+90 (555) 580 28 40
info@nicoletta.com.tr

General Data Protection Regulation (GDPR)
Obligation of Data Controller to Inform

In the Statement Text, your personal data is provided by YAKUT TEKSTİL KONFEK OTO. LEATHER AND FOOD IND. SUN. TRADE. LTD. STI. (“Company”) , contains information regarding the processing of Personal Data. With this lighting text; It is aimed to inform you about the collection method of your personal data, the purposes of processing, legal reasons, to whom and for what purposes your processed personal data can be transferred and your rights.

Within the scope of the KVKK, personal data means any information about an identified or identifiable natural person (“Personal Data”), and special quality personal data, which is a special type of this, is based on race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs. means data on clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data (“Special Quality Personal Data”). In the capacity of Data Controller, within our business relationship with you, your Personal Data; It will be recorded, stored, preserved, rearranged when necessary, shared with the institutions that are legally authorized to request this Personal Data, and can be processed in other ways listed under the KVK Law, within the framework of the purpose that requires their processing and in connection with this purpose, in a limited and measured way, as you have informed our Company. we’ll let you know.

KVK Law                                   : Law No. 6698 on the Protection of Personal Data,

KVK Board                                : Personal Data Protection Board,

Data Owner: The real person whose personal data is processed,

Processing of personal data       : Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, of personal data fully or partially automatically or non-automatically provided that it is a part of any data recording system, All kinds of operations performed on data such as classification or prevention of use.

Your personal data, which is provided by physical or digital channels from the following groups of people who have a business relationship with our company, as “Data Controller” by our Company,

  • In accordance with the law and honesty rules,
  • By maintaining the accuracy and the most up-to-date version of the personal data you share,
  • For specific, explicit and lawful purposes,
  • In a way that is related, limited and proportional to the purpose for which they will be processed,
  • We inform you that they can be processed by storing them for the period required for the purpose for which they are processed or stipulated in the relevant legislation, and may be subject to other processes listed in the KVK Law.

In this clarification text, personal data and special quality personal data may be called “Personal Data” together. Your personal data processed in line with the purposes stated in the clarification text are transferred in direct proportion to the purposes stated in this text.

 

 

  1. PERSONAL DATA COLLECTED BY THE COMPANY .

 

  • GROUP OF PERSONS WITH PERSONAL DATA: EMPLOYEE CANDIDATE

Personal Data Collected: Identity Data (such as Name Surname, Nationality, Date of Birth, Marital Status, Place of Birth, Gender, Spouse Name Surname, Relative Name Surname), Communication Data (such as Telephone Number, Address Information, E-Mail, Relative Phone Number), Education Data (such as Graduation Information, English Knowledge), Work Experience Data (such as Work Experience, Experiences), Physical Space Security Data (such as Security Cam Record), Professional Experience Data (Course and Seminar Information, Work Experience, Computer User Information) etc.), Visual and Audio Records (such as Passport Photograph), Health Information (such as Any Health Problem Information), Criminal Conviction and Security Measures (such as Conviction Information), Signature Data (such as Wet Signature on Documents Carrying Personal Data Quality), Other (Driver’s License, Competencies, Salary Expectation, Military Status, Reference Information, Spouse’s Occupation, Spouse Working Information, Children’s School Information, Application Date, Applied Position)

Purpose of Processing Personal Data: Recruitment for recruiting new staff, examining candidates and identifying the new candidate to be employed, information obtained about your resume so that the manager can get to know and select the candidate better, sharing it with the manager, confirming the data with the reference people you include in your resume, verifying how much you fit with the position, and prospective confirmation It is processed and transferred for the purposes of recording your information, recording the information we share with you in the digital or physical environment in case we need it in the short or long term, conducting communication activities, hiring new personnel, examining the candidates and identifying the new candidate to be employed.

