Information Security Policy

LIONCODE G.P., responding to the requirements of modern business reality and aiming to protect its information systems, always with the goal of uninterrupted and exemplary service to its Clients, has decided to design and implement an Information Security Management System (ISMS) in accordance with the requirements of the International Standard ISO 27001:2022.

The Company’s ISMS covers the Design, Development, and Marketing of Software – Training – Support. Provision of Digital Marketing services, and has been designed in accordance with the Company’s needs and goals, as well as the Legal and Regulatory Requirements of applicable Greek and EU Legislation.

The main objectives, as expressed through the Company’s ISMS procedures, are:

• to create a basis for the continuous improvement of the effectiveness of its processes, guided by the ongoing satisfaction of the needs and expectations of its clients to the greatest possible extent,
• to minimize the number of incidents that may affect the continuity of business processes and to reduce their impact as much as possible,
• to manage information that is maintained and transmitted in any way through its electronic and non-electronic systems—which is of critical importance for its operations and market position—in a manner that ensures its confidentiality, integrity, and availability,
• to comply with the laws and regulatory provisions to which the Company is subject,
• to ensure the ongoing improvement of the system.

With regard to the protection of personal data, Management aims to comply with the following principles:

• Processing personal data in a fair and lawful manner.
• Retaining personal data for clearly defined purposes.
• Limiting personal data to what is strictly necessary to achieve those purposes.
• Protecting personal data through adequate security measures.
• Retaining personal data for a defined period (according to their purposes).

The Company’s ISMS is reviewed at regular intervals by Management in order to adapt to new business needs, market developments, legislative requirements, and to achieve its goal of information security. Annually, the objectives for Information Security are also reviewed and, if necessary, revised.

Management is committed to providing the infrastructure and equipment necessary for the implementation and availability of its operations. Every employee is responsible for adhering to, assimilating, and applying the ISMS procedures in their daily activities. For this reason, all employees, depending on their responsibilities, are informed about the ISMS and demonstrably act in accordance with the defined rules of security and confidentiality.

The Information Security Policy is communicated, understood, and applicable by the entire workforce, with the ultimate goal of the continuous, stable development of its business activity, unwavering commitment to its principles, and consistent delivery of high-quality products and services to its clients. It is reviewed at regular intervals with the aim of maintaining alignment with market conditions, technological advancements, and applicable legislation.

Processes, flows, and actions that do not ensure the achievement of set objectives are immediately discontinued by those responsible, root cause analyses are conducted, and the required improvement measures are defined.

 

Management Christos Papadakis

Kavala – Thessaloniki, 10/01/2025 (Version: 3)