EN
DEALER LOGIN

Personal Data Protection Law (KVKK) Information Text

 

ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ ANONİM ŞİRKETİ

As ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ ANONİM ŞİRKETİ ("Orka Banyo"), resident at Halkalı Merkez, Dereboyu Cad. No:4 Kat:10 Ofis No:78 34303 Küçükçekmece / İstanbul, with MERSIS no. 0647035843900021, through this Privacy Notice (the "Privacy Notice") we are obliged, under Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform issued by the Personal Data Protection Authority, to inform you of the purposes for which your personal data will be processed, to whom and for what purposes it will be transferred, the method of collection and legal basis, and the rights you may exercise in relation to the processing of your data.

A. DEFINITIONS UNDER THE PERSONAL DATA PROTECTION LAW

As used in this text;

Personal Data: means any information relating to an identified or identifiable natural person,

Special Categories of Personal Data: means data relating to a person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data,

Processing of Personal Data: means any operation performed on personal data, from the time it is collected until it is deleted, destroyed or anonymized, including obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data,

Personal Data Protection Law ("KVKK"): means the Personal Data Protection Law No. 6698,

Data Controller: means the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

In this context, the Company, in its capacity as data controller and by taking all necessary technical and administrative measures, will process your personal data within the limits set by all legislation on the protection of personal data, primarily the Constitution of the Republic of Türkiye, the international agreements to which our country is a party, and the Personal Data Protection Law No. 6698 ("KVKK"), in accordance with the principles set out in Article 4 of the KVKK:

  • Being in conformity with the law and rules of honesty,
  • Being accurate and, where necessary, up to date,
  • Being processed for specified, explicit and legitimate purposes,
  • Being relevant, limited and proportionate to the purposes for which they are processed,
  • Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

B. FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?

In addition to the data collected and processed within the framework of the Privacy Notice, Orka Banyo may process your personal data in the following categories pursuant to Articles 4 and 10 of the KVKK. These data are:

  TYPES OF PERSONAL DATA COLLECTED IN THIS CONTEXT
Identity Information - Driver's License Information The data subject's place of birth, national ID number (TCKN), marital status, gender, population registry record document, and driver's license information
Family Members and Relatives Information The data subject's information requested within the scope of the minimum living allowance (AGİ) (father's name, mother's name, spouse's name, spouse's employment status, spouse's income status, names of children living together with or dependent on the data subject; parents' names, national ID numbers, dates of birth, genders, biological/step-relationship status, and education status)
Contact Information The data subject's address, telephone number, email address, and similar contact information enabling the person to be reached
Résumé Information – CVs or résumés, motivation letters, education status, hobbies and areas of interest, scholarships and awards received, certificates, professional inclinations, knowledge and skills, clubs or associations of which the person is a member, foreign language and expertise certificates, conferences attended
Financial Information The data subject's bank account information
Employee Transaction Information The data subject's workplace registration number, start date, entry and exit records, travel information for trips made on behalf of the company, meeting information, email traffic monitoring information, vehicle usage information, company phone line usage information, and fingerprint or eye scanning operations so that Orka Banyo can carry out its operations
Employee Performance and Career Development Information The data subject's foreign language, education status, stress, attention, mathematics and career tests, performance evaluation, and exit evaluation form
Personnel File Information The data subject's employment contract, copy of diploma, occupational health and safety (OHS) training information, payroll information, social security (SSK) registration number, salary information, and social security (SGK) premiums
Fringe Benefits and Entitlements Information The data subject's private pension information, asset assignment records, and private health insurance (information on whether the person benefits from it)
Special Categories of Personal Data The data subject's incapacity for work and maternity reports, private health insurance health information, blood type, nationality, chronic health problems, medications used, surgical history, health reports, and sensitive data such as religion, disability status, and criminal record obtained indirectly at the time of hiring
Legal Proceedings and Compliance Information Court summonses, notifications, and criminal record reports belonging to the data subject
Visual Data The data subject's photographs, videos, and camera recordings
Health Information This data category refers to data types such as information on disability status, blood type information, personal health information, and information on devices and prostheses used.
Professional Experience Information This data category refers to data types such as diploma information, courses attended, in-service training information, certificates, and transcript information.
Physical Premises Security This data category refers to data types such as audio and camera recordings.
Risk Management This data category refers to data types such as information processed for the management of commercial, technical, and administrative risks.

