Integrated Management System Policy

INFORMATION SECURITY POLICY

In our field of activity, it is crucial to meet legal requirements, provide services that satisfy the needs and expectations of customers, suppliers, and third parties, ensure access to services that are delivered in a quality, fast, and secure manner, and allow our employees to access information assets in a timely, complete, accurate, and uninterrupted way. To protect information belonging to itself, its customers, and third parties, the Company has decided to establish an Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022. The purpose of establishing the ISMS is to protect information—within the scope of confidentiality, integrity, and availability—from any threats that may arise intentionally or accidentally from inside and/or outside, and to ensure that activities are carried out effectively, accurately, quickly, and securely. Information security is a corporate responsibility and aligns with our corporate goals. Necessary roles have been defined, responsibilities assigned, and responsible persons appointed to ensure the proper operation of information security processes. These responsibilities cover all units using IT infrastructure, third-party users accessing information systems, and suppliers providing technical support. During the ISMS establishment process, potential risks within the scope are identified and evaluated, matched with standard-compliant controls, and reduced to acceptable levels; the ISMS is kept alive within the organization through the application of the risk assessment procedure.

QUALITY POLICY

In our field of activity, meeting legal requirements, providing services that satisfy the needs and expectations of customers, suppliers, and third parties, ensuring access to high-quality, fast, and secure services, and achieving customer satisfaction are of great importance. The Quality Management System is a corporate responsibility and aligned with our corporate goals. Our primary objectives in delivering products and services are to maximize customer satisfaction, increase effectiveness and efficiency, manage resources efficiently, handle customer feedback effectively, and continuously improve. Necessary roles have been defined, responsibilities assigned, and responsible persons appointed to ensure the effective operation of the quality management system processes.

INFORMATION TECHNOLOGY SERVICE MANAGEMENT POLICY

In our field of activity, we commit to ensuring that services are delivered in accordance with ISO 20000-1 IT Service Management standards; continuously improving the effectiveness of the Service Management System and services; ensuring the continuity of IT service infrastructure for all transactions carried out via the institution’s electronic applications; ensuring satisfaction of users and stakeholders receiving IT services; prioritizing customer needs and ensuring alignment among service-providing units to meet those needs correctly; establishing and improving a structure in line with IT service management requirements; implementing necessary measures; meeting legal requirements; managing risks and opportunities effectively; fulfilling ISO 20000 requirements; and continuously improving all IT processes.

BUSINESS CONTINUITY MANAGEMENT POLICY

In our field of activity, we commit to conducting services in accordance with ISO 22301 Business Continuity Management System standards; ensuring life safety first in events beyond our control such as disasters or emergencies by keeping and improving business continuity plans; then minimizing or preventing impacts on all services and activities; carrying out drills to ensure plans function in emergencies by considering legal obligations, policies, and customer expectations; performing analyses to identify risks that may cause service interruptions and taking measures; managing internal and external communication on business continuity; meeting the requirements of suppliers, customers, stakeholders, employees, and legal authorities; and preparing business continuity plans in line with customer expectations, institutional policies, and legal obligations.

PERSONAL DATA PROTECTION POLICY

The main purpose of this Policy is to provide explanations about lawful personal data processing activities and the systems adopted for personal data protection, and to ensure transparency by informing individuals whose personal data are processed by our Company, including customers, potential customers, employees, employee candidates, company officials, visitors, employees and officials of partner organizations, and third parties. For personal data processed by the Company, we commit to operating in accordance with ISO 27701 Personal Data Management System standards, meeting legal requirements, and continuously improving by managing related risks.

CUSTOMER SATISFACTION POLICY

The Company follows a customer-focused approach where customers can easily submit requests and complaints; these are handled objectively, fairly, carefully, and confidentially; evaluated in compliance with legal requirements and company policies; and continuously improved to prevent recurrence. The Company adopts transparency in customer relations and accepts resolving all customer complaints as a core principle.

Our customer satisfaction rules:

• We first accept our customers as "right" and examine the reason for complaints from that perspective
• We investigate every issue communicated to us and find opportunities to improve
• We nurture an understanding that meets our customers’ expectation of quality service
• We aim to build strong, accurate, clear, and continuous customer relationships after delivering our products and services

COMPLAINT POLICY

No fee is charged from the customer for the evaluation of complaints, and no profit is gained. Company employees observe objectivity criteria during the resolution process: the complaint procedure is open and accessible to customers. Complaints are handled without prejudice and fairly. Integrity is maintained in uncovering facts related to the complaint; all involved parties are considered. Customer information in complaints is confidential and is not shared with third-party organizations or individuals outside the Company unless required for resolution.

In this context, our company commits to fulfilling the requirements of Integrated Management System standards, meeting legal requirements, activating all applicable controls, and continuously improving the established Integrated Management System annually with new application areas and evolving technology.

OCCUPATIONAL HEALTH AND SAFETY POLICY

We conduct preventive efforts to eliminate or reduce hazards that may cause occupational accidents and diseases, and ensure participation of employees and stakeholders. The health and safety of our employees, business partners, customers, and visitors—our most fundamental value—are our highest priority in all areas we operate.

Accordingly, as part of our responsibility to create healthy individuals and a healthy workforce;

• To create healthy and safe working conditions with a zero-accident and zero-occupational-disease approach
• To identify and eliminate hazards, risks, and near-miss incidents in the workplace
• To provide necessary communication activities to understand OH&S needs and expectations of employees and stakeholders
• To conduct continuous improvement efforts to eliminate life and property hazards such as illness, injury, and emergencies
• To conduct risk assessments on occupational health and safety with employee participation and reach acceptable risk levels
• To use new technologies, evaluate changes and opportunities, and manage processes proactively from the design/project phase
• To ensure participation of all organizational levels and stakeholders in improving OH&S practices
• To continuously improve our OH&S performance using the best available technologies
• To plan for potential emergencies and take proactive precautions
• To provide opportunities for necessary OH&S trainings and track their effectiveness
• To promote lessons learned and best practices in OH&S across all work areas
• To monitor and improve the OH&S performance of contractor firms within our OH&S Management System
• To identify OH&S opportunities and integrate them into our processes and practices
• To set quantitative targets, create action plans, and track achievement to reach strong OH&S performance
• To create a culture where safe and healthy working habits are internalized and to provide the necessary resources
• To act in compliance with national and international OH&S regulations, collective agreements, and other obligations in all geographies of operation, new investments, and existing operations
• To commit to continuous improvement in OH&S activities with participation from all organizational levels and stakeholders

ENVIRONMENT POLICY

Our organization conducts its activities with environmental sensitivity as a principle. For this purpose, it commits to the following fundamental elements.

• To document, implement, and ensure the effectiveness of the Environmental Management System in line with TS EN ISO 14001 requirements
• To improve environmental performance and achieve targets
• To define strategies for environmental protection and improvement, provide necessary resources, and implement actions
• To comply with all environmental legislation and standards
• To identify environmental aspects, declare them, and take measures to eliminate or reduce potential risks
• To identify, evaluate, reduce, or eliminate hazards and risks of our activities on people and the environment
• To take measures to prevent environmental pollution, use natural resources efficiently, minimize waste, ensure recycling, and dispose of non-recyclable waste
• To comply with environmental legal and other requirements and fulfill compliance obligations under changing conditions
• To increase environmental awareness and participation in related processes through training provided to employees, business partners, and stakeholders
• To ensure continuous improvement of the environmental management system to improve environmental performance