Legal Basis for the Processing of Personal Data: Your personal data, in physical or electronic environment, through different channels and based on the legal reasons explained by our Company; It is collected for the purposes listed above within the scope of employment contract, through the job application form you have filled in person, via CV or websites that allow you to apply for a job, via e-mail, from security cameras at your entrance to the physical space. KVK Law m. 5/1 “Personal data cannot be processed without the explicit consent of the person concerned.” and m. 6/2 Based on the legal reason of “explicit consent” regulated in the provisions of “Processing of personal data of special nature without the explicit consent of the person concerned”; Your personal data that you have forwarded to the Company with your explicit consent within the scope of the following express consent statement; It is processed within the scope of the execution of processes related to recruitment processes and other legal obligations, and the implementation of the Company’s human resources policies and procedures. Your personal data According to paragraph 2 of Article 5 of the Law, in the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the data subject: (a) according to clause “explicitly stipulated in the law”, according to clause (c), ” ‘It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract’, According to subparagraph (f), ‘the data subject has been made public by himself’, the provisions of ‘obligatory data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject’ are collected and processed based on legal reasons.

Transfer of Personal Data: Your personal data is not transferred.

  • PERSONAL DATA OWNER GROUP: EMPLOYEE

Personal Data Collected: Identity Data (such as Name Surname, TCKN, Parent Name, Date of Birth, Marital Status, Place of Birth, Gender), Communication Data (such as Phone Number, E-Mail, Internal Telephone Number, Corporate E-Mail) , Work Experience Data (such as Vocational Tech. Information, Competencies, Total Experience, Job Description Information), Physical Space Security Data (such as Camera Records), Professional Experience Data (such as Diploma Information), Audio-Visual Records (such as Passport Photographs) ), Health Information (Disability Status, Periodic Examination Form for Employment, Blood Group, Device Used and Prosthesis Information, Health Report, Accident Report), Criminal Conviction and Security Measures (such as Criminal Record Record), Signature Data (Personal Data such as wet signature on documents), Other (such as Military Status), Personal Data (Photo, Education Information, Payslips, Employment Start Date, Resignation Information, Employment Contract, Curriculum Vitae Information, E-Declaration, AGI Form Information, Seniority Base Date) , Department Information, Insurance Information, Reference Information, Payroll Information, Leave Usage Information, Payroll Information, Employment Contract, Graduation Information, SGK Information, AGI, E-Declaration, Legal Transaction Data (Information in Correspondence with Judicial Authorities, Information in the Case File), Transaction Security Data (IP ) address information, MAC address, website entry and exit information), Risk Management Data (Information Processed for the Management of Commercial, Technical and Administrative Risks Related to Risks to Administrative and Technical Employees), Finance Data (Bank Account Information, Salary Details, Execution Tracking ) Information such as Family Information), Family Close Information (Personal Information of the Employee’s Relatives (such as Name-Surname, TR Identity Number).

Purpose of Processing Personal Data : Performance of the employment contract, annual and other leave approvals of the employees, viewing the remaining leaves and making the leave arrangements, making the entry and exit procedures of the employees, making the payroll transactions, making the salary and additional benefits payments, personnel management and payroll, the minimum living allowance of your family member monitoring of legal requirements, determining regulatory process and company management responsibilities, conducting correct application and compliance audits, ensuring and auditing corporate policies such as security and internet usage requirements, operational requirements such as registered transactions, training and quality control, security controls, credit rating and control, responding to requests from official authorities regarding crimes and crimes and investigating criminal charges within the institution, reference control, monitoring and management of safe working principles, selecting employee candidates/interns/students and placement processes, application processes for employee candidates, employee satisfaction and loyalty processes, fulfillment of obligations arising from employment contracts and legislation for employees, conducting fringe benefits and benefits processes for employees, conducting audit / ethical activities, conducting training activities.
Legal obligation: Fulfillment of legal obligations within the scope of Labor Law, Occupational Health and Safety Law, Social Security Law and other legislation, creation of personal file, SGK and İŞKUR notifications, AGI calculation, incentive and legal liability information, providing compulsory private pension insurance account opening , control and management of entry-exit records, payment of employees’ salary lien deductions to executive files, occupational health and safety procedures, legal notification of work accident, police station notification, compliance with archiving and information obligations as per the legislation, fulfillment of court orders.
Ensuring physical space security: Ensuring workplace safety, Ensuring the entrance and exit of the employee to the company headquarters.