Identity information is processed to fulfill our obligations under the contracts between the parties and under legislation, and to carry out the operational activities required in business processes.

Family members and relatives information is processed to register you in the mandatory private pension system, to fulfill our obligations under the minimum living allowance (AGİ), and to verify the accuracy of the information you declare in the Family Status Declaration, 

Contact Information is processed to be able to get in touch with the data subject,

Résumé Information is processed to be able to audit compliance regarding acceptance into the solution partnership,

Financial information is processed to ensure payment of the payments and ancillary obligations we must make under the solution partnership agreement,

Transaction information is processed so that you can be distinguished from Orka employees, or, if you leave the solution partnership, to collect information on working hours, to ensure security through fingerprint or eye scanning operations, to determine your rights, and to make your payments accurately, on time, and in accordance with the law,

Performance and career development information is processed to track your work performance and to ensure that you can be evaluated objectively in a possible promotion process,

Personnel file information is processed to fulfill our legal obligations and to keep the personnel file we are obliged to maintain in a lawful manner,

Fringe benefits and entitlements information is processed to carry out the operational process relating to the fringe benefits we provide,

Special categories of personal data are processed to determine our legal obligations and provide equal working conditions for Orka personnel in different circumstances, to carry out in-house health planning, to be able to properly complete the solution partnership initial and periodic examination form, and on the grounds that it is directly related to the establishment or performance of a contract, it is necessary for the data controller to fulfill its legal obligation, processing the personal data of the parties to the contract is necessary, processing is necessary for the establishment, exercise or protection of a right, and processing is necessary for the legitimate interests of the data controller.

Legal proceedings and compliance data: These data are processed on the grounds that it is directly related to the establishment or performance of a contract, it is necessary for the data controller to fulfill its legal obligation, processing the personal data of the parties to the contract is necessary, processing is necessary for the establishment, exercise or protection of a right, and processing is necessary for the legitimate interests of the data controller.

Visual and audio data: These data are processed on the grounds that it is directly related to the establishment or performance of a contract, it is necessary for the data controller to fulfill its legal obligation, processing the personal data of the parties to the contract is necessary, processing is necessary for the establishment, exercise or protection of a right, and processing is necessary for the legitimate interests of the data controller.

Health data: These data are processed on the grounds that it is directly related to the establishment or performance of a contract, it is necessary for the data controller to fulfill its legal obligation, processing the personal data of the parties to the contract is necessary, processing is necessary for the establishment, exercise or protection of a right, and processing is necessary for the legitimate interests of the data controller.

Professional Experience Information: Data types such as diploma information, courses attended, in-service training information, certificates, and transcript information  are processed on the grounds that processing is necessary for the establishment, exercise or protection of a right and processing is necessary for the legitimate interests of the data controller.

Physical Premises Security Data:  Data types such as audio and camera recordings  are processed on the grounds that processing is necessary for the establishment, exercise or protection of a right.

Risk Management Data: These data are processed on the grounds that it is directly related to the establishment or performance of a contract, it is necessary for the data controller to fulfill its legal obligation, processing the personal data of the parties to the contract is necessary, processing is necessary for the establishment, exercise or protection of a right, and processing is necessary for the legitimate interests of the data controller.

C. METHOD OF COLLECTION OF PERSONAL DATA AND LEGAL BASIS FOR COLLECTION

Your personal data may be collected through;

  • The information and documents you share during the solution partnership acceptance process and the tests you are subjected to,
  • Evaluations made by your department managers and directors,
  • The solution partnership company phone line and vehicle tracking systems planned to be allocated to you,
  • Personality tests conducted by independent companies,
  • Visuals or photographs taken during the solution partnership process.

The personal data collection activity carried out by the Company is performed under Article 5, paragraph 2 of the KVKK, on the following grounds:

  • It is necessary for the fulfillment of our legal obligations,
  • It is necessary for the legitimate interests of the Company, provided that your fundamental rights and freedoms are not violated,
  • It is expressly provided for by law,
  • Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract.

