PDPL

1. PERSONNEL INFORMATION TEXT

Within the scope of the Law on the Protection of Personal Data No. 6698, Ensar Gemi ve Yan Sanayi Limited Şirketi (hereinafter referred to as Ensar) aims to ensure compliance with the Law on the Processing and Protection of Personal Data and to determine the principles to be followed by Ensar in fulfilling its obligations regarding the protection and processing of personal data.

In this context, in accordance with the Personal Data Protection Law No. 6698 (“LPPD”), as Ensar, in the capacity of Data Controller, your personal information is obtained within the framework explained below, through different channels and legal justifications, processed within the framework of processes such as recording and storage, transferred to third parties where permitted by the legislation, and all administrative and technical measures are taken for the security of the data in question and to prevent access by unauthorized persons.

As Ensar, we attach great importance to the processing and preservation of your personal data in accordance with the Personal Data Protection Law No. 6698 (“LPPD”). With full awareness of this responsibility, as defined in the LPPD, as Ensar, as the “Data Controller”, we process your personal data as explained below and within the limits stipulated by the legislation.
 

1.1. Personal and Special Personal Data We Process Regarding Employees

Our company stores and processes your personal data, such as your identity information, contact information, age, gender, health information, divorce decisions, family status information, photocopies of your identity papers, health reports, marital status, as well as your employment history, education status, data on seminars and on-the-job training you have attended, and all information required for taxation and general insurance transactions, which are our legal obligations, in accordance with the law.

Personal Data:

• Identity Information: TR ID No, Name, surname, place / date of birth, signature, marital status, etc.

• Contact Information: Phone number, Email address, etc.

• Location Information: Address information etc.

• Personal Information: Gender, military status information, citizenship information, etc.

• Legal process: Criminal record, custody document, etc.

• Physical Space Security: Camera recordings, entry and exit records, etc.

• Professional Experience: Title, professional experience, etc.

• Finance: Salary information, account number, etc.

Special Personal Data:

• Health Information: SRC / Psychotechnical results, health information, etc.

• Criminal Conviction Information: Criminal Conviction etc.

• Biometric and Genetic Information: Blood type etc.

• Information Regarding Security Measures: Criminal record, etc.
 

1.2. Collection, Processing and Purposes of Processing of Personal Data

Employee data will be processed within the scope specified in Articles 5 and 6 of the PDPL for the following purposes in order to ensure that the activities implemented by Ensar are carried out in accordance with the relevant legislation and practices:

Processing of personal data within the scope of fulfilling the purpose required for the execution of the employment contract

Preparing the employee payrolls, informing them and delivering them to the employees,

Planning and executing the necessary procedures to make salary payments to employees and to carry out the necessary applications for the execution of payment processes,

Planning and executing the necessary procedures for the implementation of employee leave approval and arrangements,

Planning and execution of the necessary procedures for the implementation of employees' entry and exit procedures,

Within the scope of fulfilling the requirements of the Labor Law, Occupational Health and Safety Law, Social Security Law, Social Insurance and General Health Insurance Law and other relevant Public Institutions and Organizations within the scope of law and legislation.

Planning and implementation of employee personnel files to be organized and recorded for possible audits,

Planning and execution of SGK notifications, İŞKUR notifications and legal obligation notifications of other Public Institutions and Organizations,

Planning and implementation to ensure the opening of a compulsory individual retirement insurance account,

Planning and implementation of the information storage, reporting and notification obligations of the relevant laws and regulations and other public institutions and organizations,

Planning and implementation to provide the necessary processes and documents for possible public institution audits,

Planning and implementation of court decisions,

 

Carrying out initial employment examinations, creating and keeping examination records, and being prepared for health inspections that may be conducted in this regard,

Being prepared for possible health inspections by carrying out periodic health examinations of employees and creating and keeping examination records,

The institution must approve the rest and relaxation reports received from external institutions, report them to the SSK institution and keep them on record,

Within the scope of ensuring safety in the workplace

Recording of personnel entries and exits to the workplace,

Recording of other people's entry and exit to the workplace,

Within the scope of institution administration, execution of production and commercial activities and implementation of institution policies.

Measuring, planning and recording employee performance,

Providing communication with the employee via e-mail, mobile devices, etc.

Recording and reviewing the information of candidates applying for a job to recruit new employees and evaluating and planning their suitability for the position.

Sharing the interview notes taken on the CV within the scope of the application evaluation with the relevant Human Resources personnel, assistant managers, managers and relevant unit managers.

Confirmation of the data shared by the candidate through the reference information in the CV.

