1. INTRODUCTION

Purple Key d.o.o. (“Purple Key”) is committed to the highest standards of ethical conduct and social and environmental responsibility. We expect our Suppliers to aspire to these same standards in their business operations and, to have their own policies and processes in place addressing the matters detailed herein.  Accordingly, Purple Key has created this “Supplier Code of Conduct”, which sets out the standards expected of any Supplier doing business with Purple Key.

“Supplier” means any firm or individual that provides a product or service or undertakes any activity for or on behalf of Purple Key, either directly or indirectly.

“Supplier Representative” means any individual who works for a Supplier, whether under a contract of employment or any other contract (written or oral) where an individual undertakes to do personally any work or services for the Supplier and includes, without limitation, Supplier’s principals, officers, directors, employees and independent contractors.

  1. SYSTEMS AND NETWORK ACCESS

Access to Purple Key systems and data is restricted to only those systems and data that are approved by Purple Key and necessary to perform the agreed-upon services.  Any Supplier Representative that is authorized to access Purple Key’s systems shall comply with Purple Key’s Acceptable Use Policy which will be provided to such Supplier Representative if and as applicable.  Any attempt to access data not authorized to Supplier is a violation of Purple Key security policy.  If Purple Key becomes aware of a Supplier Representative attempting to access systems he or she is not authorized for, Purple Key will take immediate action, which may include (a) removing Supplier Representative from Purple Key premises; (b) terminating Supplier Representative’s access; (c) terminating Supplier’s services contract with Purple Key.  Access codes and passwords may not be shared or communicated to anyone other than the individual to whom the access is assigned.  Sharing of these credentials may be cause for termination of access of Supplier Representative(s) and Supplier’s services contract with Purple Key.  All extranet (those connections that are not located physically on or within a Purple Key site) connections must have a Purple Key-approved security plan on file before the connection may be established and utilized.  All Purple Key-owned hardware and/or Supplier-provided hardware used by Supplier to access Purple Key systems (including via remote access) shall be subject to a systems hardening review and vulnerability testing measures as conducted by Purple Key’s information security teams and, if necessary, Purple Key can request that measures be added or configurations changed to ensure the devices meet Purple Key’s security requirements.

The foregoing requirements shall not be deemed to limit, in any way, any representations, warranties or covenants regarding IT, data security and confidentiality included in any agreement between Supplier and Purple Key.

  1. USE OF PURPLE KEY PROPERTY

Supplier is responsible for the proper use of Purple Key property, and must safeguard it against loss, damage, misuse or theft.  Purple Key property is provided to Supplier for Purple Key business purposes only.  Personal use of Purple Key equipment such as phones and computers should be kept to a minimum.  Any unauthorized duplication and use of software is a violation of copyright laws of the United States.  All Internet, intranet and e-mail activities using Purple Key systems are to be conducted for legitimate business purposes that are directly related to the services Supplier is performing for Purple Key.  Supplier may not post or discuss business information concerning Purple Key with the media or on the Internet.

  1. DATA PRIVACY AND CONFIDENTIALITY 

Suppliers must comply with applicable privacy and data protections laws and regulations in the respective countries of operation, as well as secure Purple Key confidential data and individual personal data and prohibit its unauthorized access or use.

  1. ETHICAL STANDARDS

Purple Key seeks to identify Suppliers that conduct business with ethical standards consistent with its own.  Supplier should abide by the following ethical standards and guidelines:

  • Obey all relevant laws

  • Treat each other fairly, with dignity and respect

  • Prepare all records of financial transactions carefully and accurately

  • Report financial conditions and results of operations, honestly and promptly

  • Deal honestly and fairly with clients, customers, suppliers, and financial partners

  • Avoid actual and potential conflicts of interest

  • Avoid the improper giving and receiving of gifts

  • Safeguard Purple Key’s assets

  • Protect Purple Key’s reputation

  • Separate personal political activities from Purple Key’s business

  • Report observed violations of legal and ethical standards

  1. HEALTH & SAFETY

Purple Key expects its Suppliers to strive to implement the standards of occupational health and safety at a high level.  Supplier complies with applicable occupational health and safety regulations and provides a work environment that is safe and conducive to good health, in order to preserve the health of employees and prevent accidents, injuries and work-related illnesses.

