Visitor Demystify Text

Buradasınız: Anasayfa Visitor Demystify Text

VISITOR INFORMATION TEXT ON PROCESSING PERSONAL DATA

Data Supervisor: Yasa Holding A.Ş.
Küçük Çamlıca, Üçpınarlar Cd. No:40, 34696 Üsküdar/Istanbul

We, as YASA HOLDING Inc. (hereinafter referred to as “Yasa”) have prepared this information text to inform you, our visitors, on the processing, storing and transfer of your personal data within the framework of our activities arising from the Law on the Protection of Personal Data (“LPPD”) numbered 6698 and relevant legislation and legal arrangements.
Which of Your Personal Data are Processed and what are the Purposes of Processing Your Personal Data?
Within the scope of our activities and employment purposes, we are gathering following data of our visitors:

Identity Information
Personal Data Processed	Personal Data Processing Purposes
Name & Surname Turkish ID number Foreign ID number Vehicle’s Number plate Passport no Driver’s Licence no Licence no Citizenship Photograph Signature HES (LFH) Code	Providing Physical Environment Security, Ensuring Employer and Employee Safety, Protection of Employee, Employer and Public Health, Ensuring Security of Movable Goods and Resources, Ensuring the Security of Data Supervisor Operations, Creating and Tracking Visitor Records, Carrying Out Information Security Processes, Conducting Activities in Compliance with Legislation, Providing Information to Authorized Persons, Institutions and Organizations, Please find HES (LFH) Code Information text at ………….
Legal Reasons for Processing Personal Data	Your personal data are processed by YASA in line with the purpose to accomplish the aforesaid purposes, based on the following legal reasons specified in Article 5, LPPD: It is clearly prescribed by law, It is mandatory to enable the data supervisor to fulfil its legal obligation, Data processing is mandatory for the legitimate interests of the data supervisor, provided that it does not harm the fundamental rights and liberties of the person concerned.
Methods of Gathering Personal Data	Your personal data mentioned above are collected using printed and electronic forms and via electronic systems.

Contact Information
Personal Data Processed	Personal Data Processing Purposes
Name/Title of the Company	Providing Physical Environment Security, Ensuring Security of Movable Goods and Resources, Ensuring the Security of Data Supervisor Operations, Creating and Tracking Visitor Records, Carrying Out Information Security Processes, Conducting Activities in Compliance with Legislation, Providing Information to Authorized Persons, Institutions and Organizations, Protection of Employee, Employer and Public Health
Legal Reasons for Processing Personal Data	Your personal data are processed by YASA in line with the purpose to accomplish the aforesaid purposes, based on the following legal reasons specified in Article 5, LPPD: It is clearly prescribed by law, It is mandatory to enable the data supervisor to fulfil its legal obligation, Data processing is mandatory for the legitimate interests of the data supervisor, provided that it does not harm the fundamental rights and liberties of the person concerned.
Methods of Gathering Personal Data	Your personal data mentioned above are collected using printed and electronic forms and via electronic systems.

Security of Physical Environment
Personal Data Processed	Personal Data Processing Purposes
Entry-Exit Recordings CCTV Recordings Photograph	Providing Physical Environment Security, Ensuring Employer and Employee Safety, Ensuring Security of Movable Goods and Resources, Ensuring the Security of Data Supervisor Operations, Creating and Tracking Visitor Records
Legal Reasons for Processing Personal Data	Your personal data are processed by YASA in line with the purpose to accomplish the aforesaid purposes, based on the following legal reasons specified in Article 5, LPPD: It is required to process personal data of the parties to the contract, provided that it is directly related to the drawing up or performance of a contract. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and liberties of the person concerned.
Methods of Gathering Personal Data	Your personal data mentioned above are collected using printed and electronic forms and CCTV Recordings.

Audio and Visual Recordings Data
Personal Data Processed	Personal Data Processing Purposes
Visual Recordings	Providing Physical Environment Security, Protection of Employer and Public Health, Ensuring Security of Movable Goods and Resources, Ensuring the Security of Data Supervisor Operations, Creating and Tracking Visitor Records
Legal Reasons for Processing Personal Data	Your personal data are processed by YASA in line with the purpose to accomplish the aforesaid purposes, based on the following legal reasons specified in Article 5, LPPD: It is required to process personal data of the parties to the contract, provided that it is directly related to the drawing up or performance of a contract. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and liberties of the person concerned.
Methods of Gathering Personal Data	Your personal data mentioned above are collected using printed and electronic forms and CCTV Recordings.

