The Policy sets the rules for implementation of the appropriate organizational and technical measures, for effective personal data management and protection, and for safeguarding the privacy of data subjects (natural persons and sole proprietorships).