Our company respects your rights regarding the protection of your privacy and personal data and works to establish and maintain a relationship with you based on trust. In this context, our company processes your personal data in accordance with all legal provisions, ensures that your data is stored securely, and takes all necessary security measures against possible unlawful access.
In accordance with the Personal Data Protection Law No. 6698 (“Law”), your personal data is processed by Yılmaz Makine Sanayi ve Ticaret Anonim Şirketi (“Yılmaz Makine”), with its registered office at Taşdelen Mah. Atabey Cad. No:9 Çekmeköy/İstanbul, with tax identification number 9660294072, as the data controller, within the scope described below.
Our Company collects personal data directly from you, in its buildings, facilities, premises, workplaces, annexes, inspection areas, production area surroundings, courtyards, entrance gates, building exteriors, office area entrances, event areas, cafeterias, visitor waiting rooms, parking lots, security booths, floor corridors, and other service areas, as well as from traffic/log records and other communication channels when accessing the internet, and from data obtained audibly, electronically, or in writing.
Your personal data is processed based on explicit legal provisions (in particular, the processing of internet traffic records pursuant to Law No. 5651, Labor Law No. 4857, Occupational Health and Safety Law No. 6331, Law No. 5188 on Private Security Services), the fulfillment of legal obligations (in particular, monitoring compliance with occupational health/safety rules, preventing unauthorized access to work areas to ensure information security), and the legitimate interests of the data controller (in particular, keeping camera recordings to ensure physical space security, identifying and investigating violations of workplace rules).
In accordance with Article 12 of the Law, our company takes the necessary technical and administrative measures to ensure the security of personal data obtained as a result of camera surveillance activities.
Your personal data is processed in accordance with the service agreement for the purposes of fulfilling service obligations, fulfilling employer responsibilities, conducting disciplinary processes, ensuring workplace safety, managing, supervising, and performing work, identifying risks, conducting assignment processes, managing emergency management processes, controlling entry and exit to the workplace, identifying and investigating violations of workplace rules, conducting emergency management processes, conducting information security processes, conducting audit/ethics activities, ensuring physical space security, conducting occupational health/safety activities, ensuring the security of goods and resources, providing information to authorized persons, institutions, and organizations, and creating and tracking visitor records, The Company and the legal, technical, and commercial-business security of the relevant persons in a business relationship with the Company are ensured for these purposes.
Your personal data is processed in line with the purposes stated above and limited to the fulfillment of these purposes; with our shareholders, business partners, affiliates and subsidiaries, group companies, third parties such as security companies we receive services from, for the purposes of conducting and auditing business activities, ensuring business continuity, with companies with which we have a special business partnership for the purposes of conducting information security processes; with our business partners and service providers that provide, operate, or service our IT infrastructure, and with our business partners and service providers that provide services in the areas of quality control, complaint management, and risk analysis, legally authorized public institutions and private individuals or organizations and third parties, administrative authorities, judicial authorities or relevant law enforcement agencies in case of legal disputes or when requested by relevant legislation, experts, law firms and auditing firms for auditing and situation assessment activities, public institutions for the fulfillment of regulatory and contractual obligations, insurance companies, social assistance support funds, employment consultants, and third parties specifically designated when required by the legitimate interests of the data controller (such as a forensic IT expert providing evidence identification services), may be transferred and processed within or outside the country for the purposes specified in this disclosure statement.
Your personal data will be stored within the periods specified in the current legislation to which we are subject, limited to the purposes specified in this disclosure text, in accordance with the principle of being limited and proportionate to the purpose for which they are processed. After the period has passed, your personal data will be deleted, destroyed, or anonymized. In the event of any changes in the legislation regarding the data processing and storage period, your personal data will be processed and stored in accordance with such changes.
As a person whose personal data is processed, you have the rights set out in Article 11 of the Law, which regulates the rights of the data subject (to learn about the processing of personal data, to request information about the processing, to learn about the purpose of the processing, to know the persons to whom the data is transferred, to request the correction of incomplete or incorrect processing, to request deletion or destruction, to request that all automated processing be reported to third parties, objecting to analysis, requesting compensation for damages) in accordance with the Circular on the Procedures and Principles for Applying to the Data Controller. You can submit your request by sending a message with a mobile signature or e-signature to the KEP address yilmazmakine@hs02.kep.tr, the e-mail address verisorumlusu@yilmazmachine.com.tr, or by submitting a written request with a wet signature in person or via a notary public to the address Atabey Cad. Atabey Cad.No:9-1 Çekmeköy – İSTANBUL.
If you submit your request to us in this manner, your requests will be evaluated and finalized as soon as possible and within 30 (thirty) days at the latest. For your application requests to be evaluated within the scope of the Communiqué on the Procedures and Principles for Applying to the Data Controller, your name, surname, Turkish Republic ID number if you are a Turkish citizen, or your passport number or foreign ID number along with your nationality if you are a foreign national, your place of residence or work address for notification purposes, your email address if available, your telephone or fax number, and the subject of your request. Depending on the nature of your request and the method of application, we may request additional verification to confirm that the application is indeed yours and to protect your rights.
