PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA FOR EMPLOYEE CANDIDATES

Pursuant to Article 10, titled “Data Controller’s Obligation to Inform,” of the Law on the Protection of Personal Data No. 6698 (“KVKK”), published in the Official Gazette dated April 7, 2016, and numbered 29677, which aims to protect the fundamental rights and freedoms of individuals, primarily the privacy of private life, in the processing of personal data, and in accordance with the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform, published in the Official Gazette dated March 10, 2018, and numbered 30356; we, as PROTON OTOMASYON ELEKTRİK MAKİNA İNŞAAT TAAHHÜT SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“PROTON” or “Company”), wish to inform you about your personal data processed by our Company through this Privacy Notice.

IDENTITY OF THE DATA CONTROLLER

PROTON holds the status of “Data Controller” pursuant to the KVKK and relevant regulations regarding the personal data obtained from you, our employees; you can reach us via the contact information provided below.

Headquarters Address : Akçeşme Mahallesi Bozburun Yolu No:2 Merkezefendi/Denizli
Telephone : 0258 372 11 33
Web Address : https://www.proton.com.tr/
Email Address : info@proton.com.tr
KEP Address : protonotomasyon@hs03.kep.tr

PROCESSED PERSONAL DATA

Within the scope of your relationship with PROTON, your following personal data are processed;

a) Your Identity Information: name, surname, place of birth, date of birth, age, photograph, identity card and identity number, passport information,
b) Your Contact Information: workplace address, home address, email, telephone, mobile phone, residence, address registry system records,
c) Your Information regarding Family Status: marital status, number of children, data regarding spouse and children
d) Your Data regarding Education, Work, and Professional Life: employment history, employer name, graduated school, professional competencies, resume information,
e) Your Special Categories of Personal Data: data regarding health, data regarding criminal convictions and security measures,
f) Your Bank Account Data: bank account data and IBAN information;
g) Your Data constituting the Content of the Personnel File: employee data containing all kinds of surveys, reports, studies, training or interview information regarding performance and career development, information regarding all kinds of fringe benefits or advantages to be provided to employees, and other similar information;
h) Data regarding the Security of Our Company Premises: entry and exit records to Company buildings and camera recordings;
i) Your Data regarding Cyber Security: usernames, passwords, audit trails, IP address, website access logs, and data regarding cyber security including logs;
j) Data regarding Audits and Inspections: audit and inspection records, audit and inspection reports, information regarding examinations carried out for audit and inspection purposes, data that may be related to audits and inspections, and audio and video recordings.

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data obtained within the scope of your relationship with PROTON are processed for the following purposes.

• Creating and storing the personnel file during the processes of establishing, performing, and terminating your employment contract,
• Fulfilling the legal obligations arising from the employment contract and the legislation to which our Company is subject,
• Ensuring business continuity and planning and executing business activities,
• Planning, executing, and reporting human resources processes,
• Planning and executing financial and social rights,
• Benefiting from campaigns and advantages offered by contracted companies, and making bonus payments as a result of participation in the campaign,
• Creating and managing the information security infrastructure,
• Planning and executing the access authorizations of employees, keeping logs regarding their entries and exits to places they have access to,
• Conducting camera recording in designated areas for the purpose of ensuring the security of the Company,
• Following up on lawsuits to which the Company is a party, reviewing and executing contracts, responding to requests from judicial and administrative authorities, sending notifications and warning letters, and issuing a power of attorney on behalf of the employee if required,
• Preparing necessary documents pursuant to the General Assembly and Board of Directors decisions and the Turkish Commercial Code No. 6102,
• Determining working hours and conditions of disability and invalidity,
• Planning internal and external training activities and carrying out evaluations as a result of the training,
• Realizing social activities and taking photographs and videos during these activities,
• Utilizing them on the Company website, Company intranet, brochures, and documents, on the Company's social media accounts, during periodic meetings and other events,
• Organizing domestic or international travel and accommodation, and conducting visa and passport application processes,
• Conducting audits and inspections in accordance with legal legislation and internal company procedures,
• Carrying out financial reporting and accounting controls,
• Taking occupational health and safety measures; carrying out pre-employment examinations, periodic examinations, return-to-work examinations, and illness examinations by the workplace physician; and conducting pregnancy monitoring for our pregnant employees and post-partum return-to-work examinations,
• Sending celebration/condolence or get-well-soon messages to employees and their families in case of birth, death, marriage, severe illness, and surgeries,
• Carrying out consultancy and support activities.

TRANSFER OF PROCESSED PERSONAL DAT

Your personal data may be shared within the framework of the provisions of the KVKK regarding the transfer of personal data and transfer abroad, for the purposes set forth in Article 3 of this Privacy Notice, with domestic official institutions and organizations, law enforcement forces, courts, and enforcement directorates, third-party real and legal persons with whom we are associated, service provider firms and their officials, business partners, banks, our Company shareholders, our group companies and affiliates, suppliers, and support service providers. 

METHODS AND LEGAL REASONS FOR COLLECTING PERSONAL DATA

PROTON collects your personal data during the establishment of your business relationship with our Company and throughout the continuation of the said relationship, from you, third parties, and legal authorities, via the internet, telephone, email, and through physical, written, verbal, and electronic media, for the purpose of providing the above-mentioned services and purposes within the framework provided in the provisions of Articles 5, 6, and 8 of the Law written below.
• Having your explicit consent,
• Being explicitly foreseen in the legislation to which our Company is subject, including the Labor Law, Occupational Health and Safety Law, Social Insurance and General Health Insurance Law, Trade Unions and Collective Labor Agreement Law, Insurance Law, Tax Procedure Law, and Turkish Commercial Code, 
• Provided that it is directly related to the establishment or performance of a contract, it being necessary to process the personal data of the parties to the contract, to offer the requested products and services, and to fulfill the requirements of the contracts you have concluded,
• It being mandatory to fulfill a legal obligation,
• It having been made public by the data subject themselves,
• Data processing being mandatory for the establishment, exercise, or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing being mandatory for the legitimate interests of the Data Controller.

RIGHTS OF THE DATA SUBJECT WHOSE PERSONAL DATA IS PROCESSED

Pursuant to the provisions of Article 11 of the KVKK, you have the following rights regarding your personal data.
• To learn whether personal data is processed or not,
• To request information thereon if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data if it is processed incompletely or incorrectly,
• To request erasure or destruction of personal data,
• To request notification of these operations (correction, erasure, or destruction) to third parties to whom personal data has been transferred,
• To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• To request compensation for the damages in case of suffering damages due to the unlawful processing of personal data. 

IF YOU WISH TO CONTACT US FOR YOUR RIGHTS AND DEMANDS

Within the scope of the rights specified above, you may submit your requests in accordance with Article 11 of the KVKK and the Communiqué on the Principles and Procedures of Application to the Data Controller, via a petition in person by hand to our address provided above, deliver it through a notary public, or send it to the address protonotomasyon@hs03.kep.tr by using a registered electronic mail (KEP) address. Applications to be made in person within this scope will be accepted following the identity verification to be performed by us; and your requests will be finalized as soon as possible according to their nature and within 30 days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.