Information Security Policy

Our Company adopts the following principles to ensure the effective use of its tangible and intangible assets and to transform its intellectual capital into a sustainable competitive advantage through digital transformation, within the framework of a learning organization:

1. Information Security Risk Management:
Ensure that risks relating to information systems and information security are effectively identified, assessed and managed.

2. Raising Awareness: 
Continuously enhance information security awareness among our employees and relevant interested parties, embedding information security into our organizational culture.

3. Organizational Trust and Reputation:
Strengthen our organization’s trustworthiness and reputation among relevant interested parties.

4. Personal Data Protection and Privacy:
Ensure that personal data is processed lawfully, protected against unauthorized access and disclosure, and handled in compliance with data security obligations under the Turkish Personal Data Protection Law No. 6698 (KVKK) and other applicable data protection legislation.

5. Secure Use of Artificial Intelligence and Emerging Technologies: 
Assess information security, personal data protection, intellectual property and confidentiality risks arising from the use of artificial intelligence and emerging digital technologies; prevent the unauthorized disclosure of corporate information through these technologies; and manage their use in accordance with established security requirements.

6. Supplier and Third-Party Security:
Assess information security risks arising from suppliers, business partners, consultants and external service providers; maintain appropriate controls over their access to information and systems; and ensure that applicable security requirements are managed through contractual provisions and appropriate oversight mechanisms.

7. Compliance:
Ensure full compliance with all applicable legal, regulatory and other requirements relating to information systems and information security.

8. Continual Improvement: 
Continually improve and enhance the performance of our Information Security Management System (ISMS).

9. Sustainability: 
Integrate the Information Security Management System into our organization’s existing processes to ensure its long-term sustainability.

Our Company is committed to providing the highest level of assurance to our stakeholders across all information security processes and to safeguarding the confidentiality, integrity and availability of our information assets.