Projesoft Teknoloji Privacy and Data Handling Policy

Purpose: This policy is dedicated to managing data acquired through the Amazon Services API in compliance with Amazon's Acceptable Use Policy and applicable legal and regulatory requirements, particularly focusing on data privacy and security.

1. Data Collection and Utilization

• Data collected via Amazon Services API is used solely for activities authorized by Amazon and the consented users, ensuring purpose-specific data handling.
• Transparency is maintained with users regarding data types and purposes. This includes customer data, transaction details, and usage statistics.

2. Data Security and Access Control

• Access to sensitive data, particularly PII, is limited to individuals with defined roles requiring such access, preventing unauthorized viewing or manipulation.
• All personnel are required to use strong, unique credentials, with regular mandatory password changes and two-factor authentication where possible.

3. Compliance and Quality Assurance

• Compliance with global data privacy regulations, including GDPR, is strictly enforced. Regular legal compliance checks are performed.
• Quality assurance processes ensure that applications meet performance standards and respect intellectual property rights.

4. Monitoring and Incident Management

• A comprehensive DLP system is in place for real-time monitoring of data movement, with immediate alerts for unauthorized access attempts.
• Incident response protocols are established for swift action in case of data breaches, including stakeholder notification and remedial measures.

5. Asset Management

• Asset inventory, updated quarterly, includes detailed records of devices and software that can access PII, ensuring traceability and accountability.
• Strict guidelines are enforced for storing PII on removable media, including mandatory encryption with AES-128/RSA-2048 or higher standards.

6. Data Usage Restrictions

• PII is processed strictly for authorized purposes, such as order fulfillment or compliance with legal requirements, under clear user consent.
• Any non-permitted use of Amazon customer data, including marketing or unauthorized data aggregation, is strictly forbidden.

7. Data Disposal and Integrity

• Protocols for secure disposal of documents containing PII prevent unauthorized access and data leakage.
• Regular audits and data validation ensure the integrity of the information, particularly for data-driven decision-making processes.

8. Review and Compliance Auditing

• Periodic internal and external audits assess compliance with this policy, Amazon's AUP, and relevant data protection laws.
• Policy updates are conducted in response to evolving regulatory, technological, and Amazon-specific requirements.

9. Employee Training and Awareness

• Employees undergo regular training on data handling, privacy practices, and security protocols, reinforcing a culture of data protection.
• Continuous awareness programs ensure that employees remain informed about the latest data security and privacy best practices.

10. Continuous Improvement

• This policy is subject to ongoing evaluation and improvement, adapting to new challenges in data security and privacy.
• Feedback mechanisms are in place for employees and stakeholders to contribute to policy enhancements.