As Akasya Çocuk Dünyası AŞ., within the scope of our information security policy, we undertake to:

• Comply with all customer requirements and legal obligations,
• Be aware of and manage the risks related to the confidentiality, availability, and integrity of all information assets belonging to our company, customers, suppliers, and business partners,
• Ensure full company-wide participation in the concept of information security and create high awareness of information security through continuous training and consultancy,
• Address information security systematically and make it a continuously improving and developing structure that does not allow new risks to arise,
• Fulfill the national, international, and sectoral regulations to which it is subject, comply with legal and relevant legislative requirements, meet its obligations arising from agreements, and ensure information security requirements arising from its corporate responsibilities toward internal and external stakeholders,
• Determine the necessary information security duties and responsibilities, provide the required resources, and make the relevant appointments,
• Take exceptional and out-of-scope activities into consideration in the operation of the ISMS,
• Fulfill all responsibilities regarding the collection, processing, protection, and destruction of personal information belonging to employees, customers, visitors, suppliers, business partners, and other relevant third parties within the scope of the Personal Data Protection Law No. 6698 (KVKK) and other relevant legislation,

We hereby undertake.