Dorca Energy, Protection of Personal Data Clarification Text,
This clarification text has been prepared by Dorca Enerji in the capacity of data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Clarify.
1.Data Controller
It processes personal data in the categories notified to the verbis system belonging to Employees, Employee Candidates, Owners, Trainees, Supplier Employees, Supplier Officials, Product or Service Purchasers and Visitors by taking into account the issues related to the confidentiality of private life. In accordance with the Law, the scope in which it can be processed by Dorca Enerji, as the data controller, is explained by this lighting text (“Lighting Text”).
2. What is the Method of Collection of Personal Data and its Legal Reason?
Personal data, including health information, including personal data of a special nature, are obtained by fully or partially automated or non-automated means, provided that they are part of any data recording system, from the person concerned, from systems that can detect the location and from the authority of the company where supplier employees work Jul. Personal data can be processed and transferred domestically and abroad for the purposes listed below with the natural and legal persons specified in this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, in accordance with the basic principles stipulated by the Law, in accordance with the basic principles stipulated by the Law.
3.What are the Situations in Which the Data Controller May Process Personal Data Without Explicit Consent in Accordance with the Law?
- Pursuant to Article 5 of the Law, Dorca Enerji may process the personal data it has received in accordance with the law without seeking explicit consent in the following cases:
- In cases where it is clearly stipulated in the laws,
- Due to actual impossibility, the Personal Data Owner is unable to disclose his consent, or in cases where consent is not legally valid, it is mandatory to process personal data in order to protect the life or physical integrity of the Personal Data Owner or someone else,
- Provided that it is directly related to the establishment or performance of a contract concluded between Dorca Enerji and the Personal Data Owner, it is necessary to process the personal data belonging to the parties to the contract Dec,
- Dorca Energy is obliged to fulfill a legal obligation with,
- The fact that the personal data has been made public by the Personal Data Owner,
- Data processing is mandatory for the establishment, use or protection of a right,
- Provided that it does not harm fundamental rights and freedoms, data processing is mandatory for the legitimate interests of Dorca Enerji.
- Furthermore, pursuant to Article 6 of the Law, Dorca Enerji Jsc may process personal data of a special nature that it has received in accordance with the law without seeking explicit consent in the following cases:
- Race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, clothing and clothing, association, foundation or trade union membership, health, sexual life, criminal conviction and security measures related data, as well as biometric and genetic data are special personal data.
- Personal data of a special nature, other than the health and sexual life of the personal data owner, is provided for in the laws,
- The private personal data related to the health and sexual life of the personal data owner are provided only by persons or authorized institutions and organizations under the obligation to keep secrets for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and maintenance services, planning and management of health services and financing.
4.What are the Purposes of Processing Personal Data?Personal data;
- Execution of Employee Candidates and Internship Application Processes
- Fulfillment of Obligations Arising from Employment Contracts and Legislation for Employees
- Execution of Ancillary Rights and Benefits Processes for Employees
- Execution of Educational Activities
- Execution of Access Authorizations
- Conducting Activities in Accordance with the Legislation
- Execution of Finance and Accounting Works
- Ensuring the Security of Physical Space Jul.
- Execution of Assignment Processes
- Monitoring and Execution of Legal Affairs
- Execution of Communication Activities
- Planning of Human Resources Processes
- Execution / Supervision of Business Activities
- Execution of Occupational Health / Safety Activities
- Execution of Service Purchase Processes
- Service Execution of After-Sales Support Services
- Execution of Service Sales Processes
- Execution of Performance Evaluation Processes
- Execution of Contract Processes
- Execution of the Wage Policy
- Providing Information to Authorized Persons, Institutions and Organizations
- Creation and Tracking of Visitor Records
- for the purpose of Dorca Energy and V. it can be processed by other real and/or legal entities specified in the article.
5.To Whom are Business Data Transferred for What Purpose?
- The collected personal data may be transferred to legally authorized public institutions and organizations, Natural persons or legal entities of private law, companies / organizations that will establish business contracts with Dorca energy, and their business partners, suppliers, service providers in accordance with the basic principles stipulated by the Law and the conditions of personal data transfer specified in Articles 8 and 9 of the Law and for the following purposes.
- Monitoring and Execution of Legal Affairs
- Obtaining permits for personnel who will work in the field and Conducting Assignment Processes
- Notification of Subscription Initiation and Paying of Invoices
- Ensuring the Security of Physical Space Jul.,
- Providing Information to Authorized Persons, Institutions and Organizations
- Telephone Line Jul. Supply
- Obtaining Access Permissions to the Software of Business Partners Jul.
- Meeting of Tender Entry Requests
- Fulfillment of the Legal Obligation
- Implementation of SGK Notifications
- Realization of Card Printing
- Opening of Corporate User Accounts
- Paying Staff Salaries
- Execution of Contract Processes
- Keeping the trainee attendance record
- Creation of an E-Prescription after diagnosis
- Dorca Enerji may transfer personal data to foreign countries declared to have adequate protection by the KVK Board (“Foreign Country with Adequate Protection”) or, in the absence of adequate protection, to foreign countries where the data controllers in Turkey and the relevant foreign country have committed to adequate protection in writing and have the permission of the KVK Board (“Foreign Country with a Data Controller Committed to Adequate Protection”).
6.What are the Rights of the Personal Data Owner?
11 of the Law. within the framework of the article, the Personal Data Owner always applies to the data controller and relates to himself;
- To learn whether his/her personal data is processed or not,
- If your personal data has been processed, requesting information about it,
- To learn the purpose of the processing of their personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred at home or abroad,
- To request the correction of personal data in case of incomplete or incorrect processing of personal data,
- To request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data to be evaluated within the principles of purpose, duration and legitimacy disappear, to request the deletion or destruction of personal data,
- Despite the fact that Personal Data Protection has been processed in accordance with the Law No. 6698 and other relevant provisions of the law, to request the deletion, destruction or anonymization of personal data in case the reasons requiring its processing disappear
- To request that the transactions related to the correction, deletion or destruction of personal data be notified to the third parties to whom the personal data are transferred,
- Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- To request compensation of the damage in case of loss due to unlawful processing of personal data
- he has rights.
7.How does the Personal Data Owner Use His Rights?
According to Article 11 of the Law, in order for the Personal Data Owner to exercise the above-mentioned rights that he has, he must complete the application form completely and transmit it to Dorca Energy through the channels specified in the form.
Dorca Energy will finalize the request free of charge as soon as possible and no later than thirty (30) days, depending on the nature of the request. However, if the transaction requires an additional cost, Dorca Energy reserves the right to charge the fee in the tariff determined by the Personal Data Protection Board.
8.How Long Will Their Personal Data Be Processed?
In accordance with the Law, personal data processed for the purposes specified in this Clarification Text will be deleted, destroyed or continue to be used by Dorca Energy when the purpose requiring processing according to Article 7 of the Law disappears and/or when the time limits mandated for data processing as Dorca Energy in accordance with the legislation expire.