Purple Key maintains a drug and alcohol-free work environment. No Supplier or Supplier Representative is permitted to possess, consume, sell, or be under the influence of alcohol and illegal drugs (and legal drugs that are not used in a manner consistent with dosage requirements) while in any Purple Key facility.  Any Supplier found to be in violation of this policy may be removed from company premises and not allowed to re-enter a Purple Key facility.  Firearms and any other weapons are not allowed in any Purple Key facilities and may not be carried when conducting any Purple Key business.  Violent or abusive behavior will not be tolerated at Purple Key.  Any Supplier Representative engaging in such conduct may be removed from the premises and not allowed to re-enter a Purple Key facility.

  1. PROHIBITIONS AGAINST DISCRIMINATION AND HARASSMENT

Purple Key does not tolerate unlawful discrimination or harassment in the workplace.  Supplier must not engage in any unlawful discriminatory or harassing conduct on Purple Key’s facilities or directed at anyone in the workplace.  Discrimination or harassment based on race, color, religion, national origin, citizenship, ancestry, gender (including pregnancy), gender identity, age, disability, marital status, sexual orientation, or other protected characteristic or status is strictly prohibited.

Sexual harassment is generally defined as unwelcome sexual advances, requests for sexual favors, or other visual, verbal or physical conduct of a sexual nature when: (i) submission to such conduct is made, either explicitly or implicitly, a term or a condition of employment; (ii) submission to or rejection of such conduct affects employment opportunities; or (iii) such conduct interferes with an individual’s work or creates an intimidating, hostile, or offensive work environment.  Examples of sexual harassment include, but are not limited to: sexual gestures, leering, or displaying sexually suggestive objects or pictures; derogatory comments, epithets, slurs, teasing and jokes of a sexual nature; graphic comments about an individual’s sex life or body; suggestive or obscene letters, e-mails, notes or invitations; and unwelcome physical contact.

Purple Key may, in its sole and absolute discretion, remove from the premises any Supplier who engages in offending conduct.

Supplier must promptly report any offending behavior, whether such behavior is directed to Supplier or to employees of Purple Key, by notifying any member of Purple Key management.

  1. COMPLIANCE WITH LABOR LAWS; LABOR STANDARDS

Supplier shall comply with all laws applicable to its business. Supplier should support the principles of the United Nations Global Compact, the UN Universal Declaration of Human Rights as well as the 1998 International Labour Organization Declaration on Fundamental Principles and Rights at Work, in accordance with national law and practice.

CHILD LABOR.  Suppliers are prohibited from using workers under the legal age of employment in any country or local jurisdiction where Supplier performs work for Purple Key. If the minimum age of employment is not defined, the minimum age of employment shall be 15 years of age. In cases where minors are authorized to work, we expect our Suppliers to observe all legal requirements, particularly those pertaining to hours of work, wages, minimum education and working conditions.

FORCED LABOR.  Supplier shall not employ or use any form of forced, bonded or compulsory labour, or other forms of slavery or human trafficking and will take all reasonable steps to ensure that there is no form of forced, bonded or compulsory labour, or other forms of slavery or human trafficking employed or used within its business or in its supply chains.

COMPENSATION AND WORKING HOURS.  Supplier shall comply with the respective national laws and regulations regarding working hours, wages and benefits.

DISCIPLINARY PRACTICES/COERCION.  Purple Key firmly believes that everyone should be treated with dignity. Suppliers shall not inflict or threaten to inflict corporal punishment or any other forms of physical, sexual, psychological or verbal abuse or harassment on any employees.

FREEDOM OF ASSOCIATION.  Supplier Representatives shall be free to join organizations of their own choice. Suppliers shall respect and recognize the right of employees to join and organize associations of their own choosing, and to bargain collectively.  Employees shall not be subject to intimidation or harassment in the exercise of their right to join or to refrain from joining any organization.

  1. ENVIRONMENT

Supplier shall comply with all applicable environmental laws, regulations and standards as well as implement an effective system to identify and eliminate potential hazards to the environment.  Suppliers should wherever possible support a precautionary approach to environmental matters, undertake initiatives to promote greater environmental responsibility.

  1. COMMUNITY INVOLVEMENT

Purple Key seeks to work with Suppliers that partner with local governments and communities to improve the educational, cultural, economic and social well-being of the communities in which they live and serve.

  1. GIFTS; CONFLICTS OF INTEREST

Purple Key employees may not accept gifts, gratuities or excessive entertainment (i.e., beyond nominal, conventional business courtesies, such as an occasional luncheon) from any individual or organization with which Purple Key has business dealings and Supplier shall refrain from giving any gifts, payments or the like that would, or could be perceived to violate this policy.  Supplier should further refrain from accepting or giving any gifts, favors, payments, entertainment, loans or the like with a purpose of obtaining any improper advantage or influence for the Supplier, Purple Key or any third party with any client, prospective client or other third party or that create any appearance of impropriety. Supplier must disclose all potential conflicts of interest, including those in which Supplier may have been placed inadvertently due to either business or personal relationships with customers, suppliers, business associates, or competitors of Purple Key, or with other Purple Key employees. Employees of Supplier may not act on behalf of Purple Key in any transaction or business relationship involving themselves or members of their family, or other persons or organization with which they or their family have any significant personal connection or financial interest.

