Sonotek Bilgi Teknolojileri Policies
At Sonotek Bilgi Teknolojileri, we place information security, the protection of personal data, service quality and customer satisfaction at the centre of all our business processes. In the services we provide to our customers, we adopt a transparent and sustainable management approach that complies with national and international standards.
Through the policies and practices we have established in this context, we commit to ensuring the security of information assets, protecting personal data in accordance with legislation, continuously improving our service quality and taking customer experience to the highest level. The policies shared set out our responsibilities to our customers and our working principles clearly and openly.
This English version is provided for information purposes only and is pending legal review. In case of any discrepancy, the Turkish version prevails.
Information Security Policy
Purpose and Scope
The information security policy of Sonotek Bilgi Teknolojileri has been established to ensure the security of business processes and customer information, to protect information assets and to ensure full compliance with information security standards.
This policy covers all departments, employees and business partners, and protects all information assets, including customer information, business processes and technological infrastructure.
Compliance with Information Security Standards
- Full compliance with information security standards in the MSP sector
- Compliance with national and international regulations
Customer Information Security
- Protecting the confidentiality and security of customer information
- Sharing information only with authorised persons
- Regular updating of access controls
Employee Training and Awareness
- Regular training on information security
- Programmes to raise security awareness
Management of Information Assets
- Identification and classification of all information assets
- Careful protection of sensitive customer information
- Implementation of risk-based protection strategies
Access Controls
- Access rights only for authorised personnel
- Periodic review of access levels
Encryption and Secure Communication
- AES-256 and TLS 1.2/1.3 encryption protocols
- Security measures for data in transit and at rest
Incident Management
- Incident management process for information security breaches
- Rapid detection, notification and response plans
Physical Security
- Office and data centre security measures
- Access control systems and monitoring mechanisms
KVKK (Personal Data Protection Law) Policy
Purpose and Scope
To protect customer and employee personal data effectively, to ensure full compliance with KVKK and to ensure data security.
Core Principles
Conditions for Processing Personal Data
- Processing on the basis of explicit consent, contract or legal obligation
- Data processing in accordance with general rules of good faith
- Processing necessary for the establishment, exercise and protection of rights
Fair and Accountable Processing
- Processing data for legitimate purposes
- Transparent process management
- Commitment to the principle of accountability
Data Security
- Technical and organisational security measures
- Rapid detection and prevention of data security breaches
Rights of Data Subjects
- Rights to information, rectification and erasure
- Right to object to processing
- Respect for all rights granted under KVKK
Data Breach Notification
- Notification to the relevant authorities within 72 hours
- Regular review of breach outcomes
Quality Policy
Purpose and Scope
To ensure customer satisfaction by providing high-quality service, to embrace a culture of continuous improvement and to implement best practices in the sector.
Core Principles
Customer Satisfaction Focus
- Understanding and exceeding customer expectations
- Continuous improvement based on feedback
- A proactive service approach
High Service Quality
- Compliance with sector standards and best practices
- Full compliance with SLA (Service Level Agreement) commitments
Continuous Improvement
- Regular review of business processes
- Investment in staff training and development
- Systematic evaluation of improvement opportunities
Technological Innovation
- Following and applying new technologies
- An innovation-focused working environment
- Offering up-to-date solutions to customers
Teamwork and Human Resources
- Encouraging a culture of collaboration
- Supporting the continuous development of staff
- Recognising every employee’s contribution
Business Continuity and Security
- Regular updating of business continuity plans
- Continuous improvement of information security measures
Customer Service Policy
Purpose and Scope
To increase customer satisfaction, ensure effective communication and promote transparency in customer service.
Principles and Practices
Fast and Effective Response
- Minimising first contact time
- A solution-focused approach
- 24/7 support availability
Professionalism and Courtesy
- Use of professional language in all communications
- Observance of the rules of respect and courtesy
Transparency
- Clear and accurate information about services
- Transparency in pricing and contract terms
Proactive Service Approach
- Early identification of potential problems
- Preventive maintenance and monitoring services
Customer Training
- Regular training on the services provided
- Providing documentation and resources
Feedback Management
- Systematic collection of customer feedback
- Improvement plans based on feedback
- Continuous development of the customer experience