GDPR Clarification Text

As İçtur Servis Limited Şirketi (“Company”), we highly value the security of your personal data. In this context, in accordance with the Personal Data Protection Law No. 6698 (“PDP Law”) we take the necessary measures to prevent illegal processing of your personal data and illegal access to your personal data and to ensure the appropriate level of security to ensure the protection of your personal data during the processing and transfer of your personal data to third parties. This text is therefore intended to inform the data subjects.

This text will be updated in the event that all or certain articles of this text issued by our Company are renewed.

As the Company, we are the legal entity that determines the purposes and means of processing your personal data and is responsible for the establishment and management of the data recording system. Our Company will start to process your personal data by ensuring data security with your explicit consent for the processing of your personal data or with the information we will provide in cases where your explicit consent is not required. When processing your personal data, we may also process your personal data by authorizing one or more data processors by ensuring the necessary level of security.

2. THE LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA, THE METHODS BY WHICH IT CAN BE OBTAINED AND WHICH OF YOUR PERSONAL DATA WILL BE PROCESSED:

Your personal data will be used by our Company in accordance with the provisions of the relevant legislation in order to provide the services to be performed and to improve the quality of these services, to fulfill the activities stipulated and/or exempted by public authorities, to fulfill the activities of the company, to comply with information storage, reporting and information obligations. In addition, one/several or all of your personal data listed in Annex-1 may be processed in order to enable you to visit our Company, to protect the security and legitimate interests related to your visit, to offer our Company’s products and services, to communicate regarding the product and service you have received / will receive in this regard, to offer services related to our Company’s fields of activity such as product / service offer, modeling, reporting, scoring, risk monitoring and to improve the quality of these services and to fulfill other activities and to comply with information obligations.

In this regard, we may share your personal data that we process with our affiliates, business partners, suppliers, company officials, shareholders, group companies, legally authorized public institutions and private persons in Turkey and abroad.

Your personal data may be collected verbally, in writing or electronically through our Company, our affiliates, business partners, employees, through our website, social media channels and all other channels in accordance with the provisions of the relevant legislation.

This information form is an annex and an integral part of any contract you have signed with our Company and your requests for service procurement

Our Company stores your processed personal data for the periods determined by the legislation. However, in the event that the legislation regarding the storage period of your personal data does not specify a separate period; your personal data is stored for the period required to be processed in accordance with our Company’s practices and commercial customs depending on the services provided by our Company while processing that data, and after this period, only for the periods required in practice to constitute evidence in possible legal disputes. After the expiration of the specified periods, your personal data in question is deleted, destroyed or anonymized on the first destruction date in accordance with Article 7 of the PDP Law.

Within the framework of Article 11 of the PDP Law, you can apply to our Company and submit the following requests to us;

a. To learn whether your personal data has been processed or not, and if processed, to request information about it,
b. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
c. To learn the third parties to whom your personal data is transferred domestically or abroad,
d. To request correction of your personal data in case of incomplete or incorrect processing,
e. To request the deletion, disposal or anonymization of your personal data in the event that the reasons requiring the processing of your personal data within the scope of Article 7 of the KVK Law disappear,
f. To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom your personal data have been transferred,
g. To object to the occurrence of a result against you by analyzing your processed personal data exclusively through automated systems,
h. To request compensation for damages in case you suffer damage due to illegal processing of your personal data.

You can exercise your above-mentioned rights in accordance with the provisions of the PDP Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10.03.2018 and the relevant current legislation by using the application form at www.icturservis.com

a. By applying in person with a wet signed petition to Büyükeceli Mah. Mareşal Fevzi Çakmak No:20/3 Gülnar, Mersin address or by sending it to this address via notary public,

b. You can use it by sending an e-mail to [email protected] e-mail address via Registered Electronic Mail.

We provide information on how your applications will be delivered to us below, specific to the application channels.

Application Method	Address where the application will be made (in case of address change, the last address published in the trade registry gazette should be taken into consideration)	Information to be specified in the application submission
Personal Application (The applicant comes in person and applies with a document certifying his/her identity)	Büyükeceli Mah. Mareşal Fevzi Çakmak No:20/3 Gülnar, Mersin	“Information Request within the scope of the Law on the Protection of Personal Data” should be written on the envelope.
Notification through Notary Public	Büyükeceli Mah. Mareşal Fevzi Çakmak No:20/3 Gülnar, Mersin	“Information Request within the scope of the Law on the Protection of Personal Data” should be written on the notification envelope.
Via Registered Electronic Mail (REM)	[email protected]	The subject line of the e-mail should read “Information Request within the scope of the Law on the Protection of Personal Data”.

In order for a person other than the person concerned to make a request, there must be a notarized special power of attorney issued by the person concerned on behalf of the person who will make the application.

