+90 212 296 68 43Monday – Friday 9 AM – 6 PM
Our Policies
MAPContact
Our Policies

Information Security

Headings

Information Security Policy

While Map performs the integration and transmission of the information of its valuable business partners within the scope of the services it provides, it follows a very sensitive security policy regarding the data it processes. This page has been published to inform our employees, suppliers and customers.

1. Purpose of Information Security

MAP Elektronik Ticaret A.Ş considers corporate information as an extremely valuable asset. Information is critical for the sustainability of our business operations and must be properly protected. MAP aims to minimize the risks that may arise regarding the “Confidentiality, Integrity, Usability” elements of corporate information and the effects of these risks, based on the Information Security Management System (ISMS) ISO 27001 standard.

This policy has been approved by the General Manager of MAP Elektronik A.Ş.

MAP Management has adopted the fulfillment of the following subjects in particular:

  • Ensuring the highest level of confidentiality, integrity and usability of information assets and information systems,
  • Identifying risks towards information assets and managing risks systematically,
  • Fulfilling the requirements of Information Security Standards,
  • Complying with all legal regulations regarding Information Security
  • Fulfilling the requirements for the continuous operation of the Information Security Management System,
  • Providing necessary trainings to increase information security awareness,
  • Preparation and publication of other sub-procedures linked to this policy by the relevant units and responsible persons.

All MAP employees and those who use MAP Information Systems are required to comply with the MAP Information Security Policy, regardless of their duties and responsibilities. Apart from MAP employees, service providers’ employees who have to access MAP information due to the service they provide are also required to comply with this policy.

2. Responsibilities of All Employees

The purpose of Information Security and this policy is to protect, maintain and manage the confidentiality, integrity and usability of information and all information processing systems, processes and applications. This means; access to the information of both MAP and MAP customers in MAP information systems only by authorized persons; assurance of complete, accurate and usable information, and permanent accessibility to the information and systems. For this reason, all MAP employees, employees of other institutions serving MAP, interns, or anyone who has access to MAP systems, regardless of their duties, must act in accordance with Information Security principles.

All MAP employees must comply with the MAP Code of Business Ethics and the protection of confidential information specified in the MAP Personnel Regulations, as well as ensuring that MAP’s information is complete, accurate and available.

MAP is committed to processing personal data in accordance with Turkish Personal Data Protection Law No. 6698 and to taking the administrative and technical measures required by that Law.

3. Policy Ownership and Information Security Guidance

Functional ownership of this policy and all standards and other supporting documents and training activities will be carried out by the System and Information Security Management, and this management will also be a source of advice and guidance regarding the implementation of the policy within the entire MAP.

The System and Information Security Management will ensure that all employees receive appropriate training on Information Security issues and will guide the handling of information security incidents in general. When necessary, it will ensure that this policy is supported by detailed standards , procedures and processes and that they are ready for use as the need arises. It will also be responsible for ensuring that these policy requirements are transferred to all employees (MAP employees, interns, seasonal employees) and service provider institutions’ employees.

The Information and Communication Technologies Director will be responsible for the establishment of the general management framework regarding Information Security, ensuring its continuity, monitoring the changes in the risks faced by the information systems and constantly reviewing this policy to keep it up-to-date.

Information Security policies are reviewed at least once a year in parallel with the asset and risk updates, to reflect the current risks faced by MAP information assets. Information Security policies are updated according to new risks and changes in risks.

The Information Security Policy should be implemented in parallel with the MAP Personnel Regulation. Employees are responsible for being aware of the Information Security Policy and complying with these principles.

4. Inspection and Responsibilities

Each unit manager is primarily responsible for taking the necessary measures and monitoring the system to ensure compliance with the Information Security Policy.

The System and Information Security Management is responsible for periodically auditing the compliance with the standards, especially the Information Security Main Policy, and all the published policies and procedures and reporting to the relevant parties.

Violations of the Information Security Policy may cause the MAP to suffer as a result of not implementing the necessary controls against risks, and also to incur criminal liability according to the new Turkish Penal Code and to be liable for compensation for financial damages. Therefore, the violation at issue is also a violation of the MAP Personnel Regulations and may result in disciplinary actions. Violations of the Information Security Policy detected as a result of both surveillance, audit and notice may result in internal disciplinary penalties that may lead to the termination of the employment contract or even the initiation of judicial and criminal legal action.

Working together on the implementation of this policy will help maintain our knowledge and reputation at all times and ensure the continuity of the success of our business.

5. Goals

MAP Information Security adopts the protection of information assets of itself and its customers as the most important task. In line with this principle, in order to ensure that basic and supportive business activities continue with the least possible interruption, it aims to:

  • Ensure the continuity of information systems,
  • Maximize the level of awareness, awareness and compliance of employees with security requirements,
  • Assure full compliance with contracts made with third parties,
  • Minimize information security violations and turn them into learning opportunities,
  • Produce, allow access and store information in full compliance with laws,
  • Implement the most up-to-date and effective security controls.

Each MAP employee is responsible for contributing to these goals.

Talk to MAP

Let’s review your integration setup together.

Tell us about your trading partners, document types and current systems, and we will define the right starting point together.

The details you submit are used only to respond to your request. Privacy notice (KVKK)

Data controller: Map Elektronik Ticaret ve Veri Hizmetleri A.Ş. (MAP), Huzur Mahallesi, Umar Sokak No:1 Kat:7, Gökdeniz İş Merkezi, Sarıyer, Istanbul, Türkiye (MERSİS No. 0859008357300019, KEP address: mapelektronik@hs01.kep.tr). This notice is provided for this form under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles of the Obligation to Inform.

Data processed: the full name, email address and message you enter; the phone number you optionally give on the Contact page form; the address of the page you send the form from. To prevent abuse and spam, your IP address is used briefly for a rate-limit check only and is not stored. Please do not include personal data your request does not need, in particular special categories of personal data.

Purpose and legal basis: your data is processed only to assess your request, reply to you and handle the related correspondence, based on KVKK Art. 5(2)(c) (directly related to establishing a contract) and Art. 5(2)(f) (legitimate interest of the controller, provided your fundamental rights and freedoms are not harmed). It is not used for marketing, profiling or advertising and is never sold to third parties.

Collection method: the data is collected electronically through this web form and forwarded by email to MAP's corporate mailbox.

Transfers: limited to the purpose above, your data may be transferred to the providers of the website's hosting and email services and, where a legal obligation arises, to competent public authorities.

Retention: the data is kept for as long as the correspondence about your request requires and for the periods set by applicable law, and is then deleted, destroyed or anonymised.

Your rights: under KVKK Art. 11 you may learn whether your personal data is processed and request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties in Türkiye or abroad to which it is transferred, request correction if it is incomplete or inaccurate, request deletion or destruction where the conditions are met and notification of these actions to recipients, object to an outcome against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing.

How to apply: in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request in writing to the address above, by registered electronic mail (KEP) to mapelektronik@hs01.kep.tr, with a secure electronic or mobile signature, or from an email address you have previously given MAP and that is registered in MAP's system to info@map.com.tr. Requests are concluded free of charge within thirty days at the latest; if the action involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.