Performance evaluations and providing more qualified services to the Customer: Evaluating the quality of service provided to the customer and providing training to the employees if necessary.
Administration of the company, conduct of business, implementation of company policies: In particular;
Ensuring communication with employees, fulfilling and duly fulfilling your social rights and fringe benefits, ensuring workplace safety, ensuring identification at workplace entrances and exits, identifying employees in the department, ensuring company management processes and company organization, executing emergency management processes, conducting information security processes, Confirming that the employee who is assigned or made to use a vehicle is competent to drive and has not lost his license for any reason, keeping the log records of the employees in the IT environment, printing business cards, ensuring that the packages received by cargo and courier are forwarded to the relevant employee, the company is in charge of the safety of the employees and the execution of the work. monitoring the use of the vehicle , providing the service and travel organization, creating the employee’s work e-mail by entering the employee data, researching about the employees Carrying out employment projects, controlling the entry and exit of the employees, recording the documents collected during the employment application and interview, ensuring the communication for celebration purposes, planning the training, reporting the trainings, preparing the training certificates, following the employees participating in the trainings, trainings received by the employees. Following the development processes, ensuring quality control and occupational safety, executing access authorizations, providing additional advantages to the company, defining the right channels for employer brand activities, following and executing legal affairs, planning human resources processes, conducting / auditing business activities, carrying out health / safety activities, receiving and evaluating suggestions for improvement of business processes, carrying out talent / career development activities, authorized person, institution and board Providing information to jobs, conducting performance evaluation processes, making visa applications on behalf of the employee in cases of business travel, car rental in business trips, providing transportation services, supporting company employees, carrying out activities in accordance with the legislation, carrying out financial and accounting works, internal audit / investigation / intelligence activities, planning business trips and taking necessary actions in this context, following up the devices allocated to you within the scope of the employment contract and providing other personal rights, corporate e-mail accounts allocated to you within the scope of the employment contract, following the expense and permission forms, carrying out the logistics activities, organization and event management, management of risk management processes, execution of storage and archive activities, if any; It is taken for the purposes of carrying out social responsibility and civil society activities, carrying out strategic planning activities, making position changes according to your determined health status, if you give your consent, and in this way providing you with job positions suitable for your health. In line with the purposes set out in the contract you have concluded with our company, maintaining and developing effective employee management, in a way that is not contrary to the law, fundamental rights and freedoms of individuals and personal interests; Managing the processes of power of attorney and signature circular to be carried out within the scope of use in line with the legitimate interests of the company, assignment with representation inside and outside our company.

Within the scope of our company’s obligations regarding ensuring and improving occupational health and safety;
It is processed and transferred for the purposes of creating emergency lists and executing emergency operations, creating emergency analysis reports, performing occupational accident examinations, conducting employment examination, and conducting processes related to obtaining a health report from the workplace doctor.

Legal Basis for the Processing of Personal Data: According to paragraph 1 of article 5; ”Personal data cannot be processed without the explicit consent of the person concerned. “According to the provision and paragraph 2, in the presence of one of the following conditions, it is possible to process the personal data without seeking the explicit consent of the data subject: According to subparagraph (a), “explicitly stipulated in the laws”, “De facto Being obligatory for the protection of life or physical integrity of the person or another person, who is unable to express his consent due to impossibility or whose consent is not legally recognized” “It is necessary to process the personal data of the parties”, “It is necessary for the data controller to fulfill its legal obligations”, according to subparagraph (ç), “It is necessary for the data controller to fulfill its legal obligations”, “The data subject has been made public by himself” according to subparagraph (d), (f) According to the paragraph, “The legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, According to the second paragraph of Article 6, “It is forbidden to process sensitive personal data without the explicit consent of the person concerned” and according to the third paragraph, “Personal data related to health data can only be used for the protection of public health. may be processed by persons or authorized institutions and organizations under the obligation of secrecy for the purpose of carrying out preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, without seeking the explicit consent of the person concerned.

