I. COMMITMENT TO DATA PRIVACY
- This Policy on the Protection and Processing of Personal Data is “Policy”, Gersan Elektrik Tic. And San. A.Sh. “Gersan”personal data protection Act No. 6698 and provisions of other legislation and accompanying regulations and communiqués and safe storage of personal data in accordance with the obligations of the company to ensure that it is treated in accordance with the law in the eyes and sets out the basic principles for the protection of personal data.
- Gersan undertakes to act in accordance with this Policy and complementary transactions and decisions in terms of all Personal Data held by the company.
II. THE PURPOSE OF THE POLICY
The purpose of this policy is to determine the methods and principles to be followed in order to carry out data processing and protection activities of Gersan in accordance with the Law on the Protection of Personal Data (“KVKK” for short) published in the Official Gazette dated April 7, 2016 and numbered 29677. In this context, as a limited number of Gersan with our employees, our customers, our visitors, our shareholders, our business partners and third parties processing personal data of officials and employees of subcontractors and provide transparency and protection of our activities.
III. SCOPE OF THE POLICY
The scope of our policy is as follows: our customers, potential customers, our employee candidates, Company shareholders, company officials, visitors, business partners and employees of our subcontractors or third parties any personal data of officials and Automatic Data Recording System, and to be part of the record with non-personal data that is processed in automated ways, all related.
IV. DEFINITIONS, DATA CATEGORIZATION and DATA GROUPS
The definitions set out in this Policy contain the following meanings;
PERSONAL DATA PROTECTION LAW (KVKK)
The Law on the Protection of Personal Data dated April 7, 2016 and published in the Official Gazette No. 29677
OTHER LEGISLATION COMPLEMENTING KVKK
Lighting data regarding the procedures and principles to be followed in carrying out the obligation of the principal applicant on the procedures and principles communiqué regarding the principles and procedures to be followed in carrying out the obligation of Lighting kvvk as secondary legislation enacted with the aim of detailing some issues in the two components.
DATA OFFICER
It refers to a natural or legal person who processes Personal Data by specifying the purposes and ways of processing, has responsibility for the establishment and management of a data registration system.
MANIPULATES DATA
It refers to a natural or legal person who processes Personal Data on behalf of the Data Controller by obtaining authorization from the Data Controller
REPRESENTATIVE OF THE DATA OFFICER
Refers to the employee selected by the Company and who carries out the Company's relations with the Institution and is appointed by the decision of the board of directors
PERSONAL DATA
It refers to all kinds of information related to a specific or identifiable natural person
PERSONAL DATA OF A SPECIAL NATURE
These are data that, if found out, may cause discrimination or victimization against the person concerned. Not limited to, for example, race or ethnic origin, political opinion, philosophical belief, religion and sect, or other beliefs, costume and clothing, Association or trade union membership, health, sexual life, criminal convictions…
DATA INVENTORY
It refers to the inventory containing basic information for the Company's Personal Data Processing activities.
PERIODIC DESTRUCTION
If all the conditions for processing personal data contained in the Primary and Secondary Legislation are eliminated, the deletion, destruction or anonymization process specified in the personal data retention and destruction policy and performed by you at December intervals is repeated.
EXPLICIT CONSENT
It expresses the consent obtained after the informed consent to the processing of Personal Data of persons and the decision to do so freely.
ANONYMIZATION
It is the rendering of Personal Data that cannot be associated with a specific or identifiable natural person.
DELETE OR BE DELETED
It is the rendering of Personal Data inaccessible and unavailable again for the relevant users in any way.
DESTRUCTION
It is the process of making personal data inaccessible, irrevocable and unusable by no one in any way.
VERBIS
Data Officers Registry Information System
GERSAN executed by the data processing within the scope of activities in a way that partially or completely automatic, or data recording system as part of the non-automatic processed in a manner, determined that belongs to a real person and/or data groups that can be identified with the categories of personal data and descriptions are included below:
Personal Data
It is any kind of information related to a real person whose identity is specific or identifiable. In order to be able to talk about personal data, the data must be related to the real person and this person must also be of a certain or determinable nature. In this context, identity information, tax number, SSI number information, signature information; contact information such as phone number, address, e-mail address, fax number, IP address, family members and close information and camera records, vehicle license plate information, security point records, audio recordings taken during phone calls, etc.b. these are security data.
