Document Information
- Document Name: Personal Data Protection Policy
- Document Purpose: Planning the processes for the protection of personal data and determining the principles to be applied
- Publication Date: 06.12.2022
- Version No: 1
1. PURPOSE
The right of every individual to request the protection of their personal data is a sacred right derived from the Constitution. As Çalışkan Galvaniz Metal İnş. San. Tic. Ltd. Şti., we consider fulfilling the requirements of this right to be one of our most important duties. For this reason, we place great importance on the lawful processing and protection of your personal data.
2. SCOPE
This policy covers all processing activities carried out on the personal data managed by Çalışkan Galvaniz Metal İnş. San. Tic. Ltd. Şti. Obtaining, recording, storing, modifying, disclosing, transferring, and other operations on data, whether wholly or partly by automated means or as part of any data recording system, fall within this scope.
3. DEFINITIONS
- Recipient Group: The category of persons or organizations to which data is transferred.
- Explicit Consent: Consent given on the basis of being informed and of free will.
- Anonymization: Arranging personal data so that it can no longer be associated with an identified or identifiable person.
- Personal Data: Any information relating to an identified or identifiable natural person.
- Data Controller: The natural or legal person who determines the purposes and means of processing personal data.
4. GENERAL PRINCIPLES
- Compliance with law and principles of good faith: Personal data processed must be lawful.
- Accuracy and up-to-dateness: Personal data must be kept accurate and, when necessary, up to date.
- Relevance to purpose: Data must be processed only in a way that is relevant and proportionate to the purpose of processing.
- Retention: Data must be stored only for as long as necessary and destroyed once the purpose of processing no longer exists.
6. BREACH NOTIFICATIONS
In the event of a breach, employees report the situation to Management. Management creates an action plan where it deems necessary and notifies the relevant authorities of breaches within 72 hours.
8. EFFECTIVE DATE
This policy was approved and entered into force on 06.12.2022.