Collection Methods of Personal Data: Your personal data, in order to be used by the Company for the purposes specified in this Clarification Text, from all kinds of written, verbal, electronic media, through automatic or non-automated methods, from you personally or through websites that allow you to apply for a job, through e-mail. expense and permission form, etc. Your personal data can be collected in physical and digital environments through documents. In accordance with the Company’s legal obligation and legitimate interest in ensuring workplace safety, we collect it through the cameras we place in the workplace building. We collect your personal data physically or electronically from the building management in order to provide physical and workplace safety through our workplace doctor in order to fulfill our legal obligations and as stipulated in the laws.

Transfer of Personal Data: The law determining the transfer of personal data; According to paragraph 1 of Article 8, “Personal data cannot be transferred without the explicit consent of the person concerned”, and according to paragraph 2, personal data; The transfer will be made according to the clause (a) “in the second paragraph of article 5”, sub-paragraph (b) “provided that adequate measures are taken”, and in the third paragraph of article 6, “in case one of the conditions specified is found, it can be transferred without seeking the explicit consent of the person concerned”.

Your personal data is transferred to the following groups of people, within the framework of the conditions specified in Article 8 of the Law and on condition that it is limited to the purposes listed in the above article. No personal data is transferred to third parties other than those listed.

Based on the data processing condition of “establishment or performance of the contract” regulated in clause 5/2 (c) of the KVK Law; With the bank, independent accountant/financial advisory offices and our related suppliers in order to realize your salary payments and benefits, and to carry out the Company’s activities,

Based on the data processing condition “to be able to fulfill the legal obligation of the data controller” regulated in paragraph 5/2 (ç) of the KVK Law; with the Ministry of Labor and Social Security, Social Security Institution, Turkish Employment Agency, courts and other public institutions and organizations requesting information only when necessary; with financial advisor/accounting firms;

Based on the data processing condition of “establishment, use or protection of a right” regulated in clause 5/2 (e) of the KVK Law; With law offices and other consultants for the purposes of proving your personal data in possible disputes, obtaining legal consultancy and technical support, implementing the employment contract, and auditing whether the parties comply with their obligations;

Your special quality personal data, with reference to the 2nd paragraph of Article 8 of the KVK Law and in the cases stipulated in the 3rd paragraph of the 6th article of the KVK Law; your personal data related to health and sexual life, but without your explicit consent to persons or authorized institutions and organizations who are under the obligation of keeping confidential for the purpose of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing;

In order to ensure our internal functioning with the companies we are affiliated with or work in partnership with, with these companies;

With the company we work with for reasons such as necessary personal data, transportation, vehicle supply, business card printing, parking lot registration; can be shared and transmitted.

  • PERSONAL DATA PERSON GROUP: POTENTIAL PRODUCT OR SERVICE BUYER / CUSTOMER CANDIDATE

Personal Data Collected : Identity Data (such as Name and Surname) Contact Data (such as Contact Address, E-mail, Telephone No.).

Purpose of Processing Personal Data : Execution of Communication Activities, Receiving and Evaluation of Suggestions for Improvement of Business Processes, Execution of Goods / Services Sales Processes, Execution of Marketing Analysis Studies, Execution of Advertising / Campaign / Promotion Processes, Follow-up of Requests / Complaints, Execution of Marketing Processes of Products / Services processed and transmitted.

Legal Basis for the Processing of Personal Data: According to paragraph 1 of Article 5; “Personal data cannot be processed without the express consent of the person concerned.” Pursuant to the Article 2, paragraph (d), “the data subject has been made public by himself”, According to the 2nd paragraph of Article 6, “Private personal data is prohibited to be processed without the explicit consent of the person concerned.” It is processed and collected according to its legal basis.

