Within the overall Quality Management Policy and System and ISO Customer Privacy Policy, the Web and App User Privacy Policy and the Data Protection Risk Management Policy and System comply with the General Data Protection Regulation (GDPR) and are supplemented by the Information Security Management Policy and System and ISO 27001:2017 certification in all the Group companies, as well as by the Certificates of Compliance with the National Security Scheme, which form the management model assuring the quality of the Group's activities, products and services, as well as the privacy and protection of the data furnished by customers.