Information Security Policy

Information Security Policy

There is no doubt that for Gediz Elektrik Perakende Satış A.Ş. (GEDİZ), which defines information as a critical asset that needs to be protected, information must be protected appropriately so that the Company can carry out its activities in a healthy manner and meet its legal requirements. Ensuring security of the information possessed and making sure that information is accessed by the right people at the right time is one of the most critical requirements for success today. GEDİZ guarantees that, thanks to appropriate checks and proactive measures, the security of the information it holds is handled within the framework of a management system. Any negative situation resulting from threats (loss, theft, damage, access by unauthorized persons, modification of information, malware, cyber attacks, hackers and spying, etc.) to the information systems would lead to serious consequences with regard to the Company’s liabilities and hinder the activities significantly. GEDİZ is aware of all of these threats and it protects its information assets against them.

GEDİZ must ensure security of personal data and information assets so that it can fulfil its responsibilities towards regulatory authorities and company partners and, in particular, its customers. In all contracts signed by GEDİZ, including labor contracts of employees, it is underlined that all information that may be associated with the Company is “confidential information that must be protected” and that violating this rule will result in certain consequences. GEDİZ created an Information Security Policy with the aim of preventing security breaches, protecting all the company information stored in physical environments or on computer systems, and ensuring the confidentiality, integrity and accessibility of such information. The policy also sets out the responsibility of GEDİZ employees to protect the information. The principles and measures stated in this policy, the relevant procedure and other annexes represent the applicable objectives defined for GEDİZ.