Collection Methods of Personal Data: In digital media, forms, documents, surveys and forms obtained from field studies can be collected through e-mail, social media (facebook, twitter, instagram, etc.), through our website and in the physical environment, or verbally by yourself.

Transfer of Personal Data : The law determining the transfer of personal data; According to paragraph 2 of Article 8, personal data; According to the provision of (a) clause “in the second paragraph of Article 5”, clause (b) “provided that adequate measures are taken”, and in the third paragraph of Article 6, “in case one of the conditions specified is present, it can be transferred without seeking the explicit consent of the person concerned” and 1. According to the paragraph “Personal data cannot be transferred without the express consent of the person concerned.”, your personal data shared and transferred may be shared and transferred with our direct or indirect subsidiaries, group companies, shareholders/partners, authorized persons and institutions.

  • PERSONAL DATA PERSON GROUP: PERSON / CUSTOMER RECEIVING PRODUCT OR SERVICE

Personal Data Collected: Identity Data (such as Name Surname, TCKN), Communication Data (such as Telephone Number, Address Information, E-Mail), Legal Transaction Data (Information in the Case File, Information in Correspondence with Legal Authorities), Financial Data (Tax Office, Tax Identity Card ). No, Bank Account Information), Customer Transaction Data (such as Invoice, Order Information, Request Information, Payment Information)

Purpose of Processing Personal Data: Execution of activities in accordance with the legislation, execution of finance and accounting works, execution of communication activities, execution of logistics activities, execution of goods / services after-sales support services, execution of customer relations management processes, execution of activities for customer satisfaction, execution of goods / services sales processes, marketing analysis studies execution of advertising / campaign / promotion processes, execution of contract processes, follow-up of requests / complaints, ensuring the safety of movable goods and resources, executing marketing processes of products / services, executing supply chain management processes, executing company / product / services commitment processes, legal affairs It is processed for the purposes of monitoring and executing, receiving and evaluating suggestions for the improvement of business processes. and transmitted.

Legal Basis for the Processing of Personal Data: According to paragraph 1 of article 5; According to the provision “Personal data cannot be processed without the explicit consent of the person concerned” and according to subparagraph (a) of paragraph 2, “explicitly stipulated in the laws”, “Persons who are unable to express their consent due to actual impossibility” regulated in subparagraph 5/2 (b) or obligatory for the protection of the life or bodily integrity of the person or another person whose consent is not given legal validity ” According to subparagraph (ç), it is necessary for the data controller to fulfill his legal obligation, according to subparagraph (d), “The data subject has been made public by himself”, and according to subparagraph (f), “Relevant Provided that it does not harm the fundamental rights and freedoms of the person, it is processed in accordance with the provisions of “the data processing is mandatory for the legitimate interests of the data controller” and are being collected

Personal Data Collection Method: It is collected by you personally, verbally, via e-mail in digital media, on our website, social media applications or through forms and documents in the physical environment.

Personal Data Transfer: The law determining the transfer of personal data; According to paragraph 2 of Article 8, personal data; According to the provision of (a) clause “in the second paragraph of Article 5”, clause (b) “provided that adequate measures are taken”, and in the third paragraph of Article 6, “in case one of the conditions specified is present, it can be transferred without seeking the explicit consent of the person concerned” and 1. Pursuant to the clause “Personal data cannot be transferred without the explicit consent of the person concerned.”, your personal data shared and transferred can be shared with our direct or indirect subsidiaries, group companies, shareholders/partners, private law persons and independent accountants/financial consultants. It can be shared and transferred with the bank, authorized persons and institutions.

  • PERSONAL DATA OWNER GROUP: VISITOR

Personal Data Collected: Physical Site Security Data (such as Camera Recordings).

Purpose of Processing Personal Data: It is processed and transferred for the purposes of carrying out emergency management processes, ensuring physical space security, informing authorized persons, institutions and organizations, ensuring the security of the company, detecting any judicial crime cases, and auditing.

