INTEGRATED MANAGEMENT SYSTEM POLICY

Information Security Policy

As RG Internet Advertising and Information Technologies Limited Company, we place great importance on complying with legal requirements, delivering services in line with the needs and expectations of our customers, suppliers, and third parties, and ensuring access to high-quality, fast, and secure services.

To safeguard information belonging to the company, its customers, and third parties, the Company has established an Information Security Management System (ISMS) in accordance with the ISO/IEC 27001:2022 standard.

The purpose of the ISMS is to ensure the protection of information in terms of confidentiality, integrity, and availability; to take measures against deliberate or accidental threats from inside and outside the organization; and to guarantee that all activities are carried out effectively, accurately, promptly, and securely.

Information security is a corporate responsibility and fully aligned with our company’s objectives. Roles and responsibilities have been clearly defined, and relevant personnel have been appointed to ensure proper execution of processes. These responsibilities cover all departments using IT infrastructure, third parties accessing our systems, and suppliers providing technical support.

Through the establishment of ISMS, we aim to identify and evaluate potential risks across all areas within scope, reduce them to acceptable levels with controls in compliance with the standard, and maintain the ISMS as a continuously active structure within the organization through the risk assessment procedure.


Quality Policy

In all areas of our operations, complying with legal requirements, responding to the needs and expectations of our customers, suppliers, and third parties, ensuring access to high-quality, fast, and secure services, and maintaining customer satisfaction are of the utmost importance.

Quality Management is a corporate responsibility and fully aligned with our company’s objectives. Our primary goals are to maximize customer satisfaction, increase efficiency and effectiveness, manage resources responsibly, evaluate customer feedback effectively, and ensure continuous improvement in the products and services we provide.

To ensure the healthy operation of the Quality Management System, necessary roles have been defined, responsibilities have been assigned, and relevant personnel have been appointed.


Information Technology Service Management Policy

Our company is committed to delivering services in compliance with the ISO/IEC 20000-1 Information Technology Service Management standard, continuously improving the effectiveness of both the Service Management System and the services provided, ensuring the continuity of IT infrastructure for all electronic transactions, and securing the satisfaction of users and stakeholders.

We pledge to ensure coordination between service-providing units in order to understand, prioritize, and accurately meet customer needs; to establish, develop, and maintain structures in compliance with IT service management requirements; and to take necessary measures for sustainability.

Our company is dedicated to fulfilling the requirements of the ISO/IEC 20000 standard by effectively managing risks and opportunities and ensuring the continuous improvement of all IT processes.


Business Continuity Management Policy

Ensuring that our services are managed in compliance with the ISO/IEC 22301 Business Continuity Management System standard is our priority. In the event of disasters or emergencies beyond our control, our objective is to protect human safety first and to ensure the uninterrupted continuation of our services by maintaining and continuously improving our business continuity plans.

In line with our legal obligations, company policies, and customer expectations, regular drills are conducted, risks that may cause service interruptions are analyzed, and necessary precautions are taken. Effective management of internal and external communication is essential to meeting the expectations of suppliers, customers, stakeholders, employees, and regulatory authorities.


Personal Data Protection Policy

The purpose of this policy is to provide transparency regarding the Company’s personal data processing activities carried out in compliance with the law and the systems established to safeguard personal data, as well as to inform all relevant parties.

The personal data of all our stakeholders—primarily our customers, potential customers, employees, candidates, company representatives, visitors, and the employees, representatives, and third parties of business partners—are processed and protected in compliance with the ISO/IEC 27701 Personal Data Management System standard.

Our company commits to fulfilling legal obligations, managing risks related to personal data, and ensuring continuous improvement.


Customer Satisfaction Policy

Our company operates a system where customers can easily communicate their demands and complaints, which are evaluated objectively, fairly, carefully, and confidentially. Necessary improvements are implemented to prevent recurrence, and transparency is adopted as the core principle in customer relations.

Our customer satisfaction principles are as follows:

  • We accept our customers as “right by default” and investigate complaints with this perspective.

  • Every issue reported to us provides an opportunity for self-improvement.

  • We embrace an approach that aligns with our customers’ expectations of quality service.

  • We establish strong, accurate, transparent, and sustainable customer relationships following the delivery of our products and services.


Complaint Policy

No fee is charged for the evaluation of customer complaints, nor is any profit derived from this process. Objectivity is upheld throughout the resolution process.

Key principles of our complaint management system:

  • The complaint procedure is open and accessible to customers.

  • Complaints are assessed impartially and fairly.

  • Integrity is ensured in establishing the facts, and all parties are taken into consideration.

  • Customer information is kept confidential and shared only when necessary for resolution.