INFORMING EMPLOYEES
ABOUT PERSONAL DATA

ABOUT THE LAW ON THE PROTECTION OF PERSONAL DATA

EMPLOYEE INFORMATION TEXT

TEPE DEFENSE AND SECURITY SYSTEMS IND. LIKE. (shortly as "Company" will be mentioned.) TEPE DEFENSE AND SECURITY SYSTEMS IND. Inc. (shortly as "Company" will be referred to.) to collect, store and share your personal data in accordance with the law. takes the necessary security measures to ensure your privacy and protect your privacy.
Our aim; In accordance with Article 10 of the Law on the Protection of Personal Data No. 6698, it is to inform you in the most transparent way about the ways in which your personal data is received, the purposes of processing, the persons shared, the legal reasons and your rights.
1. Scope
This Information covers our Company employees.
2. General Information on the Law
Law No. 6698 on the Protection of Personal Data (“Law”) was adopted on March 24, 2016̧ and on April 7 It was published in the Official Gazette dated 2016 and numbered 29677.
The Law No. 6698 on the Protection of Personal Data (“Law”) was adopted on March 24, 2016̧ and was published in the Official Gazette No. 29677 on April 7, 2016. The Law on the Protection of Personal Data No. 6698 was adopted in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the collection, processing and storage of personal data, and to regulate the obligations of natural and legal persons who process personal data and the procedures and principles to be followed, to determine the rights of the persons whose personal data are processed. .

3. Data Controller
TEPE DEFENSE AND SECURITY SYSTEMS IND. LIKE. (shortly as "Company" will be mentioned.) In accordance with the Law No. 6698 on the Protection of Personal Data (“Law”), your personal data is processed in accordance with the legislation. we will use
4. For What Purpose Personal Data Will Be Processed
By our company, the personal data of our company's employees, stated below, for the following purposes and legal It will be processed for reasons and stored for the period set in the Data Controllers Registry Information System.

a. Labor Law, Occupational Health and Safety Law, Social Security Law and related legislation and other fulfilling our obligations under laws and regulations, fulfillment of related requirements, keeping personal file, paid/free/excuse monitoring and approval of permits, viewing of balance permits, making permit arrangements, creation of payroll/payroll, payment of wages, legal notifications in case of work accident to fulfill the legal obligations towards our employees, the main employer - subordinate fulfilling the obligations to our customers within the scope of employer relations within the scope of the Labor Law, Law No. 5510, tax laws and other relevant legislation. in order to fulfill its financial and legal obligations; our personnel's name, surname, birth date, telephone number, residence and full address information, e-mail address, internal company contact information (internal phone number, corporate e-mail address), bank account information, gender, nationality, country of birth, city ​​of birth, marital status, T.C. ID number, T.C. ID card serial number, father's name, mother's name, signature, employment and exit dates, company entry and exit records, criminal record - conviction information, disability information and degree, military service postponement information, number of children, insurance start date, insurance registry no, literacy information, salary and additional income-benefit details, payrolls, premium progress payments, premium amounts, bank passbook, minimum living allowance information, private health insurance amount, blood type information, health
SAV-YRD-77/Rev: 04.05.2023/07 disease information in the reports, occupational physician records, maiden name, old type T.C. ID card if any, religious information, wallet number, district/neighborhood where he was born, volume number, family number, household number, page number, registration number, place of issue, reason for issue, date of issue, directly by the conclusion or performance of a contract provided that it is necessary to process the personal data of the parties to the contract, obligatory for the responsible person to fulfill his legal obligation and a right legal reasons for data processing to be mandatory for its establishment, use or protection. processed on the basis.

b. Knowing the CV of the personnel, information in the CV in assignment or position changes in order to be evaluated according to; occupation, graduation year and school, graduation average, educational information (educational status, school information, certificate of course and seminar information, foreign language information, internship status, trainings attended, information about trainings, monthly performance evaluation and goal realization status, activity information and performance information, diploma information, curriculum vitae, domestic and international education, assignment, audit, etc.) position information, you have a right Data processing is mandatory for its establishment, use or protection and the fundamental rights and rights of the data subject data for the legitimate interests of the data controller, provided that it does not impair their freedom. It is processed on the basis of legal grounds.
SSI notifications, İŞKUR notifications, safety notification, incentive and legal liability to inform; name, surname, date of birth, T.C. your identification number data legal reason that the responsible person is obliged to fulfill his legal obligation. processed on the basis.

d. To open a compulsory private pension insurance account; name, surname, date of birth of our staff, T.R. ID number, e-mail address, telephone number, IBAN number and salary information, employment date your data obligatory for the data controller to fulfill its legal obligation processed on a legal basis.

