Illumination Text

Illumination Text

PROTECTION OF PERSONAL DATA IN ACCORDANCE WITH LAW NO 6698

ABOUT GENERAL LIGHTING STATEMENT

As HSC Arıtım Sanayi ve Ticaret Anonim Şirketi (HSC Arıtım), we attach importance to the personal data of our customers, potential customers, product and service suppliers, employees, relatives of our employees, employee candidates, visitors, interns, authorized and employees of our dealers, shareholders and other third parties. As the Data Controller, we process the personal data in our responsibility, within the limits set by the Law on the Protection of Personal Data No. 6698, in accordance with the law and the rules of honesty.

Your Processed Personal and Private Personal Data

Your personal and private data of the following types are processed by HSC Arıtım.

Personal Data

Identity: Name-Surname, identity number, parent's name, first surname, place and date of birth, nationality, marital status, other identification information in the identity card, driver's license and passport, tax identification number, SGK registration number, signature, etc. ID information.

Contact: Home and mobile phone number, home and office address, foreign residence address, e-mail address, fax number.

Location: Location and route information, accommodation and transportation information.

Personnel: Background information, military service information, discipline and performance information, leave information, manager evaluations, internship information, social security information, detection reports, information in the payroll, minimum living allowance information, work accident and occupational disease information, for the purpose of ensuring business continuity. tracked information etc. personal information.

Legal Action: Personal legal information in the case files filed against or in the case files filed by our Company and in the correspondence with the judicial authorities, personal legal information in the execution files, circular of signature, personal legal information in the power of attorney.

Customer Transaction and Marketing: Billing information, check and promissory note information, current account transaction information, order information, shopping history information, cookie records, membership information, customer comments, request and complaint information, etc. customer transaction information.

Physical Space Security: Data recorded by indoor and outdoor security cameras and information obtained from visitors within the scope of physical space security.

Transaction Security: Access logs, user name, password and password information, corporate e-mail information, website membership user name and password information, membership and dealership panel login, exit and transaction information, internet protocol addresses (IP), website traffic information.

Risk Management: Personal risk data obtained in order to manage commercial risks, risk and danger notifications made within the scope of occupational health and safety.

Finance: Bank account information, credit card information, IBAN numbers, debt and credit information, assets information.

Professional Experience: Work experiences, foreign language level, technical abilities, driver's license, previous work place information, trainings, courses, diploma information (graduated school / department), certificate information, etc. professional experience information.

Audio and Visual Recordings: Photo and video recordings, call center audio recordings.

Special Qualified Personal Data

Health Information: Health reports, employment and periodic examination reports, excuse reports, disability information and reports, blood group and vaccination information, work accident and occupational disease information, device and prosthesis information used, diagnosis, diagnosis, treatment information, birth and pregnancy information, fever measurement information, HES code information.

            Criminal Conviction and Security Measures: Criminal record information.

           Biometric Data: Biometric data of our employees.

            Purposes of Processing Personal and Private Personal Data

            HSC Arıtım processes the personal data under its responsibility, as outlined above, for the following purposes:

• Execution of Emergency Management Processes
• Execution of Information Security Processes
• Execution of Selection and Placement Processes of Employee Candidates
• Execution of Application Processes of Employee Candidates
• Fulfillment of Employment and Legislation Obligations for Employees
• Execution of Benefits and Benefits Processes for Employees
• Conducting Audit / Ethical Activities
• Conducting Educational Activities
• Execution of Access Authorizations
• Execution of Activities in Compliance with the Legislation
• Execution of Finance and Accounting Affairs
• Providing Physical Space Security
• Execution of Assignment Processes
• Follow-up and Execution of Legal Affairs
• Carrying out Internal Audit and Investigation Activities
• Execution of Communication Activities
• Planning of Human Resources Processes
• Execution / Supervision of Business Activities
• Execution of Occupational Health / Safety Activities
• Receiving and Evaluating Suggestions for Improvement of Business Processes
• Conducting Business Continuity Ensuring Activities
• Execution of Logistics Activities
• Execution of Goods / Services Procurement Processes
• Execution of Goods / Services Sales Processes
• Execution of Goods / Services Production and Operation Processes
• Execution of Customer Relationship Management Processes
• Organization and Event Management
• Conducting Marketing Analysis Studies
• Execution of Performance Evaluation Processes
• Execution of Risk Management Processes
• Execution of Contract Processes
• Execution of Storage and Archive Activities
• Follow-up of Requests and Complaints
• Ensuring the Security of Movable Property and Resources
• Execution of Supply Chain Management Processes
• Execution of Wage Policy
• Execution of Marketing Processes of Products and Services
• Ensuring the Security of Data Controller Operations
• Providing Information to Authorized Persons, Institutions and Organizations
• Execution of Management Activities
• Creating and Tracking Visitor Records

