KVKK Privacy Notice
CAN CONSTRUCTION, INDUSTRY, AND TRADE CORPORATION
IN ACCORDANCE WITH THE PERSONAL DATA PROTECTION LAW
GENERAL PRIVACY NOTICE
DEFINITIONS
The following terms used in this privacy notice:
Data Protection Act (KVKK):The Law on the Protection of Personal Data No. 6698, which entered into force upon its publication in the Official Gazette on April 7, 2016,
Personal Data: Any information relating to an identified or identifiable natural person,
Şirket: Cırgalan Mah. 4140.Cd. No:2, 38110 Kocasinan/Kayseri adresinde mukim Can İnşaat San. ve Tic. A.Ş.’ yi (MERSİS NO: 198026113800010),
Contact Person: A natural person whose personal data is processed,
Data Processor: A natural or legal person who processes Personal Data on behalf of the data controller based on the authority granted by the data controller,
Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,
means.
DATA CONTROLLER
In accordance with the Personal Data Protection Law No. 6698 (KVKK), Can Construction Industry and Trade Incorporated, acting as the Data Controller, will process your personal data—for business purposes—by using, recording, storing, updating, transferring, and/or classifying it within the framework described below.
OBLIGATIONS OF THE DATA CONTROLLER
Bu kapsamda Şirketimiz tarafından başta özel hayatın gizliliği olmak üzere, kişilerin temel hak ve özgürlüklerini korumak ve kişisel verilerin korunması amacıyla düzenlenen Kanun, Yönetmelikler ve Tebliğler gereğince kişisel verilerinizin hukuka aykırı olarak işlenmesini önleme, hukuka aykırı olarak erişilmesini ve işlenmesini önleme ve muhafazasını sağlama amacıyla uygun güvenlik düzeyini temin etmeye yönelik tüm teknik ve idari tedbirler alınmaktadır.
PURPOSE OF PROCESSING PERSONAL DATA
In accordance with Articles 4, 5, and 6 of the KVKK, your personal data;
• In accordance with the law and the principles of good faith
• Accurate and up-to-date when necessary
• For specific, clear, and legitimate purposes
• Relevant, limited, and proportionate to the purpose for which they are processed
• Retained for the period specified in the relevant legislation or as necessary for the purpose for which they were processed
will be processed in accordance with the relevant rules and in connection with our Company’s activities listed below.
Our company’s purposes for processing personal data are as follows:
Subject to your express consent, the processing of your job application, the evaluation of your application and your suitability for the relevant position, and the completion of the necessary procedures in this regard,
Within the framework of human resources policies, fulfilling obligations related to hiring, employment contracts, and/or legal requirements for company employees,
Providing information to authorized agencies as required by law,
Ensuring that requests from data subjects are responded to in accordance with the law and that the necessary actions are taken,
Subject to your express consent, the information you provided in your job application will be shared with Can Construction Industry and Trade Corporation for the purpose of evaluating your application for open positions at Can Construction Industry and Trade Corporation,
Compliance with our legal obligations arising from the law,
To provide you with our company’s services, fulfill our obligations to you, maintain records and documents, and comply with data retention, reporting, disclosure, tax, and other obligations required by local and international laws and regulations,
The fulfillment, execution, performance, proof, and improvement of our obligations; the preparation of reports; and the fulfillment of the terms of the contracts you and/or we have entered into;
Statistical and satisfaction surveys,
In accordance with Law No. 6563 on the Regulation of Electronic Commerce, sending emails and text messages for advertising and promotional purposes to parties whose prior explicit consent has been obtained and whose contact information is on file with our organization due to their commercial activities,
Planning, auditing, and implementing information security processes,
The establishment and management of information technology infrastructure,
Planning and implementing employee benefits and perks,
Planning and/or implementing corporate communications directed at employees and/or corporate social responsibility initiatives and/or civil society organization activities in which employees participate,
Planning and implementing employees' access rights to information,
Monitoring and/or supervising employees' work activities,
Monitoring financial and/or accounting matters,
Planning human resources processes,
Planning and/or conducting analyses of the effectiveness, efficiency, and/or appropriateness of business operations,
Planning and execution of business activities,
Planning and implementing access rights to information for business partners and/or suppliers,
Management of relationships with business partners and/or suppliers,
The planning and/or implementation of occupational health and/or safety processes,
Planning and/or implementing business continuity measures,
Kurumsal iletişim,lojistik ve yönetim faaliyetlerinin planlanması ve icrası
Planning and implementing customer relationship management processes
Planning and/or implementing customer satisfaction initiatives
Tracking customer requests and/or complaints
Planning and conducting the company's audit activities,
Planning and conducting internal and external training and orientation activities,
Planning and executing the operational activities necessary to ensure that the company’s operations are conducted in accordance with company procedures and/or applicable laws and regulations,
Ensuring the security of company operations,
Ensuring the security of the company's campuses and/or facilities,
Planning and/or implementing processes to build and/or increase customer loyalty to the company’s products and/or services
Planning and/or implementation of the company’s production and/or operational risk processes
Conducting corporate and partnership law transactions,
Monitoring of contract processes and/or legal claims,
The implementation of strategic planning activities,
Planning and execution of supply chain management processes
Compensation management,
Planning and conducting market research activities for the sales and marketing of products and services
Ensuring that the data is accurate and up-to-date,
Your personal data is processed for the purpose of creating and tracking visitor records.
