Information on Personal Data

YURTİÇİ KARGO SERVİSİ A.Ş.

INFORMATION SECURITY POLICY

Within the scope of our information security policy, as Yurtiçi Kargo Servisi A.Ş.;

All employees using common information assets are expected to show the necessary awareness and to act by considering the other colleagues, employees of the institution and the corporate values.

Importance is given to confidentiality pursuant to the corporate values; all kinds of personal data are protected via the systems having the highest security standards. Information is not shared, unless requested by the data owner, authorization is granted, or legal requirements emerge.

Therefore, planning, application, monitoring and improvement steps of information security management system are carried out in accordance with ISO/IEC 27001 Information Security Management System standard. Within the framework of these activities, we undertake:

• to ensure that the activities are carried out effectively, accurately, rapidly and safely,
• to comply with all customer terms and relevant legal obligations,
• to be aware of the risks on the confidentiality, accessibility, and integrity of all kinds of information assets belonging to our company, to our customers, suppliers and business partners, and to manage these risks,
• to ensure full participation on the information security phenomenon continuously in distribution operations and to arise high awareness in information security,
• our support and commitment on the matter of complying with the legislation on the protection of personal data and/or regulations, and with the contractual provisions agreed between the institution and its partners, sub-contractors and the relevant third parties (customers, suppliers, etc.),
• treating information security continuously, and make it a structure, which is continuously improved and developed, and which does not allow new risks to emerge.