Data Protection Code

Hanael Group is aware of the importance of the correct processing of personal data, being a matter of special relevance for the Group. Hanael Group's Privacy and Data Protection Policy establishes the group's privacy management objectives. The application of the Policy is mandatory for all companies and subsidiaries of the Group, including all operations carried out on personal data.

All employees and third parties who have a relationship with Hanael Group must comply with the Policy, which also applies to information systems and facilities for the processing and storage of personal data, not only the Group's internal ones, but also the systems used in the operations and projects that the Group or its subsidiaries executes for its clients.

The Privacy and Data Protection Policy helps to guarantee the security of personal data and prevent alteration, loss, processing or unauthorized access to them. Since 2018 the Group has had a Privacy and Data Protection section in response to the Privacy and Data Protection Policy adapted by EU Regulation 679/2016 (GDPR). Further, the board of directors adopted and ratified the new version of the policy in compliance to Kenya’s Data protection and privacy act 2019.

This way of respecting the principles of privacy in the group is also applicable to possible requests for information from Governments and/or Administrations dependent on them, since in the event of any type of request for information from this type of entities that affects the privacy of individuals, this would be addressed respecting the principles established in Hanael group's Privacy Policy and under strict compliance with current regulations.