  1. BUSINESS INTEGRITY; CORRUPTION

Corruption, bribery, extortion, and embezzlement, in any form, are strictly prohibited. Suppliers shall not violate the Foreign Corrupt Practices Act, the UK Bribery Act, any international anti-corruption conventions, and applicable anti-corruption laws and regulations of the countries in which they operate, and shall not engage in corruption, bribery, extortion or embezzlement in any form. Suppliers shall not offer or accept bribes or other means to obtain an undue or improper advantage. Suppliers must uphold fair business standards in advertising, sales, and competition.

  1. INSIDER TRADING

Buying or selling securities while in possession of material non-public information that Supplier acquires by virtue of their relationship with Purple Key is prohibited, as is the communication of that information to others, whether expressly or by way of making a recommendation for the purchase or sale of such securities based upon that information.

  1. FRAUD AND INVESTIGATIONS

Supplier is expected to cooperate with Purple Key investigators, law enforcement and regulatory agencies in the event of any investigation of wrongdoing by Supplier or others doing business with Purple Key. This cooperation includes reporting violations of the law and cooperating with law enforcement agencies in their prosecution efforts.

Should Supplier receive any subpoenas, regulatory requests, media inquiries, or other third party requests concerning Purple Key, Supplier shall promptly forward such matter to Purple Key, to the extent permitted to do so by law.

  1. REPRESENTATION OF PURPLE KEY

Supplier may not represent itself as an employee of Purple Key or enter into any agreement on Purple Key’s behalf or in Purple Key’s name.

  1. COMPLIANCE

Purple Key reserves the right to ask Supplier to re-affirm compliance with this Code of Conduct periodically, to investigate compliance by Supplier with this Code of Conduct at any time and to immediately remove Supplier from Purple Key premises and/or terminate the related services contract with Supplier in the event of noncompliance.

  1. COMMUNICATION

Supplier should take appropriate steps to ensure that the principles of this Code are communicated to their employees and throughout their own supply chains. Supplier should also take appropriate steps to ensure that the principles of this Code are adopted and applied by their employees, suppliers, agents and contractors to the extent applicable.

  1. ENFORCEMENT

If Purple Key determines that any Supplier has violated this Code, Purple Key may either terminate its business relationship or require the Supplier to implement a corrective action plan. If corrective action is advised, but not taken, Purple Key will suspend placement of future orders and shall terminate its business relationship with Supplier.

  1. REPORTING CONCERNS 

Actual, or suspected, material violations by a Supplier of this Supplier Code of Conduct or any other severe violations potentially harming our clients, Purple Key’s employees or Purple Key as a firm should be raised to your Purple Key contact mirza@purplekey.ba or directly by phone +38761835868.  Similarly, if you are a Supplier to Purple Key and suspect that a Purple Key employee, or anyone acting on behalf of the firm, has engaged in illegal or otherwise improper conduct, you should report the matter to your Purple Key contact.

  1. ORGANIZATION MODEL, LEGISLATIVE DECREE 231/2001 AND CODE OF CONDUCT

If Supplier provides the Services to Purple Key d.o.o., Supplier declares that it is aware that Purple Key has adopted and implements its own organization, management and control model pursuant to the BIH/EU Legislative Decree and a Code of Conduct available on https://it.purplekey.ba/about-us/Supplier agrees to comply with the provisions of the BIH and International Legislative Decree and the Code of Conduct of Purple Key and confirms it has put in place all the necessary measures and precautions aimed at the prevention of the crimes pursuant to the EU Legislative in line with its corporate structure. Failure to comply with the obligations hereunder shall constitute a material breach of this Agreement and shall give Purple Key the right to terminate this Agreement with immediate effect, without prejudice to the right of compensation for any damage caused to Purple Key.

  1. CHANGES TO THE SUPPLIER CODE OF CONDUCT

This Supplier Code of Conduct may be revised or updated by Purple Key from time to time. To the extent there is a conflict between this Supplier Code of Conduct and any applicable law or provision of any agreement between Purple Key and Supplier, the applicable law or agreement shall apply.