Information Security and Data Protection Policy
We protect the information that our clients, employees and customers entrust to us.
Purpose
For our clients, the design and infrastructure information of a data center or an industrial facility is as valuable as the work itself; the personal data of our home buyers and employees is protected by law. This policy sets out the principles Çelik İnşaat follows to protect this information.
Scope
Project and client information (design, specifications, security and infrastructure information), commercial and financial information, and the personal data of employees, applicants, customers, home buyers and suppliers; the systems, devices and documents in which this information is held; our offices and sites; suppliers that process data on our behalf.
Our principles
- 01
Confidentiality, integrity and availability
We protect information against unauthorized access, alteration and loss in line with its sensitivity. Only those who need information for their work have access to it.
- 02
Protecting client information
We use our clients’ project information within the framework of our contractual and confidentiality commitments. We do not share security and infrastructure information about facilities, site photographs or technical documents without the client’s permission; in project presentations, we use only information agreed with the client.
- 03
Protection of personal data
We process personal data in accordance with Law No. 6698 on the Protection of Personal Data: lawfully and fairly, for specified and legitimate purposes, limited to and proportionate with those purposes. We retain it only as long as necessary, and erase, destroy or anonymize data whose retention period has expired in line with legislation. We inform data subjects and respond to their requests within the statutory period.
- 04
Access and device security
Systems are accessed through authentication; access rights are granted according to role and updated when roles change. Company devices and mobile devices used on site are subject to security rules.
- 05
Technical and administrative measures
We take the technical and administrative measures necessary for the security of our information and systems; in the event of a security incident, we respond quickly and make the notifications required by legislation on time.
- 06
Suppliers and data transfers
We agree written confidentiality and data protection provisions with suppliers that process data on our behalf. We transfer personal data abroad only with the safeguards provided for in legislation.
- 07
Awareness
We inform our employees about information security and personal data rules; every employee reports any suspicious situation immediately.
- 08
Continuous improvement
We review and update our information security measures in line with changing risks and technology.
Responsibilities
Company management establishes the information security and personal data protection framework, provides resources and ensures that data subject requests are answered on time. Every employee is responsible for protecting the information they access.
Implementation and review
This policy is applied in our business processes, our information systems and our contracts with business partners. The Privacy Notice on the processing of personal data, the Cookie Policy and the Data Subject Application Form are in the Legal section.
Document no Çİ-POL-07 · Revision 00 · Approval: Executive Committee · Effective: October 19, 2026 · Next review: October 2027
Questions about our policies?
Send your questions to info@celikinsaat.com.tr or reach us through our contact page.