FONET INFORMATION TECHNOLOGIES
PUBLIC DISCLOSURE TEXT ON PROTECTION OF PERSONAL DATA
FOR CANDIDATE AND CURRENT EMPLOYEES
The Identity of the Data Controller
This public disclosure text, prepared by Fonet Information Technologies Inc. (“Company”) as the data controller within the scope of the Article 10 of the Personal Data Protection Law No. 6698 (“PDPL”) and Communique on Principles and Procedures to be Followed in Fullfillment of the Obligation to Inform (“Communiqué”).
In this context, as data controller; in order to sustain the Company’s activities effectively, we will collect, store, process and transfer your personal data obtained from various channels to third parties if necessary. We would like to point out that; in accordance with PDPL and its related sub-regulations, we take necessary measures as data controller during the collection, storage, processing and transfer of the data according to the legislation.
Purpose of Processing Personal Data
Besides the data and information mandatorily required to be collected from its employees, customers and related third parties, the Company processes, stores, keeps and transfers to the extent permitted by the applicable laws and regulations the personal data deemed fit and necessary solely for being able to provide the best services and products intended to be supplied to its customers, and some other specific personal data as well.
All the entries and exits to the office of Fonet Information Technologies are made with the card pass system, and the entry-exit information is recorded electronically. Because we are an R&D Center, this data are processed in order to comply with the related legislation, to calculate the working hours of the employees and to protect the building security.
In the Company’s office, there are 28 cameras, in recorded 7/24, in common working areas, meeting rooms and corridors to establish office security. In this scope, your personal data are processed..
Personal data received electronically or in print format from the people applying for a position in the Company is collected by Human Resources Management for the purpose of evaluating the suitability, competence, and the adequacy and accuracy of the information. This data is processed only to the extent required by business needs; is shared with senior management and is researched from internal and external sources. The processing of personal data and special categories of personal data collected during recruitment is one of the principles of the Human Resources Process. For this purpose, your credentials, contact information, work information, education information, health information only within necessary extend extent, family members and relatives information to be contacted in an emergency case, financial information such as bank account number for payment of wages, criminal record information for workplace security purposes, the salary foreclosure information, enforcement proceedings, your personal information in order to create your personnel record, information in your resume, the previous job entry and exit information and reference information for verification of your resume are processed. Your personal data is stored and processed as long as your employment continues in the Company.
In line with the advertising and promotional activities of the Company, video recording and photo shooting are performed at its office periodically, in which the data of the current employees are processed. These data collected through various channels are stored electronically; and processed for use in platforms such as promotional videos, brochures, social media sharing. Your personal data in this context can be used to promote the Company in all areas where advertising activities are carried out (for example, exhibition stand, investor presentations, etc.), especially on the Company’s website and social media accounts. In addition, the Company organized and/or participated in events, training, fairs; so the images of the organization can be shared on its corporate web page and on the Company’s social media accounts.
In this context, your personal data will be processed in accordance with the terms stipulated in PDPL and related legislation, in any event, unless the above legitimate purposes have been eliminated.
In case you wish to request your personal data to be deleted, destroyed or anonymized, this request will be fulfilled within the period determined by legal regulations. During this period, your personal data will not be processed and shared with third parties, except for the obligations arising from national and international laws, regulations and contracts.
The Method and Legal Basis of Collection of Personal Data
Your personal data may be collected verbally, in writing or electronically through various channels, including, but not limited to, the card pass system, security camera recordings, departments within the Company, forms, website and mobile applications for the purposes mentioned above. In addition to this, when you visit the Company or its website, when you attend the training, seminars or organizations organized by the Company, your personal data is collected and processed by automatic or manual methods.
The personal data mentioned above is processed by automatic and manual methods on the basis of the legal reason “it is necessary for compliance with a legal obligation to which the data controller is subject”, “processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract” and “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.” in Article 5 of the PDPL.
Transfer of Personal Data
The Company, may at times share your personal data and special categories of personal data to the extent permitted by the relevant applicable laws and regulations and limited to the achievement of the above-mentioned objectives and the fulfillment of the obligations brought by the legislation; with legal authorities or relevant law enforcement authorities as required by the relevant legislation or legal disputes, public legal entities due to legal obligations (e.g. Social Security Institution, Republic of Turkey Ministry of Finance Revenue Administration, etc.), with special authorized institutions (e.g. notaries, financial consultancy firms, etc.) in order to carry out the transactions within the scope of the Company’s activities, private pension companies in the scope of fulfillment of mandatory private pension obligations with support service organizations (such as food card service providers, GSM operators in case of a mobile company line, etc.) and complementary or extension of the Company’s activities. , occupational health and safety companies, law offices, health institutions, etc. in order to follow the legal procedures), to the consultants and organizations that cooperate where the legislation permits (for example; related institutions for the purpose of promoting the company and demonstrating firm competence in tender participation, etc.), financial institutions including banks, independent audit companies, at home and / or abroad; to the extent permitted by the Company’s main shareholder, subsidiaries, program partners, with which we receive services, to cooperate, to cooperate with program partners. It may share within the framework of personal data processing conditions and purposes specified in PDPL’s Article 8 on transferring personal data and article 9 on transferring personal data abroad.
Rights of the Person whose Personal Data Processed
In line with Article 11 of PDPL; you have rights to learn whether your personal data are processed or not, to demand for information as to if your personal data have been processed, to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose, to know the third parties to whom your personal data are transferred in country or abroad, to request the rectification of the incomplete or inaccurate data, if any, to request the erasure or destruction of your personal data under the conditions referred to in Article 7 of PDPL, to request reporting of the operations carried out pursuant to third parties to whom your personal data have been transferred, to object to the occurrence of a result against the person yourself by analyzing the data processed solely through automated systems, to claim compensation for the damage arising from the unlawful processing of your personal data.
In this context, requests submitted to us with the methods arranged in the legislation will be concluded by the Company free of charge in the shortest time period, within thirty days at the latest. However, if the transaction creates any costs, the fee determined by the Personal Data Protection Board will be charged to you. According to the clause 1 of article 13 of PDPL; you can send your related request containing your explanations about your desire to exercise your rights under Article 11 of the PDPL, in writing or through other methods specified by the Personal Data Protection Board, via the contact addresses listed below, or by other methods specified in the PDPL and related sub-regulations.
Fonet Bilgi Teknolojileri A.Ş
Address: Kızılırmak Mahallesi 1445. Sokak No: 2B/1 The Paragon Tower, Çankaya / ANKARA
Phone: +90 312 438 59 19
Fax: +90 312 440 36 52
E-Mail: fonet.kvkk@fonetbt.com
Registered Electronis Mail (KEP) Address: fonetbt@hs02.kep.tr