In this context, your requests that you will duly submit to our Company will be finalized within thirty days at the latest. In the event that the finalization of your requests in question requires an additional cost, our Company will charge the applicant the fee in the tariff determined by the Personal Data Protection Board (“Board”). If our Company responds to your application on a recording medium such as CD, USB drive, etc., a fee determined not to exceed the cost of the recording medium may be requested.

Our Company may request the necessary information and documents from you in order to determine whether you are the real owner of the personal data subject to the request and may ask you questions about your application in order to clarify the matters specified in your application.

Our Company may reject your application by explaining its reasoning in the following cases:

Our Company will notify you of its response to your request in writing or electronically. Pursuant to Article 14 of the PDP Law, in the event that your application is rejected, you find the answer given by our Company insufficient or your application is not responded within the time limit; You can file a complaint to the Board within 30 (thirty) days from the date you learn the answer of our Company or within 30 (thirty) days from the date of the end of our response period if we do not respond, and in any case within 60 (sixty) days from the date of application.

Identity information	All information clearly belonging to an identified or identifiable natural person; processed partially or completely automatically or non-automatically as part of the data recording system; All information contained in documents such as Driver’s License, Identity Card, Residence Card, Passport, Lawyer ID, Marriage Certificate
Contact information	Information such as telephone number, address, e-mail, which clearly belongs to an identified or identifiable natural person; processed partially or completely automatically or non-automatically as part of the data recording system
Personal information	Payroll information, disciplinary investigation, employment-exit document records, property declaration information, resume information, performance evaluation reports, which clearly belong to an identified or identifiable real person; processed for the purpose of fulfilling the obligations arising from the employment contract and legislation for employees, carrying out the processes of fringe benefits and benefits, and carrying out the assignment processes
Legal Action	Execution of activities in accordance with the legislation, follow-up and execution of legal affairs, execution of contract processes, foreign personnel work and residence permit procedures, information in correspondence with judicial authorities collected for the purpose of providing information to authorized persons, institutions and organizations, information in the case file, etc
Customer Transaction	Call center records, Invoice, promissory note, check information, Information in box office receipts, Order information, Request information, etc. in order to carry out the activities in accordance with the Legislation, Execution of Contract Processes, Execution of Finance and Accounting Affairs, Execution of Goods / Service Sales Processes, production and operation processes.
Physical space security information	Personal data relating to the records and documents taken at the entrance to the physical space, during the stay in the physical space, which clearly belong to an identified or identifiable natural person and are included in the data recording system
Transaction security information	Your personal data that clearly belongs to an identified or identifiable natural person and is included in the data recording system; processed for the purposes of ensuring the fulfillment of technical, administrative, legal and commercial obligations while carrying out our commercial activities
Risk management information	Personal data that clearly belongs to an identified or identifiable natural person and is included in the data recording system; personal data processed through methods used in accordance with generally accepted legal, commercial customs and good faith in these areas in order to manage our commercial, technical and administrative riskstechnical and administrative risks
Financial information	Personal data of the subcontractor, supplier official or employee regarding information, documents and records showing all kinds of financial results of the person concerned, which clearly belong to an identified or identifiable natural person, processed partially or completely automatically or non-automatically as part of the data recording system
Professional Experience	Conducting employee candidate / intern / student selection and placement processes, conducting application processes of employee candidates, conducting training activities, conducting assignment processes, conducting occupational health / safety activities, conducting performance evaluation processes, diploma information, courses attended, vocational training information, certificates, transcript information, etc. in order to provide information to authorized persons, institutions and organizations.
Audiovisual Records	Carrying out emergency management processes, carrying out training activities, carrying out activities in accordance with the legislation, ensuring physical space security, carrying out storage and archive activities, providing information to authorized persons, institutions and organizations, creating visitor records and audio-visual records for follow-up, etc.
Philosophical Beliefs, Religions, Sects and Other Beliefs	Information on other beliefs, information on religious affiliation, information on philosophical beliefs, information on sectarian affiliation, etc. for the purpose of fulfilling obligations arising from the employment contract and legislation, execution of fringe benefits and benefits processes, execution of Employee Candidate / Intern / Student Selection and Placement Processes, execution / supervision of business activities.
Health Information	Carrying out employee candidate / intern / student selection and placement processes, carrying out the application processes of employee candidates, fulfilling the obligations arising from the employment contract and legislation for employees, carrying out occupational health / safety activities, carrying out risk management processes, carrying out storage and archive activities, information on disability status, blood group information, personal health information, information on devices and prostheses used, etc. in order to provide information to authorized persons, institutions and organizations.
Criminal Conviction and Security Measures	Carrying out employee candidate / intern / student selection and placement processes, carrying out the application processes of employee candidates, fulfilling the obligations arising from the employment contract and legislation for employees, carrying out activities in accordance with the legislation, carrying out storage and archive activities, providing information to authorized persons, institutions and organizations, information on criminal convictions, information on security measures, etc

Click here for the Application Form Pursuant to the Law on the Protection of Personal Data.

GDPR CLARIFICATION TEXT