CIRCUMSTANCES THAT DO NOT REQUIRE EXPRESS CONSENT
Pursuant to the KVKK, the processing of general personal data is permitted without your explicit consent if any of the following conditions listed in the Law are met:
As expressly provided for by law,
Where a person is unable to express consent due to actual impossibility, or where their consent is not legally valid, and it is necessary to protect their own life or physical integrity or that of another person
Provided that it is directly related to the conclusion or performance of a contract, the processing of personal data belonging to the parties to the contract is necessary
It is necessary for our Company to fulfill its legal obligations as the data controller,
The fact that the individual in question has made it public,
Data processing is necessary for the establishment, exercise, or protection of a right
Provided that it does not infringe upon the data subject’s fundamental rights and freedoms, the processing of data is necessary for the legitimate interests of our Company.
TRANSFER OF PERSONAL DATA
In accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698, in accordance with the principles and purposes set forth in the Privacy and Personal Data Protection Principles, your personal data may be shared with third parties deemed necessary within the framework of the conditions and purposes of personal data processing—including the Company’s business partners, shareholders, affiliates, and institutions with which it collaborates—for the purposes listed above and to ensure the continuity of the Company’s operations, public institutions and organizations, private entities, or foreign countries permitted by the provisions of the Tax Procedure Code, Social Security Institution Legislation, the Turkish Commercial Code, the Code of Obligations, and other applicable legislation, as well as to natural or legal persons from whom we receive services or with whom we collaborate for the purposes of product/service comparison, analysis, evaluation, and the fulfillment of the purposes specified above, and to institutions with which we have agreements regarding the delivery of messages we send to our employees) may be transferred.
METHOD AND LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA
Your personal data; our Company’s Headquarters, Offices, and the General Contact, Purchasing Contact, Feedback, Job Application Form, and Job Application Form for Open Positions available on our Company’s official website, Personnel Files, as well as through third parties, affiliated organizations, business partners, suppliers, and subcontractors or carriers that provide services complementary to or an extension of our Company’s operations, and via other similar channels—whether by filling out an application form electronically or on paper, through automated or non-automated means, and in written, oral, or electronic form.
Your personal data that we collect is processed by our Company in accordance with the conditions and purposes for processing personal data set forth in Articles 5 and 6 of the Law.
1) The processing of personal data of employees or job applicants is necessary in the context of an established employment contract or a potential employment contract, provided that such processing is directly related to the conclusion or performance of the contract and is necessary for the processing of personal data belonging to the parties to the contract, provided that it does not infringe upon the fundamental rights and freedoms of the data subject; or based on the legal grounds that the processing of personal data is necessary for the legitimate interests of the data controller, or upon obtaining explicit consent;
Conducting staff recruitment processes,
The implementation of human resources processes,
Planning human resources processes and
Enforcement of obligations arising from legislation.
Data is processed automatically, semi-automatically, or through non-automated means—provided it forms part of a data recording system—by being collected directly from the individual or from a third party through the completion of an online application form, the completion of a paper form, or the preparation of a personnel file;
2) Based on the legal grounds that it is expressly provided for by law and is necessary for the data controller to fulfill its legal obligations;
Compliance with requests from government agencies,
Providing information to authorized agencies as required by law,
Ensuring compliance with the retention obligations set forth in the legislation; responding to requests from data subjects in accordance with the legislation; and carrying out the necessary procedures
Data is processed by non-automated means, provided that such processing is part of a data recording system, using physical or electronic media, as well as written or oral data transmission methods.
