SGI Policies

AdEA has a Quality Department whose functions, among others, include ensuring that the SGI is up to date and complies with the regulations to maintain certifications in the standards in which AdeA is certified, as well as maintaining and managing all SGI documentation and records, continuously monitoring established procedures.

You can send us any questions related to Quality through the email account calidad@adea.es

AdeA's Quality and Environment Policy is to seek, through quality, service and respect for the environment, to meet or exceed the expectations of our customers by establishing responsible action criteria.
AdeA exists because its customers exist. Consequently, quality consists of meeting your needs to the maximum in terms of prices, deadlines and services.

AdEA's Quality and Environment Policy must seek to achieve not only customer satisfaction, but also the overall optimization of AdEA's resources.

All activities must be carried out with the approach of CONTINUOUS IMPROVEMENT, which consists of planning planned activities, executing as planned, evaluating results and acting on them. The Management is committed to PREVENTING POLLUTION, always complying with existing legal requirements.

This Department is committed to providing all the necessary means at its disposal to meet the improvement objectives that are established over time, as well as to informing all staff of the results obtained.

It is a priority objective for Adea to guarantee the security of information and privacy related to its customers and all personally identifiable information (PII) of all the interested parties that Adea processes and, in particular, of that information, regardless of the medium on which it is located, belonging to its customers, that Adea accesses as a service provider, guaranteeing its custody and security.

The objective of information security and privacy is the protection of information, against existing threats, in order to ensure business continuity, minimize its risks and maximize the return on investments and business opportunities.

Special consideration will be given to compliance with applicable data protection legislation affecting the processing of Adea's customer information.

To meet these objectives, the necessary technical and organizational measures will be adopted to guarantee your security in the three dimensions of: confidentiality, availability and integrity.

The technical and organizational measures implemented will be reviewed periodically, so as to ensure control over their compliance, as well as their proper functioning, thus ensuring that they meet their security objective. To this end, a series of indicators have been defined, with the purpose of being able to assess the proper functioning of the implemented safeguards and evaluate the results obtained and the fulfillment of the objectives set.

The following guarantees have been established in Adea:

• Compliance with the current regulations that apply to it and, in particular, with the legislation on data protection, as well as with the contractual obligations assumed with its customers.
• Establish a policy of continuous training for its employees in matters of information security and privacy, ensuring their training and awareness of the importance of complying with established procedures. This training and training will be required from Adea's external providers and collaborators. Failure to comply with information security and privacy policies by employees will entail the application of disciplinary measures in accordance with the workers' agreement and within the applicable legal framework, and tailored to the impact they have on the organization.
• The Adea Management will establish risk assessment criteria so that all scenarios involving an unacceptable level of risk are treated appropriately. As part of the SGSI, Adea has established a Business Continuity Plan that is kept up to date according to the Company's needs and tailored to the risks that affect it.
• The general responsibility for information security and privacy will fall on the Head of the ISMS, with the ultimate responsibility of the Management being the head of the ISMS. Every user will be required to report security incidents using the guidelines established by Adea.
• Everything defined in this policy will be specified and developed in regulations and procedures of the ISMS, which are integrated with other management systems of the organization, making up the Adea SGI, sharing resources for optimization and seeking continuous improvement of the efficiency and effectiveness of process management.

This policy will apply to all personnel and resources that are within the scope of the ISMS, is brought to their attention and is communicated to all interested parties who must formally adhere to it.