Legal Basis for the Processing of Personal Data: Protection of personal data is processed and collected in accordance with the legal basis, “It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

Collection Method of Personal Data: It can be processed and collected digitally by our company, primarily through security services, digitally through camera recordings and audio recordings, and in the physical environment by the security unit through the guest book.

Transfer of Personal Data: The law determining the transfer of personal data; According to paragraph 2 of Article 8, personal data; (a) clause “in the second paragraph of Article 5” clause (b) “provided that adequate measures are taken”, in the third paragraph of Article 6, “in case of existence of one of the conditions specified, it can be transferred without seeking the explicit consent of the person concerned”. transfers are made with institutions and organizations.

  1. TRANSFERRING PERSONAL DATA

The Company does not share personal data with legally prohibited third parties, with or without explicit consent, except for legal obligations and legal rights. The personal data collected by the company is the data controller to carry out commercial activities in accordance with the law in accordance with the KVK Law and the relevant legislation, to meet the services you request in line with your needs, to carry out the contract processes and to determine and control the signatory powers of the parties signing the relevant documents, to implement commercial and/or legal business strategies. It can be obtained, recorded, stored during storage periods, transferred to third parties or processed in other ways to the extent permitted by the legislation and your express consent, due to planning, access to legal online applications, and other legal regulations and obligations .

  1. PERSONAL DATA STORAGE PERIOD

Personal data shared with our Company through the channels mentioned in this Clarification Text will be stored in accordance with the stipulated periods, if the period is stipulated in the Law on the Protection of Personal Data No. 6698 and the relevant legislation. Within the scope of the KVK Law, your personal data will be destroyed in accordance with the procedures and principles of article 7 of the KVK Law at the end of the required storage period for these purposes. If a period is stipulated in the law and relevant legislation, the actions to be taken after the expiry of the said period or if no period is foreseen are specified in the Personal Data Storage and Destruction Policy.

  1. RIGHTS OF THE RELATED PERSON

Pursuant to Article 11 of the KVK Law, which regulates the rights of the person concerned; About yourself by applying to the company,

To learn whether personal data is processed, to request information if personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with its purpose, to know the third parties in the country or abroad to whom personal data is transferred, to correct personal data in case of incomplete or incorrect processing, and Requesting the notification of the transactions made in this context to the third parties to whom the personal data has been transferred, requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the Personal Data Protection Law No. Objecting to the emergence of a result against the person himself by analyzing it through the systems, in case of damage due to the unlawful processing of personal data, to remedy the damage You have the right to request.

In cases where the application made following the procedure set forth in the article titled Application Methods to the Data Controller of this Clarification Text is rejected, the response is found to be insufficient or the application is not answered in due time; has the right to file a complaint with the Personal Data Protection Board within thirty days following the notification of the reply, and possibly within sixty days from the date of application. However, in accordance with the legal regulations, it is not possible to apply for a complaint without exhausting the remedy.

  1. METHODS OF APPLICATION TO DATA SUPPORTER

If you want to use your rights, you can submit your applications together with the documents showing your identity in accordance with the procedures and principles in the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 and numbered 30356; https://www.nicoletta.com.tr/ After filling the Application Form at the address, a wet-signed copy;

  1. In person or through a notary public, “YAKUT TEKSTİL KONFEK OTO. LEATHER AND FOOD IND. SUN. TRADE. LTD. STI. Nişanca Mahallesi Mücellit Çıkmazı Sokak No: 2A Fatih / İSTANBUL” address,
  2. By using the registered e-mail (KEP) address, secure electronic signature, mobile signature or the e-mail address you have previously notified to our Company and registered in our systems, in the soft environment info@nicoletta.com.tr to be sent by e-mail to
  3. You can send it by applying with other methods specified in the KVK Law.

 

In order for third parties to request an application on behalf of personal data owners, a special power of attorney issued by the data owner through a notary public on behalf of the person to apply must be present.

Your request or requests in your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on their nature. However, if the transaction requires a separate cost for the Company, the fee in the tariff determined by the Personal Data Protection Board will be charged.