At HEM MOTOR SANAYİ VE TİCARET LİMİTED ŞİRKETİ, we consider the protection of information belonging to our customers, suppliers, employees and business processes an integral part of our work. This policy sets out our principles for ensuring the confidentiality, integrity and availability of our information assets.

Purpose and Scope

The policy covers our website, email and communication channels, quotation and order processes, accounting records and all written and electronic information used in these processes. All employees and business partners with access to information must comply with it.

Core Principles

  • Confidentiality: Only authorised persons access information, to the extent their work requires.
  • Integrity: Information is kept accurate, complete and protected against unauthorised change.
  • Availability: Information is available to authorised persons when needed.
  • Legal compliance: We comply with Law No. 6698 (KVKK), other relevant legislation and contractual obligations.

Measures We Apply

  • All connections to our website are encrypted with SSL/TLS (HTTPS).
  • Site traffic is protected by a firewall and attack mitigation service (Cloudflare).
  • Access to systems is limited by personal accounts and authorisation levels.
  • Software and server components are updated regularly.
  • Data is backed up regularly and backups are protected against unauthorised access.
  • Forms are secured with CSRF protection; sessions end automatically after a set time.
  • Employees are informed about information security and personal data protection.

Security Incidents

Any situation threatening information security is assessed without delay, its impact is contained and corrective measures are taken. Breaches affecting personal data are notified to the Personal Data Protection Board and the persons concerned under the KVKK.

Continuous Improvement

This policy and related measures are reviewed and updated regularly in line with changing risks, technologies and legislation.

Contact

You can send notifications and questions about information security to [email protected].

Effective date: 28.09.2026