Documents

Information Security Policy and Implementation Procedure

The theme of the Information Security, Personal Data Management and Quality Management Systems covers all digital healthcare services provided within One Dose Sağlık Teknolojileri A.Ş., together with the software development, training, consultancy, sales and after-sales support, private integrator services and personal data processing activities required to provide those services.

Accordingly, the purpose of our ISMS, PDMS and QMS policy is:

To protect the information assets of One Dose Health Technologies against every threat that may arise from inside or outside, whether intentional or not; to keep information available as required by business processes; to meet legal requirements; and to work toward continual improvement
To maintain the three fundamentals of an effective Information Security Management System (ISMS) in every activity
Confidentiality: preventing unauthorized access to information that matters
Integrity: demonstrating that information is accurate and complete
Availability: demonstrating that authorized persons can reach information when they need it
To address the security of all data, not only data held electronically, but also data held in written, printed, verbal and similar forms
To raise awareness by giving Information Security Management training to all personnel
To report every actual or suspected information-security weakness to the ISMS team and to have the team investigate it
To prepare, maintain and test business continuity plans
To identify current risks through periodic information-security assessments, then review and follow the resulting action plans
To prevent disputes and conflicts of interest that may arise from contracts
To meet business requirements for access to information and for information systems
To follow developments in healthcare and to produce competitive products without compromising quality, together with innovative thinking and R&D
To bring to market affordable products of high quality that keep customer satisfaction at the highest level
To assure that the products we place on the market fully meet every national and international requirement
To work in line with national and international requirements
To apply the quality system effectively at every stage of R&D and production, and to train every employee so that quality awareness rises
To provide the resources required for the effective application and continual improvement of our risk-based quality system
To protect personally identifiable information (GDPR-PII)
To work in compliance with the KVKK and the GDPR
To treat personal-data privacy with the highest level of care

This is adopted as our ISMS, PDMS and QMS policy.

General Manager