            The Method of Collection of Personal and Private Personal Data and Legal Basis for Our Processing of Your Data

HSC Arıtım provides that your personal and private data is clearly stipulated in the laws in Article 5 of the Law No. 6698, the establishment or performance of the contract, the fulfillment of the legal responsibility of the data controller, the establishment, use or protection of a right, the personal data being mandatory for the data subject. It operates in the presence of at least one of the legitimate interests of the data controller and explicit consent conditions, provided that it is made public by itself, does not harm the fundamental rights and freedoms of the data subjects.

Personal data; job application forms, miscellaneous documents submitted to the Company, information and documents created before the Company in human resources, accounting and business processes, invoices, waybills, price offer forms, mail and e-mails sent to the Company, Company websites, Company's Third parties such as the persons and companies to which the company provides services or receives services, business partners, companies to which the service/product is supplied, corporate communication accounts, security cameras, eye recognition system and GPS, vehicle recognition, automatic passage systems, etc. in the Company vehicles. collected through systems.

           Sharing Your Personal Data with Third Parties in the Country

            HSC Arıtım may share the data obtained as a data controller for the following purposes within the scope of the legal grounds listed in Article 8 of the Law No. 6698:

• Execution of Emergency Management Processes
• Execution of Information Security Processes
• Fulfillment of Employment and Legislation Obligations for Employees
• Execution of Benefits and Benefits Processes for Employees
• Conducting Educational Activities
• Execution of Activities in Compliance with the Legislation
• Execution of Finance and Accounting Affairs
• Follow-up and Execution of Legal Affairs
• Execution of Communication Activities
• Execution / Supervision of Business Activities
• Execution of Occupational Health / Safety Activities
• Execution of Logistics Activities
• Execution of Goods / Services Procurement Processes
• Execution of Goods / Services Sales Processes
• Execution of Goods / Services Production and Operation Processes
• Organization and Event Management
• Execution of Customer Relationship Management Processes
• Execution of Risk Management Processes
• Execution of Contract Processes
• Execution of Supply Chain Management Processes
• Execution of Marketing Processes of Products and Services
• Ensuring the Security of Data Controller Operations
• Providing Information to Authorized Persons, Institutions and Organizations
• Execution of Management Activities

            Limited to the data necessary for the realization of the above-mentioned purposes; shareholders, authorized public institutions and organizations, real or legal persons (institutions with which the Company cooperates in order to fulfill its contractual or legal obligations: insurance companies, law offices, financial and legal advisors, banks and the Company's occupational health and safety, audit, Personal data may be transferred to the persons and organizations from whom the Company receives services on security, travel, accommodation, organization, advertising, archiving, etc., and other persons and organizations with which the Company has business relations.

            Sharing Your Personal Data with Third Parties Located Abroad

            HSC Arıtım does not share any personal data with third parties abroad.

            Your Rights Regarding Your Personal Data

            Persons with personal data before HSC Arıtım have all the rights specified in Article 11 of the Personal Data Protection Law. Within the framework of Article 11 of the Law, the person concerned can apply to HSC Arıtim about himself/herself;

• To learn whether their personal data is processed, to request information about it if their personal data has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data,
• Requesting notification of the third parties to whom the personal data has been transferred, regarding the rectification, deletion or destruction of personal data,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• In the event that personal data is damaged due to unlawful processing, it has the right to demand the compensation of the damage.

            Your Requests Regarding Your Personal Data

You can submit your requests within the scope of your rights listed in Article 11 of the Law No. 6698, using one of the following methods in accordance with Article 13 of the Law and Article 5 of the Communiqué on Application Procedures and Principles to the Data Controller. Your request will be answered free of charge within 30 days in accordance with Article 13 of Law No. 6698. However, if the transaction requires a separate cost, no fee other than the fee specified in the aforementioned Communiqué will be charged.

You can make your applications by completing the HSC Arıtım KVKK Related Person Application Form and submitting the form by hand, through a notary public, with your KEP address, or by e-mail previously notified to our company by you and registered in our system.

The applicant shall apply together with the documents and documents that will prove his identity. In your applications, it is obligatory to write the name, surname and signature if the application is written, the TCKN, the place of residence or workplace for the notification, the e-mail address for the notification, if any, the telephone, the fax number, if any, and the subject of the request. If these documents cannot be confirmed, no positive response will be given.