Privacy Notice

This English version is provided for information purposes only; in case of any discrepancy, the Turkish version shall prevail.

KAYI SAVUNMA

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA

Pursuant to the provision of Article 10, entitled “Data Controller’s Obligation to Inform”, of the Personal Data Protection Law No. 6698 (the “Law”), we, KAYI SAVUNMA (the “Company”), as the data controller, hereby inform you of the matters relating to the processing of the personal data you have shared on our website.

a. Personal Data Processed

Personal data means any information relating to an identified or identifiable natural person. We obtain your personal data through the application screen on the “Human Resources” page under the “Careers” main heading and through the “Contact Form” under the “Contact” main heading on the Kayı Savunma website.

Through the “Human Resources” application screen, the identity, contact, CV, education and professional experience information of candidates applying to work at our Company; through the “Contact Form” screen, the identity and contact information of our visitors; and, for our employees/visitors making applications under Article 11 of the KVKK, their identity, contact and address information, their relationship with our Company and their employment status information will be processed.

b. Purposes of Processing Personal Data

Your data is processed for the purposes of conducting the application processes of employee candidates, conducting intern/student selection and placement processes, conducting activities in compliance with the legislation, conducting employee satisfaction and loyalty processes, implementing our Company’s human resources policies, evaluating and responding to the suggestions, requests and complaints you submit to us through our website, and carrying out improvement work in line with such submissions.

c. Legal Grounds for Collecting Personal Data

Your personal data is obtained electronically by automated means through the forms on our website for the purposes and within the scope set out above, and is processed on the basis of the following legal grounds:

The existence of your explicit consent, pursuant to Article 5 of the KVKK,
It being expressly provided for by law,
The processing of personal data belonging to the parties to a contract being necessary, provided that it is directly related to the establishment or performance of that contract,
Where you are unable to express your consent due to actual impossibility, or where processing is mandatory for the protection of the life or bodily integrity of a person whose consent is not deemed legally valid, or of another person,
It being mandatory for the Company to fulfil its legal obligations,
The data having been made public by the data subject themselves,
Data processing being mandatory for the establishment, exercise or protection of a right,
Data processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

d. Transfer of Personal Data

Within the scope of the purposes set out and specified above, your personal data may be transferred to our shareholders, our affiliates and subsidiaries, our business partners, our suppliers, public institutions or organisations authorised to request such data under a legal obligation, regulatory and supervisory authorities for the purpose of meeting their requests, and competency assessment firms that we have authorised to process data on our behalf.

e. Retention Period of Personal Data

Where a retention period for the data is set out in the Law or the relevant legislation, such data will be retained for at least that period. Where all conditions for processing personal data have ceased to exist, or where the retention period declared by us or set out under the legislation has expired, your data will be erased, destroyed or anonymised ex officio on the first periodic destruction date or within 6 months at the latest.

f. Your Rights under Article 11 of the KVKK

Subject to the cases set out in Article 28 of the KVKK, entitled “Exceptions”, within the framework of Article 11 of the KVKK, as personal data subjects you have the right to:

learn whether your personal data is processed,
request information if your personal data has been processed,
learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
know the third parties to whom your personal data is transferred, domestically or abroad,
request the rectification of your personal data if it has been processed incompletely or inaccurately,
request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
request that the operations carried out pursuant to sub-paragraphs (e) and (f) above be notified to the third parties to whom your personal data has been transferred,
object to any outcome to your detriment arising from the analysis of your personal data exclusively by automated systems,
request compensation for the damage if you suffer damage due to the unlawful processing of your personal data.

You may submit a written request for information regarding the rights listed above, together with the information necessary to verify your identity. This request may be made by completing the Application Form prepared in accordance with the KVKK on the https://kayisavunma.com.tr/ Website and delivering a signed copy by hand to the address Ankara Sanayi Odası 1. Organize Sanayi Bölgesi Nahcivan Cad. No:2 Sincan/ANKARA. The form may also be submitted through a notary public, by the other methods specified in Law No. 6698, or to the KEP (registered electronic mail) address ([KEP address]) with a secure electronic signature or mobile signature, or by using the email address previously notified to the data controller by the data subject and registered in the data controller’s system.

Your requests regarding your personal data will be evaluated and answered free of charge within 30 days at the latest from the date on which they reach the relevant department. Should the process require an additional cost, a fee may be charged to you under the relevant regulation of the Personal Data Protection Authority. If your application is rejected, the reasons for rejection will be communicated to you at the address specified in your application, primarily by email or post, or, where possible, by the method through which the request was made.

Respectfully submitted for your information.