3) Based on the legal ground that the processing of data is necessary for the legitimate interests of the data controller, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject;
Managing customer relationships,
Tracking financial transactions,
To ensure that our business units carry out the necessary work and execute the relevant business processes to enable data subjects to benefit from the products and services offered by our Company, including sales and marketing activities for our products and services
Data is processed by non-automated means, provided that such processing is part of a data recording system, using physical or electronic media, as well as written or oral data transmission methods.
3) Based on the legal grounds that the processing of visitors’ personal data is necessary for the data controller to fulfill its legal obligations; that data processing is necessary for the establishment, exercise, or protection of a right; and that data processing is necessary for the legitimate interests of the data controller, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject;
Ensuring the security of the building and facility complex and/or the facilities,
Creating and tracking visitor records,
Ensuring the security of their fixed assets and/or resources,
Ensuring the security of the company's operations and
Providing information to authorized agencies and organizations as required by law
Footage is recorded via security cameras located in various areas of our service building and other information collected from you upon entry, and is processed either automatically or, provided it is part of a data recording system, through non-automated means.
4) Personal data of third parties may be processed based on the following legal grounds: where it is necessary for the data controller to fulfill its legal obligations, or where it is necessary for the legitimate interests of the data controller, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject;
Conducting staff recruitment processes,
To carry out the necessary business and operational processes so that the customer can benefit from the services offered by the company,
Monitoring legal matters and contract performance
Data is processed by non-automated means, provided that such processing is part of a data recording system, using physical or electronic media, as well as written or oral data transmission methods.
5) To ensure that our relevant business units carry out the necessary work and execute the related business processes for the conduct of the commercial activities carried out by our company,
6) Ensuring the legal, technical, and commercial-business security of our company and the relevant individuals with whom our company has a business relationship,
7) Defining and implementing our company’s commercial and business strategies,
8) Monitoring and handling legal matters,
9) Implementation of information security processes,
10) Planning and implementing customer satisfaction and corporate communications activities,
11) İleride meydana gelebilecek olası uyuşmazlıklarda delil teşkil etmesi amacı ile kişisel verilerin genel zamanaşımı süresince saklanması.
KİŞİSEL VERİ SAHİBİNİN HAKLARI
KVKK’ nın 11. maddesi uyarınca herkes, veri sorumlusuna başvurarak kendisiyle ilgili;
Kişisel verilerinin işlenip işlenmediğini öğrenme,
Kişisel verileri işlenmişse buna ilişkin bilgi talep etme,
Kişisel verilerin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme,
Yurt içinde veya yurt dışında kişisel verilerin aktarıldığı üçüncü kişileri bilme,
Kişisel verilerin eksik veya yanlış işlenmiş olması halinde bunların düzeltilmesini isteme,
KVKK 7. maddede öngörülen şartlar çerçevesinde kişisel verilerin silinmesini veya yok edilmesini isteme,
(d) ve (e) bentleri uyarınca yapılan işlemlerin, kişisel verilerin aktarıldığı üçüncü kişilere bildirilmesini isteme,
İşlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle kişinin kendisi aleyhine bir sonucun ortaya çıkmasına itiraz etme,
Kişisel verilerin kanuna aykırı olarak işlenmesi sebebiyle zarara uğraması halinde zararın giderilmesini talep etme,
haklarına sahiptir.
Yukarıda sıralanan haklarınıza yönelik başvurularınızı https://caninşaat.com.tr/veri-sahibi-basvuru-formu/ adresinden ulaşabileceğiniz Veri Sahibi Başvuru Formu’ nu doldurarak Şirketimize iletebilirsiniz. Ayrıca başvurunuzu açık, anlaşır bir şekilde ve kimlik ve adres bilgilerinizi tespit edici belgeleri de ekleyerek, yazılı ve ıslak imzalı olarak elden, postayla ya da noter kanalıyla Can İnşaat San. ve Tic. A.Ş. Cırgalan Mah. 4140.Cd. No:2, 38110 Kocasinan/Kayseri adresine ulaştırabilirsiniz.
Talebinizin niteliğine göre en kısa sürede ve en geç otuz gün içinde başvurularınız ücretsiz olarak sonuçlandırılacaktır; ancak işlemin ayrıca bir maliyet gerektirmesi halinde Kişisel Verileri Koruma Kurulu tarafından belirlenecek tarifeye göre tarafınızdan ücret talep edilebilecektir.
