OUR POLICIES
Our Quality Policy
To fulfill customer demands, expectations and legal requirements with the effective use of our resources,
To do studies aimed at increasing customer satisfaction. To perform internal performance measurements and analyses in our field of activity.
It is the quality policy of our company to determine the areas open for development by evaluating these results and to continuously improve the quality management system.
BGYS Policies
As Atlas Technology, we are committed to maintaining the highest level of information security in the information technology field, where information is easily accessible at any time. This includes ensuring that information is only accessible by authorized personnel, protecting it from unauthorized changes, and being alerted when changes occur. We will provide technological solutions with qualified human resources and a strong infrastructure to ensure and maintain information security. We will safeguard all physical and electronic information assets, and we will not share any information related to individuals and/or institutions we provide products and/or services to with third parties. We will establish up-to-date firewalls against malicious individuals attempting unauthorized access to this information. We will periodically investigate, evaluate, measure, and report activities that could risk information security. We will deliver requested information to the relevant public and/or regulatory authorities accurately, completely, and in a timely manner. We will strive to ensure that the information we collect under the authority granted by the public and/or regulatory authorities is unconditionally accurate. We will ensure the accuracy and integrity of our company’s information, and we will take necessary precautions to prevent being a source of viruses and malware. We will comply with all legally established and to be established rules regarding information security. We commit to providing resources to continuously improve our BGYS system to ensure sustainability. We will fully comply with the ISO27001:2013 standards held by our company and will train our colleagues according to these standards. This document includes the minimum rules that must be followed to ensure the security of information systems within the COMPANY. The policies below serve the following purposes: • Ensure the security of all data shared in information systems • Ensure business continuity and minimize legal risks arising
Business Continuity Policy
Business Continuity includes the effective, accurate, fast use of processes and the provision of services at the promised levels by evaluating the confidentiality, integrity and accessibility of information in the Enterprise and protecting it from all possible interruptions.
The initiative reveals its approach to managing its own business continuity and achieving its set goals with policies approved by the management at the highest level.
In addition, this policy aims to guide all activities related to business continuity at the Enterprise and to set out business continuity processes and controls with the support of sub-documents The business continuity policy created for this purpose will provide the following basic requirements:
- Supporting business strategy and corporate goals
- Compliance with laws, standards and contracts
- Managing the current and projected business continuity processes, risks and threat environment
- To ensure the continuity of all assets and processes within the scope of Business Continuity belonging to the Enterprise, especially information assets and processes
SERVICE MANAGEMENT POLICY
The Service Management Policy has been established to determine all the services offered to Enterprise employees and customers, define appropriate service levels, continuously measure and report, prioritize employee needs by understanding and meeting these needs correctly. The initiative sets out its approach to managing its own service management objectives and achieving the set business goals with this policy approved by the management at the highest level. The service management policy created for this purpose is intended to meet the following basic requirements: - To support business strategy and corporate goals - To comply with laws, standards and contracts - To manage the objectives, processes and risks of the current and projected service management, - To keep information technology services running, to manage changes and to use information technology services according to business needs - Managing accessibility and capacity by making the necessary monitoring, reducing costs by doing the right finance and resource management
COOPERATION AND ETHICAL BEHAVIOR POLICY
The Code of Cooperation and Ethical Conduct contains the basic rules that our employees must follow while performing their duties and the principles related to the working order. The purpose of these principles is to create the scope of the basic rules to be followed and to prevent all kinds of disputes and conflicts that may arise between all our customers and stakeholders and our institution. Dec. Our Code of Working Together and Ethical Conduct expresses our principled and behavioral expectations from our employees and all stakeholders, including our product, service and process suppliers.
Our Labor and Human Rights Policy
- The Child Employee Initiative does not adopt practices other than local laws in the employment of child employees and expects compliance with local laws from its stakeholders as a minimum.
- The Young Worker Initiative does not adopt practices other than local laws in the employment of young employees and expects compliance with local laws from its stakeholders as a minimum. The initiative undertakes that workers who are legally considered young under the age of 18 should not work overtime or at night and will comply with legal requirements.
- Wages and Social Rights The initiative expects all its stakeholders to meet national laws on wages and social rights paid for a standard working month as a minimum.
- Working Hours The initiative expects all its stakeholders to meet national laws as a minimum in daily, weekly, monthly and annual working hours and overtime practices.