Process Security Data
Personal Data Processed	Personal Data Processing Purposes
Exit IP Arrival IP Website name Date/Time Traffic Data Port number MAC Address	Executing Information Security Processes, Conducting Activities in Compliance with Legislation, Providing Information to Authorized Persons, Institutions and Organizations
Legal Reasons for Processing Personal Data	Your personal data are processed by YASA in line with the purpose to accomplish the aforesaid purposes, based on the following legal reason specified in Article 5 of the LPPD: It is clearly prescribed by law.
Methods of Gathering Personal Data	Your personal data mentioned above are collected via electronic systems.

To whom and For What Purposes will Your Personal Data Be Transferred?
Your personal data may be transferred to the following persons and entities in accordance with Articles 8 and 9, LPPD:

To State Institutions and Organisations on the purpose of conducting activities in compliance with the legislation and notifying authorised persons, institutions and organisations
To our Participations and Subsidiaries and our Suppliers on the purpose of creating visitor records and ensuring physical environment security.

If the process for processing of your personal data is related to foreign countries, since overseas services constitute a part of YASA Holding Inc, for the purpose of carrying out our activities and assigning our personnel abroad as well as of conducting training activities, personal data, limited to such personnel and processes may be disclosed to participations, subsidiaries, subcontractors and suppliers abroad and to foreign state institutions and organisations if required by legislation of relevant country, by taking necessary technical and administrative measures.

How Long Is Your Personal Data Stored?

If a certain period of time for storing personal data is specified by law or relevant legislation, your personal data must be stored for at least this period. If the law or the relevant legislation do not stipulate any certain period of time, it shall be kept for a reasonable period of time determined, provided that such period is linked to the purposes of processing, is limited and moderate.

What are the rights vested on you, as the concerned?

You have the following rights pursuant to LPPD and relevant legislation:

To be informed about whether personal data is processed or not,
To request information if personal data is processed,
To be informed about the purpose of processing personal data and whether they are used suitable for the respective purpose or not,
To have knowledge about third parties receiving personal data domestically or internationally,
To request, in case personal data are processed incompletely or inaccurately, necessary corrections be made,
To request the deletion or destruction of personal data within the framework of the conditions specified under LPPD
If you request the correction of incomplete or inaccurate data and deletion or destruction of your personal data, to request notification of these circumstances to third parties to whom your personal data has been transferred
In case your personal data are damaged due to the processing thereof in contrary to the Law, to request that the damages are indemnified

How to exercise your rights?

You can send your applications and requests on your personal data to Yasa Holding Inc. via Relevant Person Application Form;

By sending the original application and request together with the copy of identity card to Küçük Çamlıca, Üçpınarlar Cd. No:40, 34696 Üsküdar/Istanbul,
By applying in person to Yasa Holding Inc. presenting a valid identity card,
By sending an e-mail to kvkk@yasaholding.com by affixing mobile signature or secure e-signature,
By sending to our e-mail address registered by Yasa@hs03.kep.tr using registered e-mail address and secured e-signature or mobile signature.

In accordance with the Communiqué on Application Procedures and Principles to the Data Supervisor, the application of the relevant person must contain name, surname, signature if the application is made in written, Turkish ID number (if the applicant is a foreign national, passport number or identification number, if any), residence or business address for notification purposes and e-mail address, telephone number and fax number, if any, and information on the subject of the request.
With the application to be presented with the intention of exercising the aforesaid rights and containing the clarification on the right to be exercised, the Relevant Person must clearly and understandably state the subject requested in the application. Necessary information and documents regarding the application must be attached to the application.
Although the subject of the request must be related personally to the applicant, if it is filed on behalf of a third party, the applicant must be specially authorized in this regard and this authorization must be documented (power of attorney). Additionally, the application must contain identity and address information and documents verifying the identity must be attached to the application.
The requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

What is the Period of Response to Your Requests regarding the Processing of Your Personal Data?

Your claims regarding your personal data are evaluated and answered within latest 30 days from the date of receipt. If your application is negatively evaluated, the reasoned causes of are delivered to the address using one of the methods stated in the Relevant Person Application Form, primarily via e-mail or by mail.