1.INTRODUCTION
This clarification text, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”), ÖZGÜVEN ENGINEERING TURZ. TAAH. SAN. VE TİC. LTD.ŞTİ. (“DATA RESPONSIBLE”) legal entity, the relevant directorates and units and service centers have been prepared for the purpose of enlightening the relevant persons regarding the processing of personal data collected.
DATA RESPONSIBLE shows maximum sensitivity and effort to the processing, protection and security of personal data.
Personal data may be collected by the DATA RESPONSIBLE through all kinds of audio, written, visual or electronic methods.
Within this scope and in accordance with the Law, the personal data of the persons concerned may be processed by the DATA RESPONSIBLE in the capacity of Data Controller for the business and transactions to be carried out in accordance with the general principles listed in the Law.
2. PURPOSE OF PROCESSING PERSONAL DATA
Personal data are processed within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law and the purposes specified in the Law and for the purposes specified below, including but not limited to. Accordingly, the purpose of processing personal data;
To carry out the works and transactions that the DATA CUSTODIAN is obliged to carry out within the framework of the relevant legislation and to perform its service within the framework of its duties and responsibilities,
Carrying out the necessary work to ensure maximum benefit from the services provided by the DATA CUSTODIAN,
Ensuring the legal obligations and service security of the DATA CUSTODIAN and stakeholders,
Maintaining the services and strategies of the DATA CUSTODIAN,
To fulfill its responsibilities in accordance with the laws and relevant legislation that impose rights, duties, works and transactions on the DATA CUSTODIAN,
Managing the human resources and employment policies of the DATA CUSTODIAN
Increasing the quality of service and management and conducting studies in this context
The DATA RESPONSIBLE endeavors to take the necessary legal, technical and administrative measures at the highest level in accordance with the principles specified in the law in order to prevent unlawful processing of personal data and unlawful access to data and to keep personal data securely.
3. SHARING AND TRANSFER OF PERSONAL DATA
Personal data collected from employees, employee candidates, interns, trainees, news subjects, potential product or service buyers, product or service buyers, supplier employees, supplier officials, parents/guardians/representatives, visitors and other citizens may be shared with the DATA RESPONSIBLE's suppliers, service providers, data processors and legally authorized institutions and organizations within the framework of the conditions specified in Articles 8 and 9 of the Law, within the framework of the relevant legislation, in line with the personal data processing conditions and purposes.
DATA RESPONSIBLE takes care to take the necessary administrative and technical measures and all security measures in case of sharing personal data. In addition, DATA RESPONSIBLE carries out studies on ISO 27001 Information Security Management System and other information and data security. DATA RESPONSIBLE complies with the obligation of care and diligence in the transfer and sharing of your data and values your data and its security.
4. PERSONAL DATA COLLECTION METHOD AND LEGAL GROUNDS
The DATA RESPONSIBLE collects personal data in all kinds of audio, written, visual and electronic media and within the framework of the purposes specified in this clarification text, based on many legal reasons such as the provision of the services provided by the DATA RESPONSIBLE in accordance with the laws and the relevant legislation and the full fulfillment of the obligations of the DATA RESPONSIBLE arising from the contract and the law, the execution of business activities, and processes them in accordance with the conditions specified in the Law. The legal grounds are as follows;
Explicit consent of the person concerned,
Explicitly stipulated in the law,
It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,
It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
It is mandatory for the data controller to fulfill its legal obligation,
It has been made public by the person concerned,
Data processing is mandatory for the establishment, exercise or protection of a right,
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
5. RIGHTS OF PERSONAL DATA SUBJECTS AND PROTECTION OF RIGHTS
Pursuant to Article 11 of the Law;
Learn whether personal data is being processed,
Request information if their personal data has been processed,
To learn the purpose of processing personal data and whether they are used for their intended purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing,
To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
Request notification of the transactions made pursuant to Articles 5 and 6 to third parties to whom personal data are transferred,
To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
In case of damage due to unlawful processing of personal data, to demand compensation for the damage,
rights.
In the event that personal data owners apply to the DATA RESPONSIBLE in writing or by other methods to be determined by the Personal Data Protection Board for the exercise of such rights, the applications shall be finalized as soon as possible depending on the nature of the request, but in any case within 30 days at the latest. The address and contact information for application to the DATA RESPONSIBLE is stated below.
6.CONTACT
Detailed information on the issues covered by this clarification text can be found in ÖZGÜVEN MÜHENDİSLİK TURZ. TAAH. SAN. VE TİC. LTD.ŞTİ. can be accessed from the Personal Data Protection and Processing Policy.
In order to exercise your rights arising from the Law, you can submit your identity information, the right you want to exercise and a detailed explanation of the subject of your request by filling out the form at the link below and signing it Ataşehir Mah. Anadolu Cad. Özgüven Plaza No:839 35620 Çiğli / İZMİR using one of the methods specified in the application form. You can reach detailed information via the application form and +90 232 520 30 00 contact line.