Protection of Personal Data has been recognized as a fundamental human right in Article 8 of the Charter of Fundamental Rights of the European Union and Article 16 of the Treaty on the Functioning of the European Union. Additionally, personal data has been regulated and included among fundamental rights in Article 20 of the Constitution of the Republic of Turkey under the title "Privacy of Private Life".
Due to its importance, the Personal Data Protection Law numbered 6698 ("PDPL") was published in the Official Gazette dated April 7, 2016, with the aim of regulating the processing of personal data of real persons, primarily to protect the fundamental rights and freedoms of individuals, including the privacy of private life, and to determine the obligations of natural and legal persons processing personal data, as well as the procedures and principles that must be followed.
OBJECTIVE AND SCOPE
Savis Plastic Ltd. Co. ("COMPANY") Personal Data Processing and Protection Policy ("Policy") has been prepared to regulate the processing of personal data within the framework of personal data legislation and to protect fundamental rights and freedoms, especially the privacy of private life as envisaged in the Constitution.
In the preparation of the "Policy", the basic principle was determined to understand the data processed by the working units within the COMPANY's organizational chart, why they collect such data, and the necessity of transferring this data to third parties. While the requirements of the relevant legislation were transferred to the "Policy", it was adopted as a principle to explain why the COMPANY obtains certain data, why it processes this data in a simple and understandable language within the framework of the necessity to protect personal data. Additionally, it is aimed to take necessary administrative and technical measures to protect data privacy within the COMPANY and externally, inform and enlighten the individuals whose data are processed.
All real persons whose data are processed by the COMPANY are included in the scope of this "Policy".
In this "Policy", efforts have been made to include customized information about the processing activities and operations within the COMPANY, such as the categorization of data, recipient groups of data, legal basis and method of data collection, groups of third parties to whom the data are transferred, processing periods of data, and deletion periods of data. However, if data processing activities are carried out by the COMPANY outside the current processing activities, it is possible to carry out the processing activity and enlighten through an external information text, provided that the fundamental principles and principles stated in this policy are complied with. In this case, the enlightenment made will constitute an integral part of this "Policy", and it cannot be claimed that this "Policy" does not include it. Indeed, within the scope of Article 5 of the Regulation on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, it is possible to provide information through physical or electronic means such as verbal, written, audio recording, call center, etc.
PURPOSES OF PROCESSING YOUR PERSONAL DATA, YOUR PROCESSED PERSONAL DATA, COLLECTION METHODS, AND LEGAL GROUNDS
i. Purposes of Processing
Your personal data will be processed to fulfill the obligations related to data processing and control set forth in the PDPL and in compliance with the Law on Higher Education No. 2547, within the framework of the purposes specified in the COMPANY's legislation. The processing purposes are as follows:
a. Fulfillment of obligations related to data processing activities and control stipulated by the PDPL,
b. Establishment of rights arising from employment within the scope of the Legislation on Labor Law No. 4857,
c. Performance of the necessary work by the relevant units for you to benefit from the services provided by our Company,
d. Communication with you for the promotion of the COMPANY and its activities via the communication channels you share with us,
e. Fulfillment of rights and obligations within the scope of the legislation regulating the business life, primarily in terms of personnel procurement in areas required by the Company, such as the Labor Law No. 4857, Occupational Health and Safety Law No. 6331, and Social Security and General Health Insurance Law No. 5510,
g. Execution of activities such as salary payment to personnel, provision of allowances, and payments from revolving capital within the Company, conducting internal correspondence,
ğ. Provision of information-documents to authorized public institutions and organizations, judicial and legal authorities within the cases specified in the laws,
h. Ensuring the efficiency of organization and event management processes (seminars, conferences, meetings, trainings, symposiums, etc.) within the Company and announcing to the public, ensuring the visibility of the Company in the public and maintaining its currency, ensuring the continuity of the Company's internet pages and social media accounts with up-to-date data, managing promotion and advertisement processes,
ı. Archiving in accordance with the procedures specified in the legislation for the conduct of storage and archive activities and the preparation of annual unit activity reports,
i. Creation and tracking of visitor records,
j. Ensuring the security of buildings, personnel, and visitors,
l. Use of data in statistical activities for research purposes after anonymization,
m. Development of new strategies under the leadership of the Strategy Development Department on behalf of the Company, updating old strategies, and conducting necessary analyses,
n. Organization of formal/online, certified/uncertified trainings,
o. Receipt and response to relevant individual applications within the scope of the PDPL.
ii. Your Processed Personal Data
Identity Information: Your name, surname, Turkish Republic ID number, mother's name, father's name, place and date of birth, personnel registry number, nationality information, and other information obtained with your explicit consent.
Contact Information: Your residential address, workplace address, telephone number, and email address, your preferred mobile phone number, fax number, or other contact channels you have provided with your consent for communication with the Company.
Work and Education Information: Information filled out by you for application to the Company (job application, application for certified/uncertified training participation), information related to your identity, employment status, contact information, and education status (such as "University graduate, master's graduate, physics department graduate"), your past graduation information, information about courses/seminars you have attended, and your certificate information, as well as your national or international exam results.
Financial/Financial Information: Information required for the payment of salaries and benefits, repayment of excessive and unjustified payments, execution of payments from revolving capital, and payments in external assignments; bank name and branch information, bank account number information, IBAN number information.
Visual/Auditory Information: Static or moving images and/or sounds of the location of events such as conferences, seminars, theater shows, exhibitions, debates, etc. organized by the Company for purposes such as promoting, announcing, and disseminating the event, and visual/auditory information provided by security cameras installed to ensure security in the Company headquarters, branches, and representative offices. The visual/auditory information obtained at such events may be used on the Company's website, social media platforms used by the Company, or printed materials published by the Company for purposes limited to the purpose of the event. Or it may be sent to third parties (printing house, publisher, institution, organization, etc.) for printing/publication under the permission and control of the Company. This usage method does not cover security camera images, and before using the relevant visual/auditory personal data (for example, at the beginning of the event), participants will be additionally informed, and their explicit consent will be obtained.
