Information Security Policy
AARON GROUP, s.r.o. (hereinafter referred to as the “Company”) considers information security to be an integral part of its business activities and of the trust placed in it by its customers, partners, and employees. The Company operates an Information Security Management System (ISMS) certified in accordance with the ISO/IEC 27001 standard.
Objectives
The Company aims to protect the confidentiality, integrity, and availability of the information it processes, including both its own information and information entrusted to it by customers, partners, and users.
Our Principles
- We manage information security systematically, based on risk assessments and taking into account the nature of our business.
- We implement appropriate technical and organizational measures commensurate with the significance of the information being protected.
- We comply with applicable laws, contractual obligations, and other requirements that apply to us, including personal data protection.
- We guide employees and contractors to handle information responsibly and promote security awareness.
- We address security events and incidents in a timely manner and learn from their evaluation.
Responsibility
The Company’s management is responsible for establishing and supporting the information security policy and for providing the necessary resources for its implementation. All employees and individuals working for the Company are responsible for complying with the policy.
Certification and Continuous Improvement
An independent certification body regularly verifies that our ISMS complies in line with the requirements of the ISO/IEC 27001 standard. We also continuously review and improve the system in light of developments in threats, technologies, the business environment, and the results of internal and external audits.
Contact
Any questions regarding the information security to be sent to: gdpr@aarongroup.net
Ready to get started?
More than 2,000 travel industry partners use the Symphony platform