Internal Information System Policy

COTOBLAU S.A. has an Internal Information System, designed in accordance with the requirements of Law 2/2023, regulating the protection of persons who report breaches of regulations and the fight against corruption.

This system is enabled to report, in a secure manner, infringements of European Union Law provided for in Article 2 of the aforementioned Law, serious or very serious criminal or administrative offences, as well as possible risks or breaches of other internal regulations.

COTOBLAU S.A., assumes the commitment to protect the people who make these communications ensuring, at all times, a diligent processing and respect for the following guarantees:

• Confidentiality of all persons involved in a communication, as well as of all actions carried out in its processing.


• Absence of reprisals against persons who communicate in good faith.


• Anonymity, with no need to provide any kind of data aimed at identifying the informants.


• Processing of personal data in accordance with current legislation.


• The right to the presumption of innocence and the right of defence of the person affected by the communication.

The Internal Information System of COTOBLAU S.A. is accessible on the home page of the corporate website and consists of the following elements:

• This Internal Information System Policy, approved on the basis of the general policy approved by the parent company of the group of companies of which it forms part.


• Internal communication channel.


• External channel managed by the Independent Authority.


• Responsible for the Information System.


• Information Management Procedure: which regulates, in detail, the operation of the System.