- Discrimination is against discrimination based on race, caste, national origin, religion, language, color, sect, age, disability, marital status and gender in enterprise, recruitment, compensation, access to education, promotion, termination, retirement, union membership and political membership activities. The initiative undertakes to act based on the principle of equality in the development, career, wage and benefits management of its employees.
- Principle of Voluntary Work The initiative adopts the volunteering of employees. Employees are not required to provide their identity documents to their employers and are free to leave their employers after reasonable notice.
- Freedom of Association and Collective Bargaining The initiative respects the rights of employees to participate in local workers' representative organizations and expects the same approach from all its stakeholders. The initiative undertakes to establish a constructive dialogue with freely elected representatives of its employees, represented by a legal trade union.
- Abuse and Harassment The initiative prohibits all types of abuse and harassment. Physical abuse or the threat of physical abuse, sexual harassment, verbal abuse psychological harassment or other types of threats cannot be tolerated.
- Modern Slavery Modern Slavery refers to activities that result in the hateful abuse of human rights and consists of slavery, bondage, forced and compulsory labor, and human trafficking.
The initiative undertakes that it will not tolerate modern slavery methods in any way in accordance with the European Convention on Human Rights and expects all its stakeholders to show the same attitude as a minimum.
Personal Data Protection (PDPP) Policy
• 1. THE PURPOSE OF PREPARING THE POLICY
Our company is ENTERPRISE TECHNOLOGY LTD. in the capacity of data controller, it acts with the awareness of the importance of the confidentiality and security of personal data obtained within the scope of the Personal Data Protection Law No. 6698 (PDPP) and other relevant legislations.
The INITIATIVE acts with the determination of compliance with the laws arising from the capacity of data controller, T .C. Together with the Constitution and the law No. 6698, it determines the personal data processing processes in accordance with the relevant legislation.
At the same time, it is processed in accordance with the law.
Anonymization:
Even by matching Personal Data with other data, in no way is the identity of a certain fact making it impossible to be associated with a person.
Personal Data :
All kinds of information about an identified or identifiable real person
Explicit Consent :
Personal data of the person to be processed before the relevant transaction is performed to make a declaration of consent to the execution of the transaction after its clarification.
Lighting Text :
For which purpose the personal data will be stored for how long, by which method it is collected, how it is maintained and 3. whether it will be shared with people or not a statement made to the relevant person.
Inventory :
Data controllers are performing depending on their business processes personal data processing activities; personal data processing purposes, data category, they are created by associating the transferred recipient group and the data subject with the contact group and personal transfer of data to foreign countries for the maximum period required for the purposes for which they are processed the inventory they detail by explaining the foreseen personal data and the measures taken regarding data security
Contact Person :
The real person whose personal data is processed
Destruction :
Deletion, destruction or anonymization of personal data
Processing:
PDPP's 3. registration, storage, retention of personal data in the article, modification, reorganization, disclosure, transfer, inheritance, acquisition, classification of transactions
Law :
Law on the Protection of Personal Data
Special Data :
Race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, clothing, association, foundation or union membership, health, sexual life, criminal conviction and data related to security measures, as well as biometric and genetic data
Data Processing :
A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller
Data Controller :
After the establishment of the data recording system, which determines the purposes of processing personal data by means of v:e, and the natural or legal person responsible for its management
Delete :
Deletion of personal data, the process of making personal data inaccessible and unusable again for the relevant users in any way
2. SCOPE
The personal data owner defined as a related person in the PDPP and related legislations covers all personal data processed automatically to a real person or by non-automatic means, provided that they are part of the data registration system.
3. DEFINITIONS
4. PERSONAL DATA COLLECTION CHANNELS
GIRIÅžIM may collect personal data belonging to the related persons verbally, in writing or electronically by automatic or non-automatic methods. The relevant persons are clarified in accordance with the legislation by being the main channels of obtaining personal data.
5. TYPES OF PERSONAL DATA OBTAINED
The personal data obtained by the INITIATIVE, data categories, collection channels, processing purposes and legal reasons based on processing, the third parties to which the personal data are transferred and the transfer purposes are also regulated in detail in the relevant person disclosure text, taking into account.
