Our Strategy

A responsible citizen

A responsible citizen

We create lasting value for global supply chains.

UniverseHolding strives to generate long‑term value for our business partners and society at large. We conduct all operations ethically and in full compliance with relevant laws, underpinned by a robust, transparent governance framework.

ESG Governance

We recognise that a structured, well‑rounded management system lays the foundation for embedding sustainable development into daily business and management workflows. Our ESG governance framework ensures ESG initiatives and newly arising material issues can be promptly escalated to the Board and senior leadership for review and resolution.

The Board‑level Risk Management & Sustainability Committee (RMSC) supervises the Group’s ESG practices, policies, processes, strategies and strategic priorities. It is chaired by one of the Company’s executive directors and includes Board members.

Reporting to the RMSC is the ESG Committee, made up of senior business leaders and heads of core functions covering human resources, governance, supplier compliance, information technology and corporate sustainability. Drawing on solid sustainability expertise and deep industry experience, its members bring forward forward‑thinking recommendations to integrate ESG and sustainable practices into corporate strategies.

At the regional tier, local ESG Working Groups drive on‑the‑ground delivery of the ESG strategy. Staffed by representatives from business, operations and support teams, these working groups submit regular environmental, social, supply chain, HR and governance data. They also exchange proven best practices, flag key incidents and risks, and put forward recommended remedies for the ESG Committee, which in turn reports upwards to the RMSC.

Business Integrity

UniverseHolding runs its operations responsibly and adheres to local legal and regulatory requirements across all markets where we operate. Our Code of Conduct and Business Ethics bans all forms of corruption, bribery, extortion, fraud, money laundering and anti‑competitive behaviour. We maintain a zero‑tolerance stance towards bribery and corruption and require all employees to uphold the highest ethical standards.

We invite all personnel to raise concerns over actual or suspected unlawful or unethical conduct with senior management or the Group Chief Compliance & Risk Management Officer. Any breaches of the Code will be investigated and escalated to leadership. Sanctions will be imposed where violations are confirmed. We strictly prohibit retaliation against employees who submit bona fide concerns or take part in related investigations.

We believe our success is built on shared values and consistent ethical standards, including the principles set out below:

c1.jpg

Information Security

UniverseHolding prioritises information security across all business activities and safeguards the confidentiality, integrity and availability (CIA) of our information assets. We deploy leading, industry‑standard cybersecurity technologies to defend our networks and data. Beyond our in‑house cybersecurity specialists, we partner with multiple reputable third‑party security vendors for continuous monitoring, proactive vulnerability scanning, standard formulation, testing, auditing and certification services.

We maintain a comprehensive data protection policy to guide our commitment to information safeguarding. This policy aligns with prevailing data protection legislation, including the European Union’s General Data Protection Regulation (GDPR). Our information security management system holds ISO/IEC27001:2013 certification. We keep abreast of applicable regulatory updates and carry out periodic reviews and revisions to our data protection policies and procedures. Our data protection framework follows a risk‑led methodology: we evaluate risks linked to data collection and processing and roll out suitable controls to reduce exposure. To lift team awareness, we deliver ongoing training initiatives such as monthly phishing simulations, quarterly general cybersecurity sessions and regular security tip communications sent by email each month.

For further details on our milestones and progress, please refer to our ESG Report 2025.