tr
Didoray

Personal Data Protection

Personal Data Protection Law

The Personal Data Protection Law No. 6698 ("KVKK"), published in the Official Gazette No. 29677 on April 7, 2016, aims to protect individuals' fundamental rights and freedoms, particularly the privacy of private life, in the processing of personal data. In accordance with Article 10 of the KVKK titled "Obligation to Inform by the Data Controller" and the Regulation on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, published in the Official Gazette No. 30356 on March 10, 2018, this Clarification Text aims to inform you about your personal data processed by our company, Güreller.

1. Identity of the Data Controller

Güreller holds the title of "Data Controller" under the KVKK and related regulations. You can reach us through the contact information provided below:

Address: Prof. Dr. Ahmet Taner Kışlalı Mah., Alacaatlı Cad., 2873 Sok., No: 3A/1-2, Çayyolu/Ankara
Email: gureller@gureller.com.tr

2. Processed Personal Data

Within the scope of your relationship with Güreller, the following personal data is processed:

  • Identity Data: Name, surname, Turkish ID number, date of birth, place of birth, marital status, nationality, copy of ID card/driver’s license, mother and father’s name, names and surnames of dependents.

  • Contact Data: Email address, phone number, and address.

  • Professional Experience: Graduated university, operator/MYK certificates, diploma information.

  • Special Categories of Personal Data: Criminal record, health report.

  • Financial Data: Bank account information.

  • Physical Space Security: Security camera recordings.

  • Visual and Audio Data: Photographs of individuals.

  • Other: Signature.

3. Purposes of Processing Personal Data

Your personal data obtained within the scope of your relationship with Güreller is processed for the following purposes:

  • Conducting Candidate Application Processes

  • Conducting Employee Satisfaction Training Activities

  • Fulfilling Employment Contract and Legal Obligations for Employees

  • Managing Employee Benefits and Privileges

  • Conducting Financial and Accounting Operations

  • Ensuring Physical Space Security

  • Conducting Business Activities

  • Managing Human Resources Processes

  • Managing Procurement Processes

  • Managing Customer Relations

  • Managing Purchasing Processes

  • Conducting Management Activities

4. Transfer of Processed Personal Data

Your personal data may be transferred, in accordance with the provisions of the Law regarding the transfer of personal data and transfer abroad, to the following parties for the purposes stated in Article 3 of this Clarification Text:

  • Official institutions and organizations, courts, and enforcement offices within the country,

  • Third-party real and legal persons we are associated with,

  • Service provider companies and their authorized representatives,

  • Business partners, banks, our company shareholders, group companies, and affiliates,

  • Suppliers and support service providers.

5. Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected, stored, and processed during the establishment of your legal relationship with Güreller and throughout the continuation of this relationship, from you, third parties, and legal authorities, through the following methods:

  • Internet, phone, email,

  • Physical, written, verbal, and electronic channels,

  • Based on the legal grounds specified in Articles 5, 6, and 8 of the Law, including the following:

    • Your explicit consent,

    • Explicitly stipulated in the legislation to which our company is subject, including the Labor Law, Occupational Health and Safety Law, Social Insurance and General Health Insurance Law, Turkish Code of Obligations, Tax Procedure Law, Turkish Commercial Code, Identity Notification Law, Income Tax Law, Corporate Tax Law, Check Law, and Individual Pension Savings and Investment System Law,

    • Compliance with national and international principles and rules regarding customer identification, fulfilling information storage, reporting, and notification obligations required by legislation and official authorities,

    • Necessity for the establishment or performance of a contract,

    • Necessity for fulfilling legal obligations,

    • Publicization of data by the data subject,

    • Necessity for the establishment, exercise, or protection of a right,

    • Necessity for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Special categories of personal data are collected, stored, and processed based on the following legal grounds:

  • Your explicit consent,

  • For non-health-related data, in cases stipulated by laws without explicit consent,

  • For health-related data, only for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment, and care services, planning and managing health services and financing, by persons under confidentiality obligations or authorized institutions and organizations without explicit consent.

6. Rights of the Data Subject

In accordance with Article 11 of the Law, you have the following rights regarding your personal data:

  • Learn whether your personal data is processed,

  • Request information if your personal data has been processed,

  • Learn the purpose of processing and whether it is used in accordance with its purpose,

  • Know the third parties to whom your personal data is transferred, domestically or abroad,

  • Request correction of incomplete or inaccurate data,

  • Request deletion or destruction of your personal data,

  • Request notification of corrections, deletions, or destructions to third parties to whom your data has been transferred,

  • Object to the emergence of a result against you by analyzing your data exclusively through automated systems,

  • Request compensation for damages incurred due to unlawful processing of your personal data.