This Privacy and Data Protection Policy (hereinafter referred to as the “Policy”) aims to establish the conditions and terms regarding the use of personal data obtained and/or, if any, received from third parties within the scope of all services provided by DATASTIL TECHNOLOGY.  

DATASTIL TECHNOLOGY,   in accordance with the national legislation in force, including the Law No. 6698 on the Protection of Personal Data (“Law”), declares that it will act in compliance with the protection of personal data and adopts the principle of preserving the confidentiality of personal data. In this regard, DATASTIL TECHNOLOGY also states that it will comply with all legal obligations related to the processing of personal data. 

In this regard, this Policy has been prepared to provide information on how your personal data is processed and protected by DATASTIL TECHNOLOGY  and to ensure the highest level of transparency possible. 

1. DEFINITIONS

In accordance with the Law and this Policy and Information Notice; 

1. Data Controllers:

Company Name: DATASTIL TECHNOLOGY SOLUTIONS INFORMATION INDUSTRY AND TRADE LIMITED COMPANY  Address : Headquarters: GUlbahçe Mah. GUlbahçe Cad. Teknopark Izmir A8 Building Apt. No:1/45/14 Urla / Izmir  (The company will be referred to as “DATASTIL TECHNOLOGY ” within the scope of this DATA PROTECTION AND PRIVACY POLICY and INFORMATION REGARDING THE PROTECTION OF YOUR PERSONAL INFORMATION.)

1. “Personal Data”: Any kind of information relating to an identified or identifiable natural person.
2. “Processing of Personal Data”: Processing of personal data refers to any operation or set of operations performed on personal data, whether by automated means or non-automated means as part of a data recording system, including collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use, related to data.
3. “The Institution” refers to the Personal Data Protection Authority.

1. METHOD OF DATA COLLECTION

DATASTIL TECHNOLOGY   collects and uses relevant personal data belonging to you in order to perform the following operations. Your personal data is collected through methods such as “Email from the Candidate, In Person, Internet Environment, Employment Documents, Social Security Institution System, Relevant School Administrations, Correspondence from Official Institutions, Health Records, Photographs, Vehicle Tracking System, Camera Recordings, Directly from the Individual, Personal Files, Notice Boards, Advertisements, Connection via VPN or Support Software, Working at the Location, Internet Access Logs, Firewall, Notifications from Judicial Authorities, Contracts, Emails, Telephone, Invoices, Expense Receipts, Freelance Professional Receipts, Producer Receipts, Documentations and Current Account Information, Signature Circulars, Training Attendance Forms, Reports, Verbal Communications, Business Cards, Website, References.”

If your data is collected through a new method, this policy will be updated accordingly. 

III. DATA AND DATA CATEGORIES

The data types that are processed within the scope of the services provided by DATASTIL TECHNOLOGY   and are considered as personal/sensitive personal data in accordance with Law No. 6698 on the Protection  of Personal Data are listed below.

1. Identity data (Name, Surname, Place of Birth, Date of Birth, Marital Status, Nationality, Copy of ID Card, Family Status Declaration Form, Certificate of Civil Registry, Copy of Driver's License, SRC Document, Mother's Name, Father's Name, Registered City, District, Neighborhood, Village, Volume Number, Family Sequence Number, Serial Number, Registration Number, Identity Number, Signature, Signature Circular, Social Security Number, Delivery and Recipient Information on the Invoice, Last Name) 
2. Contact data (Address, Phone Number, Email, Residence Certificate)
3. Employment data (CV (Curriculum Vitae), Employment History, Absence Certificates, IŞKUR Registration Certificate, Application Form, Military Discharge Certificate or Exemption Certificate, Job Application Form, Entry/Exit Notification, Entry/Exit Date, Entry/Exit Records (PDKS), Payroll, Timekeeping Records, Disciplinary Proceedings Minutes, Occupation Code, Gross Salary, Working Days, Salary Information, Previous Surname, Bonus, Number of Working Days, Number of Absent Days, Reason for Absence, Occupation Code, Job Title, Social Security Service Extract)
4. Legal transaction data (Total Debt Amount of the Employee, Execution Office and File Number)
5. Customer transaction data (Invoice, Invoice Information, Check Details, Order Information, Request Information)
6. Transaction security data (IP Information, Internet Login Records, Password)
7. Financial data (IBAN, Copy of Bank Account Statement)
8. Professional experience data (Copy of Diploma, Attended Courses, In-Service Training Information,
9. Certificates, Education Information, Professional Training/Course/Seminar Attendance Certificates, SRC Document,  Occupational Health and Safety Specialist Certificate Type and Number, Professional Competency Certificate for the Job, Training Certificates, Emergency Response Training Certificate, Education Status. )
10. Health information data (Blood Type Card or Document Showing Blood Type, Medical Report, All Health Test Results, Entry/Periodic Examination Forms, Health Tests, Blood Tests,
11. Chest X-ray/Audiometry/SFT/EKG Diagnosis of Disease,)
12. Conviction and Security Measures data (Criminal Record)
13. Visual and Audio Recordings data (ID Photo, Photograph, Voice Recording)
14. Physical Space Data (Entry-Exit Camera Recordings, IP Camera Footage)
15. Appearance and Attire Data (Body Measurements, Shoe Size)
16. Location Data (Location)

