Our organization is committed to protecting the confidentiality, integrity, and all physical and electronic information assets within the scope of our business activities and in compliance with legal requirements. We carry out ISMS requirements in line with ISMS objectives.

Our Policy within the Scope of ISMS;

• To ensure that it is documented, certified, and continuously improved to fulfill the requirements;
• To continuously improve the ISMS awareness of our personnel;
• To fulfill the responsibilities of defining, determining, evaluating, and controlling relevant risks for the establishment and continuity of ISMS within the framework of strategic business plans, ISMS objectives, and risk and opportunity management;
• To comply with all legal legislation and contracts related to ISMS;
• To monitor and manage risks to ISMS assets;
• To ensure the confidentiality of our stakeholders' information assets within the scope of ISMS;
• Special importance is attributed to certain personal data due to the risk of causing victimization or discrimination when processed unlawfully, in accordance with the Law on the Protection of Personal Data No. 6698 dated March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. These data are race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, association, foundation or union membership, health, sexual life, criminal conviction, and security measures, as well as biometric and genetic data;
• As an organization, we approach the protection of special categories of personal data, which are determined as "special quality" by the KVK Law and processed in accordance with the law, with sensitivity. In this context, the technical and administrative measures taken by our organization for the protection of personal data are carefully applied to special categories of personal data and we ensure necessary audits;
• We commit to continuously improving in line with our ISMS goals and ensuring sustainable ISMS conditions to be an exemplary organization in the sector in terms of information security.

For security violations you observe in our institution, you can reach us at the email address ihlal@uisap.com.