Language tr

Information And Security Policies

Within the context of our Hergüner’s Information Securtiy Management System Policy Goals:

To ensure that all internal and client information is securely accessible,
To maintain and protect the integrity, completeness and accessibility of information,
To evaluate and manage any risk that may be associated with both internal and client information,
To protect the brand and trustworthiness of our firm,
To apply the necessary sanctions for any information security breaches,
To comply with all applicable local and international statutory and regulatory requirements, any contractual obligations, and legal ethics to provide information security,
To take actions to minimize the effect of information security threats in order to provide business continuity,
To protect and improve information access control infrastructure and our information security,
To increase staff awareness of information security management through education and training

Our Quality Policy

Hergüner Danışmanlık A. Ş’s quality policy focused on customer satisfaction and is designed;

To achieve a superior quality work product at a fair price while providing excellent service,
To create a timely and efficient system by using appropriate technology in corporate communications with our internal and external customers, suppliers and all other stakeholders,
To determine the necessary improvement areas by tracking performance criteria and processes regularly, to ensure our activities comply with the requirements of ISO 9001: 2015 Quality Management System,
To provide a seamless quality of service that meets global standards and continously to improve training, social and cultural activities; to raise awareness about the benefits of such activities in all segments and develop our corporate culture,
To encourage leadership and employee participation in all our processes with a participatory and pluralistic management approach,
To increase and maximize the level of client satisfaction through adopting a perfectionist management approach, managing the customer feedback effectively and eliminating the non-value-added processes to ensure an effective use of resources and the timely provision of services.

To identify and meet the expectations of both the internal and external clients, suppliers, legal
and corporate corporations, its shareholders and the society, to support continous improvement,
learning and innovation, to adopt an approach of excellence.

Business Continuity Management System Policy

Within the context of our Business Continuity Management System Policy, we, as Hergüner Danışmanlık A.Ş., undertake:

To continuously enhance and execute our Business Continuity Management Systems in accordance with international standards,
To plan, create, apply, and protect our Business Continuity Management Systems,
To conduct our business practices to protect our reliable, reputable, and trustworthy image,
To ensure the continuity of our products and services within the Business Continuity Management System,
To prepare our business continuity plans in accordance with the expectations of our customers, institutional policies, and our legal obligations,
To conduct drills to certify the workability of our plans in case of emergency, and
To reduce the effects threats may have on our service continuity and to contribute to its continuity.

Personal Data Management System Policy

Within context of our Personal Data Management System Policy, we, as Hergüner Danışmanlık A.Ş., undertake:

To follow the principles and rules established by the Constitution of the Republic of Turkey, the Turkish Personal Data Protection Law numbered 6698 (“PDPL”), and other laws related to the protection of personal data in line with the Information Security Policy, and to protect rights and freedoms of individuals whose personal data are processed by our Company,
To take the necessary measures under the PDPL and to prepare appropriate policies,
To apply the necessary technical measures for all information systems included in our Company’s area of activity and practices related to the processing of personal data,
To get a confidentiality commitment signed by all of our data controllers and processor units, companies providing support services, employees, and interns,
To prepare and update privacy notices for data subjects,
To keep processed data as long as required for the fulfillment of our legal obligations or the legitimate organizational interests pursued by our Company,
To provide adequate safeguards for cross-border data transfers, and
To sensitively process and protect special categories of personal data.