6. OBLIGATION OF DISCLOSURE
Related persons who have personal data obtained while continuing the activities of the ENTERPRISE are subject to Article 10 of the law. In accordance with the article, it is clarified before obtaining personal data. The information that should be communicated to the data owners within the framework of the said disclosure obligation is listed below with its main headings:
- The identity of the data controller and his representative, if any
- For what purpose the personal data will be processed,
- To whom and for what purpose the processed personal data will be transferred
- Method and legal reason of collecting personal data
- 11 of the law of the person concerned. Other rights listed in the Article
Our Company, in order to fulfill the obligation of disclosure, there are illumination texts to be presented to data owners within the scope of the above-mentioned provision of the law on the basis of the process and the persons whose data are processed. After the presentation of the clarification texts to the data owners, explicit consent statements are also provided for data processing activities and data categories that require the explicit consent of the data owner in order for our Company to carry out its commercial activities Jul.
7. SPECIAL CATEGORIES OF PERSONAL DATA POLICY
In accordance with the Decision of the Personal Data Protection Board dated 31/01/2018 and numbered 2018/10 on Adequate Measures to be Taken by Data Controllers in the Processing of Special Data within our Company, special personal data are protected by us on the basis of special security measures. In this context, a Special Data Policy has been prepared and put into practice in our Company.
6 of the special data Act. The article is as follows:
- Race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs of persons, disguise and clothing, membership of an association, foundation or trade union, health, sexual life, criminal conviction and security measures related data, as well as biometric and genetic data are special personal data.
- It is forbidden to process personal data of a special nature without the explicit consent of the person concerned.
- Personal data other than the health and sexual life listed in the first paragraph may be processed without seeking the explicit consent of the relevant person in the cases provided for by law. Personal data related to health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation to keep secrets for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and maintenance services, planning and management of health services and financing, without seeking the explicit consent of the relevant person.
- In the processing of personal data of a special nature, it is also necessary to take adequate measures determined by the Board.
8. RIGHTS OF THE PERSONAL DATA OWNER
11 of the Law. Within the scope of the Article, everyone has the right to apply to our Company in the capacity of data controller on the following issues: Everyone should contact the data controller about themselves;
a) Learning whether personal data is processed,
b) If your personal data has been processed, do not request information about it,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom personal data are transferred at home or abroad,
d) Requesting correction of personal data in case of incomplete or incorrect processing,
e) Requesting deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of Law No. 6698,
f) (d) and (e) to request that the transactions made in accordance with clauses be notified to the third parties to whom the personal data are transferred,
g) Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
i) Has the right to request compensation of the damage if the personal data is damaged due to illegal processing.
9. THE METHOD OF EXERCISING THE RIGHTS OF THE DATA OWNER
13 of the Law. article 1. in accordance with the paragraph and within the scope of the Communiqué on the Procedures and Principles of Applying to the Data Controller Published in the Official Gazette dated 10.3.2018 and numbered 30356; applications to be made to our Company, which is the data controller, regarding these rights must be submitted to us in writing or by other methods determined by the Personal Data Protection Board (“Board”). The “Relevant Person” who owns personal data will be able to inform our Company of the rights and requests set out in subparagraph A. In this context, the data subject may apply in writing within the following scope in order to exercise all other rights he/she has in accordance with article 11 of the Personal Data Protection Law No. 6698:
- With the applicant's personal application, - By mail with the addition of a signature declaration,
- Through a notary public,
- With a secure electronic signature,
- By signing with a secure electronic signature defined on behalf of the applicant and sending it to the KEP address specified below,
- By sending from the e-mail address previously notified to the data controller by the relevant person and registered in the data controller's system, Sending to the INITIATIVE address can be provided with the application letter.
At the same time, the Initiative.Shipping to the KEP address can be provided.
10. MEASURES TAKEN
12 of the Law. In accordance with the Article, it takes the necessary administrative and technical measures to prevent the unlawful processing and access of personal data processed by our Company in accordance with the Article and to ensure the safe storage of personal data, and to carry out and / or to carry out the necessary audits in this context. Although measures are taken in accordance with the nature of the personal data, personal data of a special nature are protected by stricter security measures.
11. STORAGE OF PERSONAL DATA
The personal data obtained by our company are stored securely in physical or electronic environment for an appropriate period of time in order for our Company to continue its activities. Within the scope of these activities, our Company acts in accordance with the obligations stipulated in all relevant legislation, especially the PDPP, regarding the protection of personal data.