Regarding those in the category of special categories of personal data;

  • Your health data will be processed under Article 6, paragraph 3 of the KVKK, for the purpose of planning and managing health services and their financing, by our workplace physician or persons under an obligation of confidentiality, or by authorized institutions and organizations.
  • Photographs in the visual data category consist of group photographs taken with your consent during processes within the company. If you do not consent to your visual data being processed through group photographs and displayed within the company, you must not appear in these photographs.
  • The population registry record document is requested from you in order to verify the accuracy of the information you declare in the Family Status Declaration. In order to avoid facing legal sanctions due to an incorrect or erroneous declaration, the Company will process the relevant document, as it is necessary for its legitimate interests, so that it can carry out this verification. When submitting the population registry record document to us, you may black out any information that does not appear in the Family Status Declaration and is not necessary to verify your information.

D. TO WHOM ARE YOUR PERSONAL DATA TRANSFERRED?

Your personal data;

  • may be transferred to users who wish to receive services through ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ ANONİM ŞİRKETİ   and to all members of ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ ANONİM ŞİRKETİ  ,
  • to our business partners, supplier companies, group companies and shareholders with whom we cooperate and from whom we receive services in order to provide our services and activities,
  • to lawyers, auditors and other third parties from whom we receive services, and to public authorities, in order to fulfill our legal obligations,
  • to your attorneys and representatives authorized by you, where required within the scope of the Company's legal obligations and requested, limited to the request, pursuant to Article 8 of the KVKK and within the exceptions set out in Article 5, paragraph 2 of the KVKK mentioned above, and, where necessary, by seeking your explicit consent. If you declare your consent by filling in the relevant section of the explicit consent text to be presented to you;
  • your mobile phone number, email address, Skype address, IP address, and other contact details, may be transferred to the company from which we receive support so that bulk SMS messages can be sent to your mobile phone and the specified communication channels, by any technical or non-technical method that can be used to contact you, in order to send greeting messages on official and religious holidays and to deliver announcements on open positions and supply distribution.

E. WHAT ARE YOUR RIGHTS WITHIN THE SCOPE OF PROCESSING?

With respect to your personal data, you have the right to;

  • Learn whether your personal data is processed,
  • Request information if your personal data has been processed,
  • Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
  • Know the third parties to whom your personal data is transferred, domestically or abroad,
  • Request correction of your personal data if it is incomplete or inaccurately processed,
  • Request deletion or destruction of personal data under the conditions set out in Article 7 of the KVKK,
  • Request notification of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom the personal data has been transferred,
  • Object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
  • Request compensation for the damage if you suffer damage due to unlawful processing of your personal data.

As ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ ANONİM ŞİRKETİ  , operating in compliance with the KVKK in its capacity as data controller, resident at … and at Halkalı Merkez, Dereboyu Cad. No:4 Kat:10 Ofis No:78 34303 Küçükçekmece / İstanbul, with MERSIS no. 0647035843900021, we respect the rights of you, our valued data subjects, and endeavor to assist in fulfilling the requests in your application. 

Under the conditions set out in Article 7 of the KVKK, you may request from the Company the destruction (deletion, destruction, or anonymization) of your personal data. You may also request that third parties to whom the data has been or may be transferred be informed of your destruction and/or correction request. However, which method is appropriate will be assessed by us according to the circumstances of the specific case, after evaluating your destruction and correction request. In this regard, you may always request information from the Company on why the destruction method selected by the Company was chosen. Your requests will be concluded free of charge within thirty days at the latest from the time they are delivered to the Company through the specified channels. Your application will be answered in accordance with the relevant provisions of the KVKK, and the Company may request certain verification information from you in order to confirm that the applicant is the right person; this information will be requested solely to determine who the actual data subject is and to ensure that the application results are shared with the right person.

I declare that I have been informed by the Company, which holds the status of data controller, that I have read and understood the Privacy Notice on the Processing and Protection of Personal Data of Orka Banyo, that I have signed it of my own free will, and that I accept with explicit consent all matters on which I have not made a reservation.