It can be processed.

1. PURPOSES OF PERSONAL DATA PROCESSING:

Your personal data will be processed in accordance with the Law on Protection of Personal Data No. 6698 and for the purposes specified below, including but not limited to them.

As part of the services provided by DATASTIL TECHNOLOGY ;

Your collected data;

1. Execution of emergency management processes
2. Execution of information security processes
3. Execution of employee candidate / intern / student selection and placement processes.
4. Execution of employee candidate application processes
5. ulfillment of contractual and regulatory obligations for employees
6. Execution of processes related to rights and benefits for employees
7. Execution of audit / ethical activities
8. Execution of training activities
9. Execution of access permissions
10. Compliance with regulations in the execution of activities
11. Execution of finance and accounting tasks.
12. Ensuring physical space security
13. Execution of assignment processes.
14. Tracking and execution of legal affairs
15. Execution of communication activities
16. Planning of human resources processes
17. Execution / audit of business activities
18. Execution of occupational health and safety activities
19. Execution of business continuity activities
20. Execution of logistics activities
21. Execution of procurement processes for goods/services.
22. Execution of sales processes for goods/services
23. Execution of customer relationship management processes
24. Execution of activities aimed at customer satisfaction
25. Organization and event management
26. Execution of advertising/campaign/promotion processes
27. Execution of storage and archiving activities.
28. Execution of contract processes
29. Tracking of requests/complaints
30. Execution of supply chain management processes
31. Execution of product/service marketing processes
32. Creation and tracking of visitor records
33. Providing information to authorized individuals, institutions, and organizations

6The processing of personal data will be carried out in accordance with the conditions and purposes stated in Articles 5 and 6 of Law No. 698. Furthermore, your personal data may be stored both in digital and physical formats.

1. WHERE ARE PERSONAL DATA STORED AND PROCESSED?

Personal data can be stored and processed in the electronic and physical environment of DATASTIL TECHNOLOGY in compliance with the purposes stated in this Policy and in accordance with the regulations to be issued by the Authority. 

1. TRANSFER OF PERSONAL DATA:

Personal data and the new data obtained through the use of personal data are processed by DATASTIL TECHNOLOGY ;

“The Cloud Computing Infrastructure, Employee Entry and Exit Reporting   for Social Security Institution (SGK) and Law Enforcement Forces, Notification for Obtaining Work Permits, Combatting Informal Employment, SGK Declarations, Execution of Personnel Payments, Mandatory Training Applications, Vocational Competence Certificate, Corporate Training, Recording of Entry and Exit of Individuals for Company Security, Informing Official Institutions and Individuals, Generating Data for Audit Reports, Obtaining Consultancy Support for the Execution of Legal Processes, Sharing E-Declarations with Incentive Consultants for the Benefit of State Incentives in Employee SGK Premium Payments, Announcing and Sharing Events or Organizational Activities, Advertising, Event Reservations, Employee Loan Applications, Car Rental, Hotel Booking for Travel, Cloud-based Email,  BES Instructions, Evidence, Supplier Information, Making Contracts with Occupational Safety Specialists as Required by Legal Obligations, Fulfillment of Legal Obligations, Occupational Health and Safety, Reporting Occupational Accidents in Accordance with Laws No. 4857, 6331, and 5510, Outsourcing IT Technical Support Services, Gift Delivery, Circulation, Conducting Necessary Examinations for Periodic Medical Checks through Affiliated Laboratory Companies, Occupational Disease Notifications” may be transferred to natural persons or private legal entities, our suppliers, and authorized public institutions and organizations, lawyers, Certified Public Accountants (SMMMs), provided that the conditions and purposes of personal data processing specified in Articles 8 and 9 of Law No. 6698 are complied with and necessary measures are taken. 

