Protection of Personal Data and Information Security at AVES Energy

Protection of Personal Data: AVES ENERGY adheres to principles outlined in laws and legal regulations regarding the processing of personal data:

• Processes personal data transparently, adhering to disclosure and informative obligations.
• Processes personal data for specific, lawful, and explicitly defined purposes.
• Processes personal data to the extent necessary for the relevant task.
• Does not transfer personal data and special categories of data to third parties or legal entities without the explicit consent of the data subject unless required by laws or regulations.

Retention of Personal Data: AVES ENERGY retains personal data for the duration specified by relevant legislation or as necessary for the purpose of data processing. After this period, data is not stored unless there is a valid reason, and if so, it is anonymized.

Information Security Policy: AVES Energy Oil and Food Industry Inc. implements information security measures in all administrative buildings and facilities used to protect information assets related to seed sales, vegetable oil, biodiesel, bran, production, sales, and marketing services, as well as customs and foreign trade operations and related logistics, storage, accounting, finance, and information technology activities. The company follows the ISO 27001:2013 Information Security Management System by:

• Complying with its conditions.
• Sustaining its effectiveness.
• Continuously improving and enhancing its activities.
• Meeting information security requirements, considering legal and customer conditions.

Additional Security Measures Include:

• Ensuring the protection of information against third parties during the fulfillment of internal and external factors.
• Preventing unauthorized access to information systems and preventing security breaches.
• Identifying information resources of all processes within the system and determining methods to recognize potential risks.
• Establishing a culture of information security by educating all employees on information security.
• Taking measures to prevent the loss, destruction, corruption, or theft of information.
• Providing real-time backup of historical information.
• Protecting information assets/resources against internal and external threats.
• Ensuring uninterrupted access to information resources as required by our business processes.
• Safeguarding confidential information of employees, customers, and other stakeholders.

This information security policy is established and presented to relevant parties at AVES Energy.

AVES Closed-Circuit Camera Illumination Text