:

● Information security is a shared task across all areas of the company.
● Each member of Iertec Smart Technologies Sl. is responsible for the information assets involved in their work.
● Management is responsible for promoting implementation of this policy and checking its execution through audits.
● Applying this Policy requires the active involvement of the company's entire workforce. To achieve this, management considers motivation and training priorities.

Management undertakes to comply with requirements and continually improve the effectiveness of the Management System, while recognising the importance of climate change in all its processes and adopting the following principles:

● Awareness of and adaptation to climate change through employee and stakeholder participation, developing awareness-raising, training and sensitisation initiatives.
● Considering sustainability criteria in all business activities to minimise their potential environmental impact, promoting rational resource use at all times.

To comply with this policy, move in our chosen direction, demonstrate leadership and consequently promote the progress and wellbeing of the people who make up our organisation, we must bear in mind two aspects that will help us achieve this objective:

● Correctly identifying errors is the only path towards continuous improvement.
● The organisation is a chain and each of us just one link; our teamwork and strong commitment are what distinguish us and make us unique.

Guadalcacín, 19 February 2026

Jaime Oliva Pérez
CEO of IERTEC SMART TECHNOLOGIES, S.L.