Your personal data; 

1. In order to provide and/or implement a service to the data subject,
2. Necessity of data processing for the protection of legal interests of DATASTIL TECHNOLOGY and/or third parties, or for the legitimate interests of the data controller;
3. Compliance with all applicable legislation by DATASTIL TECHNOLOGY;
4. Processing of data for the establishment, exercise, or defense of a right.

VII. PRIVACY POLICY

Personal data is confidential and The necessary technical and administrative measures are taken to protect the personal data collected by“ DATASTIL TECHNOLOGY ” and prevent unauthorized access, ensuring that individuals are not harmed. Within this framework, software compliance with standards, careful selection of third parties, and adherence to data protection policies within the company are ensured. Whether employees or other individuals, the data in“ DATASTIL TECHNOLOGY ”  is confidential. No one can use, copy, reproduce, transfer to others, or use this data for any purpose other than contractual or legal compliance without proper

authorization.     

VIII. RIGHTS OF THE DATA SUBJECT REGARDING THE PROTECTION OF PERSONAL DATA:

1. In accordance with Article 11 of the Law; you can apply to DATASTIL TECHNOLOGY,
2. The right to know whether personal data is being processed or not,
3. The right to request information if personal data has been processed,
4. The right to know the purpose of processing personal data and whether they are being used for their intended purpose,
5. The right to know the third parties, whether located domestically or internationally, to whom personal data is transferred,
6. The right to request the correction of personal data that is incomplete or inaccurate,
7. The right to request the erasure or destruction of personal data in accordance with the conditions stipulated in the relevant legislation,
8. The right to request notification to third parties to whom the personal data has been transferred regarding the rectification, erasure, or destruction carried out in accordance with the relevant legislation,
9. The right to object to a decision based solely on automated processing, including profiling, which produces legal effects concerning the individual or significantly affects them,
10. They have the right to request compensation for any damages suffered as a result of the unlawful processing of their personal data.

1. PERSONAL DATA RETENTION PERIOD:

DATASTIL TECHNOLOGY; will retain personal data for as long as necessary to fulfill the obligations arising from the relevant service and its contract, within the framework of the conditions specified in this Policy,  in order to ensure the optimal utilization of the service. 

In addition, DATASTIL TECHNOLOGY  may retain personal data for a limited period, as determined by the relevant legislation, in order to perform necessary defenses in the event of any dispute that may arise. Detailed information regarding this matter can be accessed through the data retention and disposal policy.

1. CONTACT:

To exercise your aforementioned rights, please submit a written request along with the necessary identification information to establish your identity and include explanations regarding the specific right you intend to exercise;

1. info@datastil.com with the completion of the personal data application and response form available at
2. After preparing a formal petition, it should be sent or personally delivered to the address “Batı Sitesi Mah. 2307/2 Sok. Igt Turkey Blok No:9 Yenimahalle/Ankara   ” with a clear indication that the subject is related to KVKK, accompanied by a signed hard copy 
3. The Personal Data Application and Response Form or a duly prepared petition can be submitted to the email address info@datastil.com using a secure electronic signature, mobile signature, or the electronic mail address previously notified to DATASTIL TECHNOLOGY and registered in the data controller's system.

A comprehensive regulation, the DATASTIL TECHNOLOGY   Personal Data Application and Response Procedure, has been established in this regard.

In principle, no fee is charged for the necessary procedures related to the requests. However, if the procedures require a cost, it is possible to request a fee based on the tariff determined by the Personal Data Protection Authority in accordance with Article 13 of the Law on Protection of Personal Data No. 6698.

1. AMENDMENT OF DATA PROTECTION and PRIVACY POLICY:

This policy consists of 6 pages, and DATASTIL TECHNOLOGY   may update this Data Protection and Privacy Policy in accordance with the requirements of relevant laws from time to time. Therefore, we kindly request you to regularly visit the website https://www.datastil.com/ to access the most up-to-date version. These updates will be effective from the date of publication.