General Policy

eNubes Comunicación, S.L., a company dedicated to marketing, digital and audiovisual production, and proprietary digital technology development, openly states its intention to offer competitive services to all its customers. To that end, it has implemented a quality and information security management system within the organisation. Its main objective is to achieve the level of customer satisfaction expected through established processes founded on continuous improvement, ensuring the continuity of information systems, minimising the risk of harm, and meeting the objectives set to preserve the confidentiality, integrity, and availability of information at all times.

Accordingly, it commits to quality and information security in accordance with the reference standards UNE/EN-ISO 9001 and ISO/IEC 27001. The company's Senior Management therefore establishes the following principles:

• Competence and leadership by senior management as a commitment to the Quality and Information Security Management system.
• Determine the internal and external interested parties that are relevant to the quality management system and comply with their requirements.
• Understand the organisation's context and identify its opportunities and risks as a basis for planning actions to address, accept, or treat them.
• Ensure the satisfaction of our customers, including the parties interested in the company's results, in all matters related to the performance of our activities and their impact on society.
• Establish objectives and goals focused on evaluating performance in terms of quality, as well as continuous improvement in our activities, regulated in the Management System that develops this policy.
• Comply with the requirements of legislation and regulations applicable to the activities carried out, commitments made to customers and interested parties, and all internal rules or operating guidelines to which the company is subject.
• Ensure the confidentiality of the data managed by the company and the availability of information systems, both in the services offered to customers and in internal management, avoiding undue alterations to the information.
• Ensure the capacity to respond to emergency situations, restoring the operation of critical services in the shortest possible time.
• Establish the appropriate measures for the treatment of risks derived from the identification and evaluation of assets.
• Motivate and train all personnel working in the organisation, both for the proper performance of their jobs and to act in accordance with the requirements arising from applicable regulations, providing a suitable environment for process operation.
• Maintenance of fluid communication both internally, between the different departments of the company, and with customers.
• Evaluate and guarantee the technical competence of the personnel for the performance of their functions, as well as ensure their adequate motivation for their participation in the continuous improvement of our processes.
• Guarantee the correct condition of the facilities and adequate equipment, so that they are in correspondence with the company's activity, objectives, and goals.
• Guarantee a continuous analysis of all relevant processes, establishing the pertinent improvements in each case, depending on the results obtained and the established objectives.

Management adopts these principles, provides the necessary means, and gives employees sufficient resources to comply with them, setting them out and making them publicly known through this General Policy and its specific Information Security annex.