HES Code Demystify Text

YASA HOLDING Inc. (‘’YASA’’) HES (LIFE FITS HOME – LFH) CODE INQUIRY INFORMATION TEXT

As YASA HOLDING Inc. ("YASA"), we attach importance to the protection of personal data when carrying out our activities and we act responsibly towards personal data security.

This Information Text is prepared to inform our visitors about the principles of processing the Hayat Eve Sığar ("HES") – Life Fits Home (“LFH”) code, which you notified to YASA in order to prevent the spread of the COVID-19 virus epidemic and to mitigate its effects, within the scope of the Law on the Protection of Personal Data ("LPPD") numbered 6698.

Personal Data Gathering and Legal Reasons

In order to fulfil our obligation for ensuring and observing security in our workplace as YASA and to provide a healthy work environment for both our employees and visitors, the LFH Code is gathered as an indefinite code within the framework of Articles 5/1 and 6/2 of the Law through non-automatic means, in written, verbally or electronically.

Purposes of Processing Personal Data

The LFH Code serves the purpose of reducing the risk of contagion during the time spent in public areas and contains information about whether you carry risk of disease. In this context, personal data of our employees and visitors are processed for the purpose of;
Providing a healthy work environment in the operation and facility buildings of our company,
Keeping track of whether our visitors carry risk of disease,
Planning and execution of activities with respect to occupational health and safety,
Ensuring the sustainability and execution of business activities and ensuring the security of data controller operations.

Transfer of Personal Data

Personal data can be transferred to occupational health and safety companies from whom support is taken within the scope of planning and execution of occupational health and safety as well as to competent institutions and organisations with the purpose to meet legal or regulatory obligations or comply with the request, within the framework of the transfer provisions specified in Articles 8 and 9 of the Law, in line with the purpose(s) stated under section "Purposes of Processing Personal Data" of this Information Text, to the extent that it is relevant.

What are the rights listed under Article 11 of LPPD?

• To be informed about whether personal data is processed or not,
• To request information if personal data is processed,
• To be informed about the purpose of processing personal data and whether they are used suitable for the respective purpose or not,
• To have knowledge about third parties receiving personal data domestically or internationally,
• To request, in case personal data are processed incompletely or inaccurately, necessary corrections be made and to request notifying third parties to whom personal data are transferred about the operations made accordingly,
• To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, notwithstanding the fact that it has been processed in accordance with the Law and relevant provisions of the other laws, and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred
• To appeal to the negative results against you arising from analysis of the data processed exclusively through automatic systems,
• In case your personal data are damaged due to the processing thereof in contrary to the Law, to request that the damages are indemnified

Please deliver us your applications on your rights listed above.

How to exercise your rights?
Below please find the means to send your applications and requests on your personal data to Yasa Holding Inc:

• By filling in the Form of Application to the Data Controller published at www.yasaholding.com, if you wish,
• By sending the original application and/or request together with the copy of identity card to:  Çamlıca mh. Üçpınarlar cd. No: 40 - 34674 Üsküdar Istanbul/TURKEY,
• By applying in person to Yasa Holding Inc presenting a valid identity card,
• By sending an e-mail to kvkk@yasaholding.com affixing mobile signature or secure e-signature
• By sending to our e-mail address registered by Yasa@hs03.kep.tr using registered e-mail address (KEP) and secured e-signature or mobile signature.

In accordance with the Communiqué on Application Procedures and Principles to the Data Supervisor, the application of the relevant person must contain name, surname, signature if the application is made in written, Turkish identification number (if the applicant is a foreign national, passport number or identification number, if any), residence or business address for notification purposes and e-mail address, telephone number and fax number, if any, and information on the subject of the request.
With the application to be presented with the intention of exercising the aforesaid rights and containing the clarification n the right to be exercised, the Relevant Person must clearly and understandably state the subject requested in the application. Necessary information and documents regarding the application must be attached to the application.
Although the subject of the request must be related personally to the applicant, if it is filed on behalf of a third party, the applicant must be specially authorized in this regard and this authorization must be documented (power of attorney). Additionally, the application must contain identity and address information and documents verifying the identity must be attached to the application.
The requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

What is the Period of Response to Your Requests regarding the Processing of Your Personal Data?

Your claims regarding your personal data are evaluated and answered within latest 30 days from the date of receipt. If your application is negatively evaluated, the reasoned causes of are delivered to the address using one of the methods stated in the Relevant Person Application Form, primarily via e-mail or by mail.

How Long Is Your Personal Data Stored?
If a certain period of time for storing personal data is specified by law or relevant legislation, your personal data must be stored for at least this period. If the law or the relevant legislation do not stipulate any certain period of time, it shall be kept for a reasonable period of time determined, provided that such period is linked to the purposes of processing, is limited and moderate.
If the transaction, subject of your application, would yield an additional cost, then you may be charged according to the rates to be fixed by the Personal Data Protection Board.