Personal data of a special nature
Personal data that could cause discrimination or victimization in special qualified learning about the states of nature are: the person's race, ethnic origin, political opinion, philosophical belief, religion and sect, or other beliefs, costume and clothing, Association or trade union membership, health, sexual life, criminal convictions and security measures with biometric data and genetic data. Personal data of a special nature may be processed with the express consent of the relevant person or in the limited cases specified in the Law. Within this framework, such personal data is not processed by GERSAN except in cases where it is allowed to be processed in accordance with the KVKK, or it is processed in accordance with the conditions specified in the legislation with the explicit consent of the person concerned.
PERSONAL DATA CONTACT GROUPS THE DESCRIPTION
GERSAN Shareholders
Real persons who are shareholders of GERSAN
GERSAN Managers
A member of the board of directors of GERSAN and other authorized natural persons
GERSAN Subcontractors
Authorized real persons of subcontractors who assist in ensuring the safety and order of GERSAN, as well as real person employees assigned by these subcontractors
Employees/Interns
Real persons working or doing internships at GERSAN
Employee Candidates
Natural persons who have applied for a job in order to work within GERSAN or who have opened their resume and related information to GERSAN information through databases or companies/intermediaries aimed at finding a job
The Persons, Institutions and Employees with whom GERSAN Conducts Commercial or Administrative Relations, its Shareholders and Officials (Suppliers, Companies that Sell, etc.)
Natural persons, including persons or institutions with which GERSAN has concluded a contract in writing or has established a business relationship in order for commercial operation to continue even if it is not in writing, as well as their shareholders, employees and officials
Visitors
They are real persons who physically visit the GERSAN administrative center and factory or log in to the GERSAN website for any purpose.
V. PRINCIPLES OF PERSONAL DATA PROCESSING
PROCESSING IN ACCORDANCE WITH THE LAW AND THE RULE OF HONESTY
Gersan complies with the law and the rule of honesty in the processing of personal data. In this context, Gersan does not use personal data outside its purpose, determines the legal grounds that will require the processing of personal data, acts in a measured manner and does not use personal data outside the purpose, taking into account the principle of moderation, adhering to legal purposes and legal limits. After the informed consent, no data processing and transfer operations are performed without explicit consent.
ENSURING THAT PERSONAL DATA IS ACCURATE AND UP-TO-DATE WHEN NECESSARY
Our company ensures that the personal data it processes is accurate and up-to-date when necessary. In this direction, it takes the necessary measures.
PROCESSING FOR SPECIFIC, EXPLICIT AND LEGITIMATE PURPOSES
Our Company does not engage in data processing activities without a clear and legitimate purpose and acts within the limits of this clear/legitimate purpose.
BEING LIMITED AND RESTRAINED IN CONNECTION WITH THE PURPOSE FOR WHICH THEY WERE PROCESSED
Our company processes personal data within the limits and to the extent required by the purpose for which it is processed, and data that is not required by the purpose is not processed at all.
MAINTAINING THEM FOR AS LONG AS REQUIRED BY THE RELEVANT LEGISLATION OR FOR THE PURPOSE FOR WHICH THEY WERE PROCESSED
Gersan stores personal data only for the period specified in the relevant legislation or necessary for the purpose for which they are processed. In this context, our company primarily for storing your personal data in accordance with the legislation, which is connected by detecting whether there is a period, in this period, by taking the necessary precautions in keeping the data; if it is not in a period of time that is stored in the legislation, the personal data until the time that is required for the purpose they are processed, and in any case, located in the relevant legislation delete/destroy by observing the time keeping. If the period expires, the reasons requiring the processing of the data disappear, or the data owner has a request in this direction (in accordance with the legislation), the personal data are deleted, destroyed, or anonymized by Gersan.
VI. PROCESSING OF PERSONAL DATA
The principles regarding the processing of Personal Data by Gersan are as follows:
DISCLOSURE AND INFORMING OF THE PERSONAL DATA OWNER
As determined in the KVKK and other complementary legislation, Gersan mainly enlightens personal data owners on the following issues before obtaining personal data.