Information Security Policy

For more than 10 years, we have been committed to providing high-quality services while establishing an environment of trust. This information security policy aims to define the information security principles, rules and commitments within OLING Management et Technologie.

Its objective is to protect data against all threats, whether internal or external, intentional or accidental, in order to ensure the confidentiality, integrity and availability of data. This enables us to ensure operational continuity, reduce damage and optimise our investments and opportunities.

To reinforce and substantiate these concepts, our information security management system is based on the ISO/IEC 27001:2022 standard and covers the following areas:

• Project ownership assistance services for information systems and organisation
• Data Protection Officer services and GDPR projects

Information security is essential to our company and is based on the training and involvement of our teams:

• In organisational, behavioural and technical matters
• In the ongoing monitoring of actions and incidents
• In establishing a structured and coordinated methodology, as well as rules and procedures to be implemented

Accordingly, we undertake to the members of our ecosystem (users, clients, employees, partners, shareholders, processors) to:

• Comply with laws and regulations, particularly those concerning personal data protection
• Identify and manage information security risks
• Follow and apply information security best practices throughout our projects
• Continually improve our information security management system

Our security policy is reviewed every year or in the event of significant changes, in order to ensure its relevance and effectiveness.

Executed on 15 September 2025 in Baie Mahault

Florestan Rouet