General Clarification Text
General Clarification Text
As ISC İNSAN KAYNAKLARI DANIŞMANLIK HİZMETLERİ LTD. ŞTİ., in our capacity as the data controller, we prioritize the security of your personal data. Accordingly, all personal data we process, store, and transfer are handled in compliance with Law No. 6698 on the Protection of Personal Data (“KVKK”). Our company places great importance on the processing and protection of personal data belonging to service providers, suppliers and employees, consultants, customers, business partners, visitors, and other third parties in accordance with Law No. 6698.
The purpose of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Disclosure, published in the Official Gazette dated 10.03.2018 and numbered 30356, is defined in Article 1 as follows: “To determine the procedures and principles to be followed within the scope of the obligation of disclosure that must be fulfilled by data controllers or persons authorized by them in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data.”
This disclosure text has been prepared by our company, in its capacity as a data controller, to inform our customers, suppliers of goods and services, supplier employees, contracted consultants with whom our company maintains business relations, business partners, visitors, and other third parties whose personal data are collected, stored, and processed. It has been drafted in accordance with Article 10 of the Law on the Protection of Personal Data, titled "Obligation of the Data Controller to Inform," and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Disclosure.
DATA CONTROLLER INFORMATION
| Company Name | : ISC İNSAN KAYNAKLARI DANIŞMANLIK HİZMETLERİ LTD. ŞTİ |
| Phone Number | : 0 (216) 467 87 27 |
| : info@iscconsulting.com | |
| Address | : Üsküdar İçerenköy Yolu Cd. Bodur İş Merkezi No:8 Kat:8 Daire:31 İçerenköy Ataşehir-İSTANBUL |
| Registered e-mail | : iscinsankaynakları@hs01.kep.tr |
PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data, categorized in accordance with Article 4 of the Personal Data Protection Law, which includes General Principles such as compliance with the law and rules of honesty, accuracy and when necessary, being up to date, processing for specific, explicit, and legitimate purposes, being relevant, limited, and proportionate to the purposes for which they are processed, and being retained for the period stipulated in the relevant legislation or required for the purpose of processing, are processed for the following purposes:
Your identity information, including (Name, surname, date of birth, Republic of Türkiye identity card details, Republic of Türkiye Identity Number, photograph), and your contact information, including (residential address, business address, telephone number, mobile phone number, email address, Registered Email address);
To ensure corporate communication, conduct statistical studies, fulfill tasks and operations based on signed contracts and protocols, manage customer relations, ensure compliance with legal obligations as required or mandated by regulations, establish communication with individuals and legal entities in business relations with the company, carry out legal reporting, manage the execution of goods and services sales processes, carry out promotional activities, manage storage and archiving operations, ensure business continuity activities, plan and execute corporate communication and management activities, manage relationships with business partners and suppliers, create visitor records, ensure physical space security, fulfill obligations arising from legislation, meet other legal obligations towards authorized and responsible public institutions and organizations, resolve the issues and complaints you have communicated to us, and when necessary, manage customer relationship management processes, and conduct activities aimed at customer satisfaction.
Article 5/2-f: Due to the legal basis of "necessary for the legitimate interest of the data controller without harming the fundamental rights and freedoms of the data subject,"
We process your financial information (tax number, tax office, bank account number, bank IBAN number, and invoice), along with your identity and contact information, for the purposes of ensuring accounting records, opening current accounts, managing financial and accounting operations, and communicating with you regarding these matters.
KVKK Article 5/2-a: Due to the legal basis of being required by laws and regulations, and
KVKK Article 5/2-c: Due to the legal basis of the necessity to process personal data of contract parties directly related to the establishment or performance of a contract,
We process your legal transaction information to fulfill our legal obligations towards authorized public institutions and organizations and to use it as evidence in case of disputes that may arise between us.
KVKK Article 5/2-a: Due to the legal basis of being required by laws and regulations, and
KVKK Article 5/2-ç: Due to the legal basis of the necessity for the data controller to fulfill their legal obligation, we process and store the data.
TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES AND ITS PURPOSE
The company complies with the provisions set forth in Article 5 and Article 6 of the Law regarding the processing of Special Categories of Personal Data, as well as the regulations on the transfer of personal data outlined in Articles 8 and 9, and the principles published by the Personal Data Protection Authority. Special categories of data are not transferred without obtaining the explicit consent of the data subject.
Your personal data may be transferred to the authorized public institutions and organizations to fulfill obligations arising from the law and other regulations, to regulatory and supervisory authorities for the purpose of providing information to the relevant persons, institutions, and organizations, to be used as evidence in any legal disputes between us, to any judicial authorities, to your authorized representatives, and lawyers, to third-party consultants, including tax and financial advisors, for the purpose of carrying out business activities/oversight and ensuring compliance with regulations, to professional experts and their assistants with whom we have a contractual relationship, to consultants and advisors, service providers, courier companies, and other public institutions and banks within the scope of legal obligations arising from the activity.
METHOD OF DATA COLLECTION AND LEGAL BASIS
The term “legal basis” in subparagraph (ç) of the first paragraph of Article 10 of the Law refers to which of the processing conditions specified in Articles 5 and 6 of the Law the personal data is processed under, within the scope of the obligation to inform.
Your personal data, including the data you share with us through physical and digital means within the scope of your employment relationship, contract information, financial data you provide, professional documents and information we specifically request from you, publicly available records you have registered and made accessible to third parties, information you sent via email and REGISTERED EMAIL, petitions and applications,
legal notifications, correspondences with our company, and application information submitted to our company under Article 11 of the Personal Data Protection Law (KVKK), are collected and stored within legal periods and as required by the nature of the work. This is done based on the following legal grounds of the Personal Data Protection Law: Article 5/2-c: “It is necessary for the processing of personal data directly related to the establishment or performance of a contract.” Article 5/2-e: “It is necessary for the establishment, exercise, or protection of a right.” Article 5/2-f: “It is necessary for the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.” Special category data is also collected with your explicit consent, and all such data will be stored in accordance with the legal requirements and conditions related to the business.
Our company does not collect data without a valid purpose, a valid legal basis, or explicit consent.
YOUR RIGHTS
The company, in accordance with Article 10 of the Personal Data Protection Law, informs the data subject of their rights and provides guidance on how these rights can be exercised.
In accordance with Article 11 of the Personal Data Protection Law (KVKK), you can apply to the Company to:
Learn whether your personal data is being processed, Request information about the processing of your personal data if it has been processed, Learn the purpose of processing your personal data and whether it is being used in accordance with that purpose, Know the third parties to whom your personal data has been transferred, both domestically and abroad, Request the correction of your personal data if it has been processed incompletely or incorrectly, Request the deletion or destruction of your personal data within the conditions specified in Article 7 of KVKK, provided that the company's legal obligations are reserved, Request that the transactions performed under items (d) and (e) above be notified to the third parties to whom your personal data has been transferred, Object to the outcome if your personal data is analyzed solely through automated systems and results in an adverse decision, Request compensation for any damages if you suffer harm due to the unlawful processing of your personal data.
You can submit your written application, signed with a wet signature, in person to our address at Üsküdar İçerenköy Yolu Cd. Bodur İş Merkezi No:8 Kat:8 Daire:31 İçerenköy Ataşehir-ISTANBUL. Alternatively, you can send it via notary, or you can send it to iscinsankaynakları@hs01.kep.tr (REGISTERED EMAIL) or info@iscconsulting.com via secure electronic signature, mobile signature, or through the email address previously provided by you and registered in our system.
Your requests in the application will be concluded free of charge within a maximum of thirty (30) days, depending on the nature of the request. However, if the process incurs an additional cost for the company, a fee may be charged according to the tariff specified in the Notification on Procedures and Principles for Application to the Data Controller by the Personal Data Protection Board.
