Information Security Policy

Mobile Solutions is committed to maintaining a high level of information security, protecting customer data, and preserving the reliability of its information systems and services.

As a provider that develops, implements and maintains the MobTrack24 solution for GPS vehicle tracking, fleet management and related business processes, Mobile Solutions recognizes information security as essential to delivering dependable, high-quality and continuous services.

The company has implemented an Information Security Management System (ISMS) based on the international ISO/IEC 27001 standard. This Policy sets out the company’s core principles, objectives, responsibilities and commitments, and serves as the overarching framework for relevant internal policies, procedures and instructions.

This Policy applies to Mobile Solutions business processes, information systems, employees, contractors and other relevant parties, in accordance with their roles and responsibilities.

It covers MobTrack24 customer data, including vehicle, location, movement and related business activity data; personal data; confidential business, financial and technical information; software, databases and communications infrastructure; and information exchanged with customers, suppliers and partners.

Information security requirements apply regardless of the form in which information is stored, processed or transmitted.

The company follows a risk-based approach focused on preventing incidents, handling data responsibly and continuously improving security controls.

Our objectives include safeguarding the confidentiality, integrity and availability of information; preventing unauthorized access, disclosure, alteration, loss or misuse of data; maintaining the reliability and continuity of MobTrack24 services; and identifying and addressing risks promptly.

Further objectives include effective incident detection and response, protection of personal data, compliance with applicable laws and contracts, stronger employee security awareness, and continuous improvement of organizational and technical controls.

The company establishes, monitors and periodically reviews measurable information security objectives and performance indicators in line with business requirements and assessed risks.

Mobile Solutions takes a systematic approach to identifying, analyzing, evaluating and treating risks that could affect information security or business continuity.

Risk assessments are conducted periodically and when significant changes occur in systems, business processes or the operating environment. Security measures are selected according to assessed risks, applicable requirements and ISO/IEC 27001 principles.

The company applies appropriate organizational and technical measures to protect information throughout its collection, processing, storage, transmission and use.

Access is granted on a least-privilege basis. Rights are assigned, reviewed, changed and revoked under internal procedures. User account security, authentication and communications protection are governed by relevant internal requirements.

Vehicle location, movement, fleet activity and other data related to the use of MobTrack24 are treated as confidential customer information.

Mobile Solutions is committed to processing data for agreed purposes; restricting access to authorized persons; protecting data in transit, during processing and at rest; preserving data integrity; and maintaining service continuity in line with agreed support and availability levels.

Customer data is not used or disclosed in ways inconsistent with the agreed purpose, legal obligations or applicable lawful grounds for processing.

The company respects privacy rights and applies appropriate safeguards to personal data. Processing is conducted in accordance with applicable legislation, including the Serbian Personal Data Protection Law and, where applicable, the European Union General Data Protection Regulation (GDPR).

The principles of lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation and appropriate security are applied. Depending on the processing activity, Mobile Solutions acts as a data controller or a data processor.

Further details about processing activities and individual rights are provided in the Privacy Policy and relevant contractual documents.

The company recognizes the importance of MobTrack24 service continuity and applies appropriate safeguards, backup arrangements and recovery measures for data and information systems.

Continuity and recovery planning takes account of assessed risks, business priorities and contractual obligations. Backup creation, verification and restoration processes are governed by internal procedures.

Mobile Solutions establishes processes for identifying, reporting, recording, analyzing and responding to information security incidents to limit their impact and reduce the likelihood of recurrence.

Incidents are assessed according to their nature, severity and potential impact. Relevant parties are notified where required by law or contract. Lessons learned are used to improve security controls.

Management is responsible for establishing and supporting the ISMS, defining objectives and providing appropriate resources. Specific responsibilities are assigned in accordance with the organizational structure and internal requirements.

Employees and contractors must comply with applicable security requirements, handle information responsibly and report identified risks and incidents. The company promotes training, awareness and a culture of information security.

The company assesses relevant information security risks when engaging suppliers, infrastructure and technical service providers, and business partners.

Depending on the nature of the relationship, confidentiality, data access, responsibilities and information protection requirements are addressed through appropriate agreements and internal procedures.

Mobile Solutions is committed to meeting applicable legal, regulatory, contractual and other relevant requirements relating to information security and data protection.

Particular attention is given to agreements with MobTrack24 customers, including confidentiality, data protection and agreed service levels (SLAs). Compliance is reviewed periodically.

The effectiveness of the ISMS is monitored and reviewed through appropriate monitoring activities, assessments, risk analysis, internal audits and management reviews.

Review findings, identified risks, incidents and changes in the business or technology environment inform continual improvement in line with ISO/IEC 27001 principles.

This Policy is the overarching ISMS document. Its implementation is further governed by internal policies, procedures and instructions concerning access management, passwords, risks, backups, recovery, incidents, business continuity and other relevant areas.

Internal documentation is available to authorized personnel according to their responsibilities and business needs.

Through this Policy, Mobile Solutions confirms its lasting commitment to information protection, responsible handling of customer data and the reliability of MobTrack24 services.

The Policy is approved by management and is binding on all persons within its scope. It is periodically reviewed and updated to reflect changes in operations, regulations, technology and risks. The current public version is available on the company’s official website.