1. Preamble
Since its founding, ALGORITMOS PROCESOS Y DISEÑOS, S.A., (hereinafter APD) has built a solid reputation grounded in the application of values such as the observance of strict professional integrity, which confirms APD's determination to maintain conduct that respects both the law and its ethical values. To recognize and document conduct that was already being practiced, APD has formalized this document constituting its criminal compliance policy, which sets out and defines the framework of criminal compliance principles that must govern the entire organization and which form the foundations for the development and implementation of an appropriate and comprehensive regulatory compliance system.
2. Criminal compliance policy
2.1. Purpose
This criminal compliance policy has been drawn up as a result of the decision adopted by APD's Board of Directors.
APD is aware that the balanced fulfillment of its corporate responsibilities must be accompanied by the constant pursuit of excellence in business ethics in all of its decision-making processes, which must be understood within a corporate environment in which strict respect for the most advanced national and international rules, practices, and principles in this area is one of the basic pillars of its operations.
With regard to the prevention of criminal conduct, Organic Law 5/2010 of June 22, which amended Organic Law 10/1995 of November 23 (the Spanish Criminal Code), not only introduced the offenses applicable to legal entities but also referred to the need to establish monitoring and control measures for their prevention and detection. This legal regime was amended by Organic Law 1/2015 of March 30, which set out in detail the requirements for having management and control systems in place that enable legal entities to demonstrate their due diligence in the area of criminal prevention and detection.
In line with these legal requirements, APD has equipped itself with internal instruments that meet the need for appropriate control and management systems applied in the area of criminal detection and prevention.
To this end, APD has drawn up and implemented the following instruments within its organization:
This “Criminal Compliance Policy” is now added to these internal regulatory instruments and, together with those previously mentioned, constitutes APD's criminal compliance and anti-corruption management system (hereinafter the regulatory compliance system), which is an integrated body with sufficient provisions to meet the expectations reasonably placed on organizations that operate with the highest levels of commitment, as is the case with APD.
2.2. Scope of application and definitions
2.2.1. The criminal compliance system applies both to APD and to all companies controlled by it, directly or indirectly, with “control” deemed to exist when so determined by the regulations applicable to each company.
In those companies in which APD does not have control, its representatives on the Governing Bodies shall promote, insofar as possible, the adoption of a criminal compliance system consistent with and similar to that of APD.
2.2.2. The criminal compliance system applies to all members of APD, in particular: to the shareholders, members of the Board of Directors, executives, and employees and, where applicable, to any other interested parties linked to APD's activity. Likewise, suppliers and other partners related to APD must be familiar with, take into account, and, where appropriate, accept APD's policies and conduct instruments.
2.2.3. The terms and concepts used in this document that have not been expressly defined herein shall have the meaning given to them by Spanish Standard UNE 19601 on criminal compliance management systems.
2.3. General principles of the criminal compliance system
The general principles that underpin APD's criminal compliance system and that inspire the content and application of all its internal corporate rules, as well as the conduct of its organization, are as follows:
2.4. Actions concerning the criminal compliance system
The main actions that APD will carry out on an ongoing basis for the effective application of its criminal compliance system are summarized below, on a non-exhaustive basis.
2.4.1. Risk assessment and control activities
The activities in the course of which criminal acts may be committed shall be identified by the Compliance Body and the heads of each of the organization's departments.
Control activities consist of drawing up protocols or procedures that will specify the process by which the members of the organization form their will, adopt decisions, and execute them; these protocols or procedures shall be implemented, supervised, and documented by the Compliance Body.
Risk scenarios and control activities are set out in the criminal risk report or in the criminal risk management system, which also identifies the appropriate performance and execution of the controls. The Compliance Body is responsible for supervising the application of said report and ensuring its suitability.
2.4.2. Supervisory activities
The criminal compliance system shall be continuously supervised to ensure that its design and operation are appropriate to the requirements of the applicable regulations, with the Compliance Body being responsible for supervising its proper functioning.
In carrying out this activity, the Compliance Body is responsible, on a non-exhaustive basis and in general terms, for performing the following activities: