This page has been prepared by Minerva Yazılım A.Ş. to inform you about our Data Security policy.
Data Security and Its Importance
Data security is the field of study that aims to protect the confidentiality, integrity, and continuity of information technology products and devices, as well as the data processed on these devices. Today, the continuous advancement of technology has made access to information easier, increasing the importance of data security in the transmission and storage of accessed information, regardless of location.
Article 12 of the Law, in the section on obligations regarding data security, states that the data controller;
- To prevent the unlawful processing of personal data.
- To prevent unlawful access to personal data,
- To ensure the protection of personal data.
It is stated that they are obliged to take all necessary technical and administrative measures to ensure an appropriate level of security.
Various methods can be implemented within an organization to effectively ensure information security. These methods can be applied in a wide range of areas, from analyzing threats and vulnerabilities and recognizing risks, to integrating technical security solutions into the system, to including information security provisions in contracts, and to increasing user awareness of information security. The most important of these methods is the creation and implementation of information security policies that define the organization's information security objective and the framework of rules and methods to be applied to achieve this objective.
Your data is safer with Minerva Software.
In today's changing and evolving environment, we are aware of the importance of information and its protection. Therefore, we are updating our security policies and practices to provide you with the best service under the umbrella of security.
Our Data Security Policy
- Ensuring that information is accessible only to authorized persons, protected from unauthorized alterations and that alterations are detected, and available to authorized users whenever needed.
- We pledge to produce and implement scientific and technological solutions with our qualified workforce and strong infrastructure to ensure and maintain Türkiye's technological independence in the fields of information security, communication, and advanced electronics, and to ensure the information security of all physical and electronic information assets used.
- We will ensure that essential and supporting business activities continue with minimal disruption.
- We will not share any information belonging to the individuals and/or organizations to whom we provide products and/or services with third parties .
- We will create up-to-date firewalls to protect these individuals and/or organizations against attacks from malicious individuals attempting to access their information without authorization.
- We will periodically investigate, evaluate, and measure activities that could jeopardize information security.
- We will provide the requested information accurately, completely, and on time to the public and/or private organizations for which we are responsible.
- We will strive to ensure the unconditional accuracy of the information we collect under the authorizations granted to us by the public and/or private institutions for which we are responsible.
- We will ensure the accuracy and completeness of the information belonging to our company.
- We will not be a source of viruses and malware, and we will take the necessary measures to prevent such activities.
- We will comply with all legally established and future rules regarding data security.
We commit to it.
This policy covers all units using the Organization's IT Infrastructure, third-party users accessing the information systems, and service, software, or hardware providers providing technical support to the information systems.
SSL
The "ISO 27001 Information Security Management System Standard (ISMS)," a valid document in the Data Security Policy, is an important standard for ensuring corporate information security. With this document, we can define the information security requirements that relevant parties must comply with, ensuring the confidentiality, integrity, and accessibility of our information assets by authorized persons, and establishing these requirements in written form.