Information Security Policy

Grand Class, fully aware of the importance of ensuring the highest levels of security for its clients from both an operational and legal perspective, has established a framework that protects information against threats and unauthorized access. The objective is to preserve the confidentiality, integrity, and availability of information while ensuring business continuity at all times in the event of any incident or unforeseen circumstance.

The entire organization is committed to this fundamental objective. In addition, the role of Information Security Officer has been established, with sufficient authority to play an active role within the Information Security Management System (ISMS), overseeing its implementation, development, and maintenance.

In order to comply with applicable security regulations in general, and information security requirements in particular, Grand Class has implemented control mechanisms with the following objectives:

To ensure compliance with applicable legislation, regulations, and agreements with third parties regarding information security.
To ensure the confidentiality of the data collected and managed, the availability of information systems used both in client services and internal operations, and the integrity of information by preventing unauthorized alterations.
To ensure business continuity and maintain normal operations of critical services, even in the event that any function is affected by an internal or external incident.
To promote competence, awareness, and training in information security matters throughout the organization.
To establish employees’ responsibilities regarding the reporting of security breaches, the preservation of the confidentiality, integrity, and availability of information assets in accordance with this policy, and compliance with the policies and procedures associated with the Information Security Management System.
To promote the continuous improvement of the Information Security Management System.

Getafe, 18 June 2026