PROTECTION OF PERSONAL DATA CLARIFICATION TEXT •
This “Clarification Text” is issued by the INITIATIVE TELECOMMUNICATIONS CONSTRUCTION CONTRACTING TOURISM ELECTRONIC PROJECT CONSULTANCY INDUSTRY AND TRADE LIMITED COMPANY (“INITIATIVE”) in the capacity of data controller in accordance with the Personal Data Protection Law No. 6698 (“PDPP Law”), under the PDPP's title "Disclosure Obligation of the Data Controller" 10. article 11 entitled ‘Rights of the Person Concerned’. within the framework of the article, it has been prepared in order to inform you about the collection methods, processing, use, transfer and destruction of your personal data.
As a VENTURE, we attach importance to the security of your personal data. For this reason, all your personal data related to us are processed and stored in accordance with the Personal Data Protection Law No. 6698 (“PDPP Law”).
As a VENTURE, in the capacity of “Data Controller”, we process your personal data within the limits set by legal legislation.
The INITIATIVE undertakes to take the necessary measures to keep the information of visitors, customers, employees, suppliers and similar persons confidential and not to share this information with third parties in accordance with the Personal Data Protection Law No. 6698.
In addition, your personal data may also be processed when you use our call centers or our Website to use the services provided by the INITIATIVE, or when you visit the INITIATIVE or our Website.
Personal data provided by the INITIATIVE in accordance with the PDPP;
• In accordance with the law and the rule of honesty,
• Correctly and up-to-date as needed,
• For specific, clear and legitimate purposes,
• In connection with the purposes for which they are processed, limited and in moderation,
* Special attention is paid to their processing for the period stipulated in the relevant legislation or for the period necessary for the purpose for which they are processed, and the necessary inspections are carried out for this purpose.
As an INITIATIVE, we show maximum sensitivity to the security of your personal data and take all necessary technical, administrative and legal measures to protect your personal data.
As personal data owners, if you submit your requests regarding your rights to the INITIATIVE by the methods set out below in this Clarification Text
The INITIATIVE will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by the INITIATIVE will be charged.
Personal data owners in this context;
Learning whether personal data is processed,
If your personal data has been processed, do not request information about it,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Knowing the third parties to whom personal data are transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made in this context to the third parties to whom the personal data are transferred,
Despite being processed in accordance with the provisions of the PDPP Law and other relevant laws, requesting the deletion or destruction of personal data if the reasons requiring its processing disappear, and requesting that the transaction performed in this context be notified to the third parties to whom the personal data are transferred, objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems, It has the right to request compensation of the damage if it suffers damage due to the unlawful processing of personal data.
You can submit a signed copy of the form to the address ENTERPRISE – Sofia 1463, Triaditsa district, 56 Vitosha Blvd., 1st floor, office 1.personally by hand with identifying documents, through a notary or other methods specified in the PDPP Law, by filling out the “REQUEST FORM FOR PERSONAL DATA PROTECTION” form containing your explanations about your rights that you request to use in order to exercise your above-mentioned rights related to personal data, you can send a signed copy of the form to the address ENTERPRISE -Sofia 1463, Triaditsa district, 56 Vitosha Blvd., 1st floor, office 1. by notary public or by other methods specified in the PDPP Law.
OUR HEALTH, SAFETY AND ENVIRONMENTAL POLICY
- Occupational Health and Safety The initiative provides a safe and hygienic working environment by taking into account industrial and other hazards, complies with legal requirements and regulations as a minimum and expects the same approach from its stakeholders. - Environmental Management The initiative carries out studies aimed at reducing its impact on the environment and expects the same approach from all its stakeholders. In this context, it supports the use of economical or clean energy in all processes that consume natural resources such as energy and water. Jul. The initiative manages its wastes in accordance with Environmental Regulations and performs carbon emission measurements in order to protect nature and ensure Tuesday's sustainability. The enterprise acts within the scope of ROHS/REACH Regulation by checking all the chemicals it uses primarily with CAS Numbers.
SERVICE MANAGEMENT POLICY
The Service Management Policy has been established to determine all the services offered to Enterprise employees and customers, define appropriate service levels, continuously measure and report, prioritize employee needs by understanding and meeting these needs correctly. The initiative sets out its approach to managing its own service management objectives and achieving the set business goals with this policy approved by the management at the highest level. The service management policy created for this purpose is intended to meet the following basic requirements: - To support business strategy and corporate goals - To comply with laws, standards and contracts - To manage the objectives, processes and risks of the current and projected service management, - To keep information technology services running, to manage changes and to use information technology services according to business needs - Managing accessibility and capacity by making the necessary monitoring, reducing costs by doing the right finance and resource management
