UCGE DRS WAREHOUSE SHELF SYSTEMS PAZ. SINGING. VE TİC. Inc.
Personal Data Protection and Processing Policy
Entrance
Pursuant to Article 20 of the Constitution of the Republic of Turkey, everyone has the right to demand the protection of their personal data. This right includes being informed about the personal data about the person, accessing these data, requesting their correction or deletion and learning whether they are used for their purposes.
Law No. 6698 on the Protection of Personal Data (“KVKK”), the protection of fundamental rights and freedoms of individuals in the processing of personal data, the obligations of natural and legal persons who process personal data, and the procedures and principles to be followed. The purpose of this Policy, prepared in this direction, is to ensure compliance with the obligations of the KVK Law regulations.
governed by policy; Visitor, Product or Service Purchaser, Supplier Official, Supplier Employee, Intern, Potential Product or Service Purchaser, Shareholder/Partner, Employee, Employee Candidate, Customer Employee, Customer Representative, Consultant, Subcontractor Employee, Trainee Candidate, Drawer-Ciranta, Consultant personal data of individual groups.
In case of conflict between the KVKK and other relevant legislation and the Company's Personal Data Protection and Processing Policy, the applicable legislation will apply.
Aim
ÜÇGE DRS DEPO RAF SİSTEMLERİ PAZ. SINGING. VE TİC. Inc. ("Company") Personal Data Protection and Processing Policy ("Policy") has been prepared .
With the policy, it is aimed to continue and develop the activities carried out by the Company in accordance with the principles contained in the KVKK and to inform the personal data owners.
Scope
Data owners whose personal data are processed within the scope of this Policy are categorized as follows:
Employee Candidate | Natural persons who make their CV and related information accessible to the Company by applying for a job or by any other means. |
Worker | Persons who have an ongoing business relationship with the company |
Former Employee | Former employees whose employment relationship with the company has ended |
visitors | Real persons who have entered the physical facilities of the Company for various purposes or visited the websites |
Trainee Candidate | Natural persons who make their CV and related information accessible to the Company by applying for internships with the Company or by any other means. |
Intern | Persons who have an internship relationship with the company |
Product or Service Recipient | The person who purchases products / services from the Company and whose personal data are provided for this purpose |
Supplier Representative | Real person person businesses or persons who are authorized signatories of legal entities to which the Company supplies products/services |
Supplier Employee | Persons working in the suppliers of the Company from which it supplies products/services |
Potential Product or Service Buyer | Company's potential customers, prospective customers |
Shareholder/Partner | Company shareholders |
Customer Representative | Natural person companies or persons who are authorized signatories of legal entities to which the Company sells products/services |
Customer Employee | Persons working in the customers that the Company sells products/services to |
Advisor | Persons served by the company's R&D department (academics, etc.) |
Subcontractor Employee | Persons working in companies that are subcontractors of the Company |
Kesideci-Ciranta | Real persons whose check information is processed in the Company's finance-accounting processes |
Third Parties | Although not defined in the Policy, the guarantor, family members, etc., whose personal data are processed within the framework of this Policy. other natural persons, including but not limited to |
The definitions used in this Policy are as follows:
express consent | Consent on a particular subject, based on information and expressed with free will |
Anonymization | Making personal data incapable of being associated with an identified or identifiable natural person under any circumstances, even by matching with other data. |
Personal health data | Any health information relating to an identified or identifiable natural person |
Personal data | Any information relating to an identified or identifiable natural person |
Processing of personal data | Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or using personal data completely or partially by automatic or non-automatic means provided that it is a part of any data recording system. All kinds of operations performed on data, such as blocking |
KVKK | Law No. 6698 on the Protection of Personal Data |
Board | Personal Data Protection Board |
Organisation | Personal Data Protection Authority |
Special categories of personal data | Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data |
TCK | Turkish Penal Code No. 5237 |
data processor | The natural or legal person who processes personal data on behalf of the data controller based on the authority given by him. |
Personal data owner | The natural person whose personal data is processed and who is deemed to be the “relevant person” in the KVK Law |
Data Owner Application Form | The application form to be used by the personal data owners whose personal data are processed within the company when using their applications regarding their rights described in Article 11 of the KVK Law. |
data controller | The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system |
Data Controllers Registry (VERBIS) | Registry of data controllers kept by the Personal Data Protection Board |
Data Inventory | The personal data processing activities carried out by the Company depending on the business processes, personal data, personal data processing purposes, the recipient group to which the personal data is transferred, the retention periods, the transfers to foreign countries and the security measures taken for the security of personal data are created by associating with the relevant personal data owner group. and detailed personal data processing inventory |