General policy

DECLARATION FROM HUVEPHARMA EOOD MANAGEMENT

With this Declaration, HUVEPHARMA EOOD Management expresses its commitment to implement, maintain and continuously improve an Integrated Management System (IMS) on quality, security, and privacy of information, compliant to the requirements of international standards ISO 9001:2015, 27001:2022 and 27701:2019, in carrying out the activities within the scope of the IMS:

TRADE OF VETERINARY AND PHARMACEUTICAL PRODUCTS

HUVEPHARMA EOOD sets goals on quality, security and privacy of information which are compatible with the strategic goals of the entity and are designed to achieve customer satisfaction by services provided through efficient MANAGEMENT OF SECURITY AND PRIVACY OF INFORMATION FOR CONTRACTORS AND CUSTOMERS, STRATEGIC BUSINESS, FINANCIAL, LEGAL, COMMERCIAL AND INTELLECTUAL INFORMATION, PERSONAL DATA OF EMPLOYEES AND CONTRACTORS IN THE FIELD OF TRADE WITH VETERINARY MEDICAL AND PHARMACEUTICAL PRODUCTS, AS WELL AS PROVIDING GUARANTEED SUPPORT AND ACCESS TO THE CORPORATE INFORMATION ENVIRONMENT, IN COMPLIANCE WITH THE REQUIREMENTS FOR INFORMATION SECURITY AND PERSONAL DATA PROTECTION.

The HUVEPHARMA EOOD Manager, on behalf of the entity he represents, officially declares its policy on quality, security, and privacy of information, deeply believing that the company’s prosperity and bright future depends on building trust among all stakeholders.

The HUVEPHARMA EOOD policy on quality, security, and privacy of information is designed for:

• developing intensive innovation activities to improve quality, speed, comprehensiveness, and reliability of provided services;
• effectively managing processes affecting security of information and protection of personal data by constantly increasing the competence and qualification of employees in these areas, targeting compliance with regulatory requirements for security and privacy of information, which is essential for achieving substantial success in the company’s business goals implementation.

For effective implementation of this policy, the company’s management sets the following main objectives on quality, security, and privacy of information:

• • reaching and constantly insisting on a high quality of provided services while increasing customer and other stakeholder satisfaction, in compliance with the requirements of quality standard ISO 9001:2015;
• implementing information security and privacy policies in business processes companywide, in accordance with the requirements of ISO 27001:2022 and 27701:2019, as well as with regulatory requirements, and improving employee awareness of the necessity to comply with these requirements for information security and personal data protection;
• constantly increasing knowledge, qualification, and skills of the company's staff, subsequently improving its work results;
• ensuring and maintaining a high level of HUVEPHARMA EOOD competitiveness in its role as a reliable business partner, through sustaining and assuring a high level of information security and personal data protection.

Implementing, developing, and improving an Integrated Management System (IMS), conforming to the requirements of ISO 9001:2015, 27001:2022 and 27701:2019, guarantees accomplishing the company’s goals, considering regulatory and all other requirements on quality management, security, and privacy of information within the organization.

Applying contemporary approaches, HUVEPHARMA EOOD Management is committed to providing the necessary resources for achieving company goals and ensuring necessary conditions for strict compliance with the requirements of the IMS on quality, security, and privacy of information within the organization.

For the purposes of implementing and supporting the proper performance of this policy on quality, security, and privacy of information at HUVEPHARMA EOOD, its Management appoints an employee responsible for the system - IMS Manager.

All employees at HUVEPHARMA EOOD are obliged to comply with all rules related to quality management, security, and privacy of information described in internal policies, rules, procedures and other documents within the IMS.

This policy for management of quality, security and privacy of information will be regularly reviewed (at least once a year or when significant changes in organizational, technical, or business environment, and/or applicable law arise) to ensure its relevance, adequacy, and effectiveness.

This policy for management of quality, security and privacy of information is announced to all HUVEPHARMA EOOD employees and external parties concerned.

As a Manager of HUVEPHARMA EOOD, I declare my personal commitment and responsibility for the implementation of this policy on quality, security, and privacy of information within the organization, which will significantly affect its growth and prosperity.

Kiril Petrov Domuschiev
Manager of Huvepharma EOOD
Sofia, 2024