Recording resume information in case a suitable position opens in the future

 

1.3. Duration of Processing Personal Data

Your Personal Data will be processed in accordance with the legislation on the protection of personal data, especially the PDPL, and the periods imposed by other legislation (within the scope of legal periods such as statute of limitations, and periods related to legitimate interests), in any case, as long as the following legitimate purposes are not eliminated.

• It is clearly provided for in the laws.

• The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.

• It is mandatory for the data controller to fulfill its legal obligations.

• It has been made public by the relevant person himself.

• Data processing is necessary for the establishment, exercise or protection of a right.

• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

 

1.4. To Whom and For What Purposes Can Processed Personal Data Be Transferred?

Your processed personal data may be transferred to our business units for the purpose of ensuring that the activities carried out by Ensar are carried out in accordance with the relevant legislation and procedures, to carry out the necessary operational activities, to ensure workplace safety, to workplace authorities, to persons or third parties from whom services are received, to legally authorized public institutions and organizations, primarily the relevant ministries, and to private individuals, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.

 

In this context, Ansar:

Sharing identity data with institutions and organizations that organize training in order to participate in training such as vocational training, professional qualification, machine operation, first aid, etc.

Within the scope of payroll and payment, the necessary data is shared with relevant organizations, business partners, service providers or third parties.

 

1.5. Method and Legal Reason for Collecting Personal Data

Your personal data may be collected verbally, in writing or electronically through ENSAR units and offices, mobile applications and similar means. Your personal data collected in this way may be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL, as well as for the purposes specified in Articles (2) and (3) of this text.

 

While carrying out its operational processes for its employees, Ensar acts in accordance with the Personal Data Processing and Protection Policy and the Occupational Health and Safety Law No. 6331, Social Insurance and General Health Insurance Law No. 5510, Labor Law No. 4857, Tax Procedure Law No. 213 and the requests of relevant public institutions and organizations regarding the personal data it processes.

 

Ensar stores your personal data only for the period specified in the relevant legislation and/or internal policies or for the period required for the purpose for which they are processed. In this context, first of all, the period foreseen for the storage of personal data in the relevant legislation is complied with, and in cases where such a period is not foreseen, personal data is stored for the period required for the purpose of processing in accordance with the guidelines in the internal policies. In the event that the period expires or the reasons requiring processing are eliminated, personal data is deleted, destroyed or anonymized.

 

1.6. Your Rights as a Data Subject, Listed in Article 11 of the PDPL

In order to exercise your rights over your personal data in accordance with Article 11 of the Personal Data Protection Law No. 6698, personal data owners can apply to our Business at muhasebe@ensargemi.com ;

You can get detailed information about your rights regarding the protection of your personal data,

You can learn whether your personal data is being processed,

If your personal data has been processed, you can request information about it,

You can learn the purpose of processing personal data and whether they are used in accordance with their purpose,

You can obtain information about knowing the third parties to whom personal data is transferred domestically or abroad,

Request correction of personal data if it is processed incompletely or incorrectly and request notification of the action taken to third parties to whom personal data is transferred,

Request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the PDPL and other relevant laws, and request that the process carried out within this scope be notified to third parties to whom personal data has been transferred,

Object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,

In case of damage caused by unlawful processing of personal data, the person has the right to demand compensation for the damage.

 

1.7. Requests and Demands of Personal Data Owners

In accordance with Article 10 of the Personal Data Protection Law, Ensar informs the personal data owner about their rights and guides the personal data owner on how to use these rights. ENSAR carries out the necessary channels, internal operations, administrative and technical arrangements in accordance with Article 13 of the Personal Data Protection Law in order to evaluate the rights of personal data owners and to provide the necessary information to personal data owners.

In order to exercise your rights specified above, you can personally deliver your request, which includes the necessary information to establish your identity and explanations regarding the right you wish to exercise among the rights specified in Article 11 of the PDPL, to İstasyon Mah. 1495/2 Sok. No:1 Gebze/Kocaeli, along with documents to establish your identity, send it through a notary or other methods specified in the PDPL, or send it to muhasebe@ensargemi.com .

If your application is not answered within the period of 30 calendar days deemed appropriate under the law, or if your application is rejected, or if you find the response to your application inadequate, you, as the relevant person, may file a complaint with the Personal Data Protection Board within 30 days from the date you learn of Ensar's response and, in any case, within 60 calendar days following the application date.

In order for third parties to request an application on behalf of personal data owners, there must be a special power of attorney issued through a notary public on behalf of the person who will make the application from the data owner