Common use of Prevention and Management of Information Flow Clause in Contracts

Prevention and Management of Information Flow. For the purpose of prevention or management of information flow inside the Institution or among members of the group of companies, transactions are executed only by the personnel authorized in connection therewith. In addition to general security concepts with regard to information security, “Information Security Regulation” and “Codes of Practice on Information Security” have been issued for the sake of confidentiality, integrity and accessibility of information. Our Institution does not disclose to any third party, other than the legally authorized persons and entities, any kind of identity information of its customers and any kinds of information coming to its knowledge during the performance of its activities, and does not use such information in its own interests or in interests of a third party. For the sake of prevention of probable events which may be to the detriment of interests of our customers in the course of performance of all other services and activities and ancillary services included within the scope of authorization of our Institution, information about the customers is kept in a separate system in the Portfolio Custody Branch. Any person, other than the personnel of the Portfolio Custody Branch, does not have access to the information about the customers of custody services. In addition, only a limited number of authorized officers is given the right to have access to such information for monitoring purposes and for audit, reporting and data processing purposes. Authorization relating to other custody services is granted within the frame of authorization determined according to jobs and titles of our employees. All kinds of physical and systematic precautions and actions have been taken for the sake of security of customer data and information obtained during the custody services against other service units.