Personal Data

Protection Law

(KVKK)

DANİSTA FINANCIAL ADVISORY SERVICES ANONİM ŞİRKETİ

LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA (KVKK)

INFORMATION AND CLARIFICATION TEXT

 

Your personal data are processed in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") and the relevant secondary legal regulations, limited to the activities of our company. Our Company pays utmost attention to the processing and protection of your personal data. All necessary technical and administrative measures are taken to prevent unlawful processing of personal data, to prevent unlawful access to personal data, and to ensure the preservation of personal data.

Pursuant to Article 10 of the Law; we inform you as the data controller with the policies and this clarification text created to cover customers, suppliers, service providers and their managers and employees, business partners, company partners, company employees, employee candidates, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties.

This clarification text has been prepared by Danista Finansal Danışmanlık Hizmetleri Anonim Şirketi ("Danista") in the capacity of data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 ("Law") and the Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Disclosure Obligation.

1.Data Controller:

Danista Finansal Danışmanlık Hizmetleri Anonim Şirketi (19 Mayıs Mahallesi 19 Mayıs Cad. Nova Baran Plaza No:4/68 Şişli Istanbul, Tax Office: Mecidiyeköy, V.D.No: 2700469340, Mersis No: 0270046934000016); processes your personal data in the capacity of "Data Controller" as defined in Article 3/1-ı of the Personal Data Protection Law No. 6698.

2.Purpose of Processing Personal Data, Personal Data Processed:

Your personal data is processed in accordance with the principles stipulated in the law, in whole or in part, automatically or by non-automatic means, provided that it is part of any data recording system, by obtaining, recording, storing, changing, rearranging and processing.

Your personal data are processed in accordance with the relevant legislation for the following purposes within the scope of company activities. Accordingly

Developing the Company's products and services, maintaining corporate development activities, maintaining the Company's finance and accounting, administrative, legal and technical business processes,

In accordance with legal regulations, to make the necessary notifications to the relevant public institutions and organizations and to fulfill legal obligations,

Planning and execution of human resources processes, fulfillment of labor application processes, creation of personnel files for employees, fulfillment of financial and administrative obligations,

Execution and fulfillment of contracts that the Company has made or will make with its customers, potential customers, suppliers, service providers, employees and related third parties with whom it has legal relations,

Taking necessary actions before the PDP Authority within the scope of the PDP Law,

The Company's burden of proof as evidence in legal disputes with third parties,

To ensure contact and communication with the persons with whom the company has legal relations, to ensure the corporate quality of the company, to ensure the security of the relevant persons with whom the company is in contact,

Your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the KVK Law. Your personal data is not used for any other purpose other than the activities of our company. In line with the purposes written above, your personal data written below are processed, limited to the activities of the company.

Identity information (T.R. Identity Number / Foreigner Identity Number, your name and surname, place and date of birth, mother and father's name, marital status, gender, information on marriage certificate, passport, driver's license, vehicle registration certificate, your identity document or other identity information on the identity sharing system)

Your contact information (phone numbers, contact address, e-mail address)

Your location information (Address, location information of your current location)

Personal Information (Employment contract, education, diploma information, certificate information, SSI employment, exit declaration, SSI entry information, identity information written on the family status declaration, dependents, spouse, child proximity information, population registration information of family members, embezzlement certificate received according to the nature of the work, work certificate, resignation, termination, severance and notice payroll, payroll information, disciplinary investigation information, SSI registration number, service breakdown, resume information, leave information, personnel performance evaluation reports, work accident information, information in the job application form, reference information, bank account information, IBAN number information)

Legal Transaction Information (Personal information in correspondence with judicial authorities, information in litigation and enforcement files)

Customer, supplier, service provider transaction information (Name, Surname, T.C. No, address, e-mail information, telephone contact information, bank account information, information on payment instruments such as checks, promissory notes, credit cards, invoices, delivery notes, current account, finance, signature circular, power of attorney, trade registry, representation, authorization information),

Physical Space Security Information (Entry and exit camera recording information of customers, suppliers, service providers, managers and employees, company partners, company employees, employee candidates, visitors),

Financial Information (Balance sheet information, financial performance information, credit and risk information, asset information, bank account information, current account information, policy information),

Professional experience information (education information, diploma information, working life, reference information, courses attended, on-the-job training information, certificates, driving license information, other information in the reported forms),

Visual Records (Photograph information on your completed, printed forms, documents and official identity documents, photographs taken when necessary within the scope of job application and company activities, your images in camera recordings)

Health Information (Health status information written in the job application form for employees and employee candidates, health reports, health tests, blood group information, personal health and physical disability status information, health board reports for employees and subcontractor employees)

Information on criminal convictions and security measures (criminal record, conviction, judicial status information),

3. To whom and for what purpose the processed personal data can be transferred

Your personal data processed by our company is transferred to the relevant real and legal persons for the purposes written below in accordance with Articles 8 and 9 of the KVK Law No. 6698. Accordingly

Municipalities, Provincial Directorates of the relevant Ministries, Revenue Administration, Tax Offices, Social Security Institutions in order to fulfill the legal obligations stipulated in the relevant legislation,

