Employee Information Notice

Purpose of Processing

Processed Personal Data

Processing Conditions

Collection Methods

To ensure security by recording our company’s operation, facility, and work areas.

Camera recording

Art. 5/2-f.

Via camera systems (automated means).

To record telephone calls.

Audio recording.

Art. 5/2-f.

Via the call center (automated means).

To perform security checks at entrances.

Full name.

Collected from the data subject (non-automated means).

To process incoming documents and trademark registrations.

Full name, title, signature.

Physically or via email (non-automated or partially automated means).

To ensure company security.

Full name, license plate, vehicle inspection information.

Via email (partially automated means).

For request and complaint management.

Full name, email, phone number, title, signature.

Art. 5/2-e, Art. 5/2-f.

Electronically (partially automated means).

For issuing invoices.

Full name, Tax ID, Turkish ID, email, phone, address.

Art. 5/2-a, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-e.

Physically or digitally (non-automated or partially automated means).

To prepare contracts and lease agreements.

Full name, Turkish ID, tax number, signature, bank details, address.

Physically (non-automated means).

To carry out e-notifications and official correspondence.

Full name, Turkish ID, tax number, signature, address.

Art. 5/2-a, Art. 5/2-ç, Art. 5/2-f

Physically or digitally (non-automated or partially automated means).

To make payments related to court case files.

Full name, Turkish ID, IBAN, Court/Enforcement file number.

Art. 5/2-ç, Art. 5/2-f.

Physically or via email (non-automated or partially automated means).

To prepare signature circulars.

Turkish ID, ID card serial number, full name, photo, place/date of birth, marital status, registered province/district, parents’ names, family sequence no., volume no., record no., signature.

Art. 5/2-a, Art. 5/2-c.

To prepare audit documents.

Full name, Turkish ID, signature, e-signature.

Art. 5/2-c, Art. 5/2-f.

From the relevant document (non-automated means).

To prepare general assembly minutes and powers of attorney, attendance lists, share breakdowns, and to record the meeting.

Full name, Turkish ID, signature, title, visual and audio recordings.

Art. 5/2-ç, Art. 5/2-f.

Physically, via email and camera (partially automated and non-automated means).

To obtain an analysis application form from the customer.

Full name, title, signature, Turkish ID, tax number, tax office, address, phone, email.

Art. 5/2-c.

Physically or via email (non-automated or partially automated means).

To prepare supporting documents and reports.

Turkish ID, full name, vehicle plate, mobile phone number, camera recordings, student no., registry no., foreign ID no., passport no.

Art. 5/2-f.

To prepare laws, circulars, instructions, regulations, decrees, by-laws, orders, and letters and send them to relevant parties.

Name of the notifying person, Turkish ID, signature.

Art. 5/2-c, Art. 5/2-ç, Art. 5/2-e, Art. 5/2-f.

To follow up litigation processes.

Personal data subject to or contained in the case file.

Art. 5/1, Art. 6/1, Art. 5/2-a, Art. 5/2-d, Art. 5/2-e, Art. 5/2-f.

To follow up mediation processes.

Full name, Turkish ID, email, address, phone.

Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e, Art. 5/2-f.

To follow up enforcement proceedings.

Full name, Turkish ID, address, IBAN, interest amount/rate, outstanding debt, receivable balance, court judgments and personal data therein, bar registration number.

To prepare an emergency incident record form.

Full name, title, address, phone, injury status.

By phone (partially automated means).

To forward inbound/outbound call records to relevant parties.

Full name, phone, email, company/institution.

Art. 5/2-f.

To forward guest appointment information to relevant parties.

Full name, phone, email.

To forward incoming faxes and emails to relevant parties.

Full name, title, email, phone, address.

Physically, via fax and email (non-automated or partially automated means).

Listing phone numbers to maintain communication.

Full name, title, phone.

Via email (partially automated means).

To conduct correspondence with public institutions and organizations.

Full name, address, Turkish ID, ID serial number, date of birth, parents’ names, title, photo, video, phone, email, signature.

Art. 5/2-a, Art. 5/2-c, Art. 5/2-ç

Physically or via email (non-automated or partially automated means).

To record public participation meetings conducted within the scope of Environmental Impact Assessment.

Full name, signature, photo, video.

Art. 5/1, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-f.

Via minutes, email and camera systems (automated and non-automated means).

To view personal data of opposing counsels in legal processes because it is included in the case file.

Personal data contained in the file or document.

Art. 5/2-d

Through the file (automated and non-automated means).

To carry out travel processes such as accommodation, transportation, ticketing, etc.

Identity information, email, phone number, title deed information, license information, employer information.

Art. 5/2-c, Art. 5/2-ç, Art. 5/2-e

Physically and via email

(Automated and non-automated means).

Purpose of Transfer

Recipient Groups

Data processed during preparation of audit documents, if requested,

is transferred to relevant and authorized public institutions and organizations.

Data processed during preparation of contracts and lease agreements, due to legal obligation,

is transferred to relevant and authorized public institutions and organizations.

Data processed for trademark registrations, for conducting the legal process,

is transferred to Turk Altin Holding.

Data processed while issuing invoices to the customer, due to legal obligation and to maintain the process,

is transferred to relevant and authorized public institutions and to Turk Altin Holding.

Data processed during phone and image recordings and audit activities, due to legal obligation,

is transferred to relevant and authorized public institutions and organizations.

Data processed during e-notifications and official correspondence, due to legal obligation,

is transferred to relevant and authorized public institutions and organizations.

Data processed to make payments related to court case files, for making the payments,

is transferred to relevant banks.

Data processed during preparation of signature circulars, for conducting the process,

Data processed during contracting with the customer, for informing,

is transferred to the relevant company or person.

Data processed during preparation of supporting documents and reports, if requested,

is transferred to relevant and authorized public institutions and organizations.

Data processed during the notification of documents such as laws and circulars, if requested,

Data processed for following case files, for conducting the process,

is transferred to external offices, courts, enforcement offices, tax offices, relevant banks, Turk Altin Holding, and relevant public institutions.

Data processed for following mediation processes, for conducting the process,

is transferred to external offices, courts, and Turk Altin Holding.

Data processed for following enforcement proceedings, for conducting the process,

is transferred to external offices, courts, enforcement offices, tax offices, relevant banks, Turk Altin Holding, relevant public institutions, and independent audit firms.

To forward inbound/outbound call records and guest appointment information to relevant parties,

is transferred to Turk Altin Holding Group Companies.

Data processed during correspondence with public institutions, due to legal obligation and to proceed with processes,

is transferred to relevant and authorized public institutions, Turk Altin Holding, and depending on the nature of the correspondence, the relevant Turk Altin Holding Group company.

Within the scope of fulfilling obligations when recording public participation meetings within EIA,

is transferred to relevant and authorized public institutions and to the supplier’s representative.

Personal data processed to carry out travel processes such as accommodation, transportation, ticketing, for the same purpose,

is transferred to the suppliers executing the process, if necessary to consulates, and upon request to relevant public institutions.