All transfers between the company's different systems are encrypted. Parka's basic system is an access-controlled system. Personally identifiable information is inaccessible to general users of the system.

Parka follows the objectives, laws, regulations, and guidelines for the Information Security Committee, which form the basis for the organisation and maintenance of measures that safeguard the confidentiality, integrity, and availability of data and information systems, in addition to complying with all contracts to which the company is a party that relate to information security.

Parka’s information security policy is binding for all employees of the company and extends to all service providers, contractors, and suppliers who provide services to Parka.

All Parka employees are obliged to protect data and information systems against unauthorised access, use, alteration, disclosure, destruction, loss, or transfer.

Parka employees, customers, service providers, contractors, and suppliers are encouraged to report information security incidents and non-conformities that arise, in order to promote continuous improvement.

Parka conducts regular risk assessments and internal audits to determine whether further action is required and to identify opportunities for continual improvement.

The Information Security Committee issues an annual report regarding Parka’s implementation and performance against this policy.

Current and former employees, service providers, contractors, and suppliers are prohibited from disclosing information about Parka’s internal affairs, its customers, or other employees.

Parka promotes active information security awareness among employees, customers, service providers, contractors, and suppliers. The activities and conduct of Parka employees shall serve as an example with respect to information security.

Parka reviews this policy as necessary, but at a minimum every two years.

Parka will comply with ISO/IEC 27001:2022 - Information Security Management Systems, which provides the basis for the organisation and maintenance of measures designed to ensure the confidentiality, integrity, and availability of data and information systems.

Parka’s information security policy is further described in the Information Security Management System.