In order to carry out the activities of the Company, to fulfill mutual obligations; to our customers, service providers, suppliers,

In order to carry out the occupational health and safety processes of the relevant persons, within the scope of occupational health and safety measures, the health information of the employees to the relevant health service providers and organizations and insurance companies,

Banks, financial institutions, public and private legal entities, public officials in order to carry out financial transactions of the persons concerned,

In matters related to public security and legal disputes, upon request and limited to the purpose of the request as required by the legislation, to prosecutors' offices, courts, enforcement offices, mediators, arbitration committees and relevant legal institutions and organizations,

Software, hardware, informatics and technology companies in order to install computer operating systems and computer programs used within our company, maintenance and repair of programs, and to carry out the necessary operations to ensure the security of data,

In the domestic transfer of sensitive personal data, by obtaining the explicit consent of the person concerned, in terms of sensitive personal data other than health and sexual life, in terms of union information, it can be processed and transferred to the relevant unions, official institutions and relevant persons limited to the activities of the company for the reasons stipulated by law.

In addition to the above-mentioned groups of relevant persons, your personal data are transferred to public institutions such as employees of our company, company partners, legal, financial and tax consultants, auditors, authorized public institutions and organizations such as ministries, judicial authorities, and relevant persons and organizations that we are in contact with for foreign trade transactions, persons, institutions and organizations permitted by the provisions of the payment service legislation, in accordance with the legislation and limited to the purpose of transfer.

4.Data Transfer Abroad:

Pursuant to the principles set forth in Article 4/2 of the KVK Law, by obtaining "Explicit Consent Texts" to be collected separately from the relevant persons whose data are processed, or in cases stipulated in Articles 5/2, 6/3 of the Law, without seeking explicit consent, in accordance with the rules in Article 9 of the Law. In accordance with the rules in Article 9 of the Law, after the announcement of foreign countries with adequate protection to be determined by the Personal Data Protection Board ("Board"), it can only be transferred to persons and organizations residing in these countries, and for countries where it is determined and announced that there is no adequate protection, provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and obtain the necessary permissions from the PDP Board for the relevant transfer.

In this context, within the framework of the limits stipulated by the Law No. 6698, by taking all necessary measures, your personal information may be transferred abroad within the scope of your legal relationship and activity with our company, in accordance with the legislation and limited to the purpose of transfer.

5.Method and Legal Grounds for Collecting Personal Data:

Your personal data; within the scope of company activities, limited to the specified purposes, in all kinds of verbal, written or electronic media, filling out application forms, creating personnel files, arranging and executing contracts, processing financial information for the establishment and maintenance of accounting, financial and social rights, purchasing, marketing, planning, company buildings and annexes, using a video camera recording system to ensure indoor and outdoor security in company buildings and annexes, fully or partially automated or non-automated means, provided that it is part of any data recording system.

In accordance with the legal regulations to which our company is subject, in order to provide products and services by our company and in this context, in order for our company to fulfill its obligations arising from contracts and legal legislation in a complete and accurate manner, your personal data and sensitive personal data are processed based on the explicit consent of the person concerned. In addition, within the scope of your contact with our company, your personal data is processed without explicit consent in the following cases.

It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of contracts between our Company and third real and legal persons,

It is mandatory for the company to fulfill its legal obligations,

The personal data has been made public by the data subject himself/herself,

Data processing is mandatory for the establishment, exercise or protection of a right,

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Because it is expressly provided for in the law,

In accordance with Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data and Article 5/1-h of the Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Disclosure Obligation, it is processed, collected and transferred limited to the purposes specified.

6.Rights of the Personal Data Owner (Right of Application) :

You may submit your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698 "regulating the rights of the data subject" to Danista Finansal Danışmanlık Hizmetleri Anonim Şirketi (19 Mayıs Mahallesi 19 Mayıs Cad. Nova Baran Plaza No:4/68 Şişli Istanbul address, by filling out the attached "APPLICATION FORM" of the relevant person who is the Personal Data Owner, you can personally deliver a signed copy of the form to the company address with documents identifying your identity, by secure electronic signature, mobile signature or by using the e-mail address you have notified to our company and registered in our company's system, by personal application via e-mail at info@danista.com, by application through a notary public or by methods determined by the KVK Authority.

Pursuant to Article 11 of the Law; everyone can apply to the data controller and request information about himself/herself;

Learn whether personal data is being processed,

Request information if their personal data has been processed,

To learn the purpose of processing personal data and whether they are used for their intended purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing,

To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

In case of correction, deletion or destruction of personal data, to request that these transactions be notified to third parties to whom personal data are transferred,

To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

Pursuant to Article 13/1 of the KVK Law No. 6698, in order to exercise your rights mentioned above, you must submit your applications to our company in writing or by the above written methods determined by the KVK Authority. Our Company will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged. In this context, if the relevant person's application is answered in writing, no fee will be charged up to ten pages, and a transaction fee of 1 TL will be charged for each page above ten pages. In the event that the response to the application is given in electronic recording media such as CD, flash memory, the fee that may be requested by our company will not exceed the amount of cost required by the recording media.