to. Ensuring workplace and worker safety, accidents that may occur, tortious act or crime Informing the relevant law enforcement authorities in the event that the incidents that occur can and cannot be prevented for the purpose of; Sound and image in company entrances and corridors, office areas, terrace and rest areas Voice and video data of our personnel with vehicles with tracking and recording features, Company entry and exit records, internet access logs, daily break and activity data, camera recording, audio recording, and/or data regarding the tracking of vehicle and gasoline usage, copy of vehicle license, vehicle km information, vehicle location, copy of driver's license, traffic ticket query result, fundamental rights of the person concerned and data for the legitimate interests of the data controller, provided that it does not impair their freedom. It is processed on the basis of legal grounds.

f. Payment of salary lien deductions in line with the instructions of the executive directorates for; regarding our personnel's name, surname, salary information, date of departure, execution follow-up files. file and debt information obligatory for the data controller to fulfill its legal obligation It is processed on the basis of legal grounds.

g. Monitoring and reporting the performance of company employees, payment of job advances/expenses employees, creating an employee portal, providing our personnel with online platforms. so that notifications can be made and birthdays can be celebrated; personelimizin adı, soyadı, doğum
tarihi, şirket içi iletişim bilgileri (dahili telefon numarası, kurumsal e-posta adresi), banka hesap bilgileri, bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması ve ilgili kişinin temel hak ve özgürlüklerine zarar vermemek kaydıyla, veri sorumlusunun meşru menfaatleri için veri işlenmesinin zorunlu olması hukuki sebebine dayanarak işlenmektedir.

h. Ensuring contact and communication, printing business cards, incoming via cargo and courier ensuring that the packages are delivered to the relevant employee, tracking the use of company vehicles, service and for the organization of travel, the allocation of business e-mail; the name, surname of our staff, phone number, full address information, e-mail address, internal contact information (external phone number, corporate e-mail address), T.C. identification number, height, weight, shoe size information, you have a right Based on the legal reason that data processing is mandatory for the establishment, use or protection of is processed.

I. It can be determined whether personal correspondence is made via business e-mail and In the cases specified in the Contract, the traffic and content of the correspondence made over the business e-mail
in order to obtain information; internet access logs, corporate e-mail address, corporate e- traffic and content information of correspondence made via postal address, fundamental rights of the person concerned and
data for the legitimate interests of the data controller, provided that it does not impair their freedom. It is processed on the basis of legal grounds.

j. Assigning trainings to our employees via online platforms, training planning training, reporting of trainings, preparation of training certificates, following the participating employees, ensuring that the development processes of the employees as a result of the training to be followed; name, surname, internal contact information of our personnel (external phone number, corporate e-mail address), T.C. ID number, occupation and position information establishment of a right Based on the legal reason that data processing is mandatory for the use or protection of is processed.

k. In order to be able to contact the relatives of our personnel in case of emergency, reported by the worker Name, surname and phone number of the relative damage to the fundamental rights and freedoms of the person concerned Data processing is mandatory for the legitimate interests of the data controller, provided that It is processed on the basis of legal grounds.

l. To enable our personnel to benefit from services, meals and similar services and to access these services. in order to contact our personnel when necessary; the name, surname of our staff, phone number, full address information, e-mail address, internal contact information (external phone number, corporate email address), service route data for the establishment, exercise or protection of a right It can be processed based on the legal reason that the processing is mandatory and the supplier and available to its employees.

m. Within the scope of the EMPLOYER's activities, advertisements, promotions, advertisements, brochures, social media, etc. in the media for the purpose of sharing; within the scope of company events (meal, meeting, etc. organizations) or Photographs and video recordings taken at other times and audio and video data of our personnel, open can be processed based on their consent.

n. Removing the vehicle stamp required for entry and exit to our company and for intra-company traffic to ensure security; the license plate of the personal vehicle of our personnel, a copy of the vehicle license and A copy of the driver's license including the name, surname, date of birth, place of birth of our personnel,establishment of a right
Based on the legal reason that data processing is mandatory for the use or protection of can be processed and transferred to suppliers and employees.

he. Allocating a vehicle to our personnel and tracking the use of the allocated vehicle for business purposes for the purpose of; Copy of driver's license including name, surname, date of birth, place of birth of our personnel, traffic the location information of the vehicle allocated and/or made available to the person as a result of the penalty inquiry, and data on the tracking of gasoline usage and vehicle mileage, establishment, exercise or use of a right Data processing is mandatory for the protection of the data subject and harms the fundamental rights and freedoms of the data subject. Data processing is mandatory for the legitimate interests of the data controller, provided that processed on a legal basis.

p. Increasing the service quality of our company, ensuring employee satisfaction, Detecting the malfunctions, if any, within the company, determining the reasons for leaving the company, in order to minimize employee circulation; during the dismissal process name, surname, date of birth, date of employment, date of leaving the job, title, unit data in the questionnaire; relating to provided that it does not harm the fundamental rights and freedoms of the person, It is processed based on the legal reason that data processing is mandatory for their interests.

q. Our staff and their relatives are well-known to them at Bilkent University and its schools. in order to benefit from the discount; the names of themselves and their relatives studying at Bilkent schools, surname, school, department and class information for the establishment, exercise or protection of a right data processing is mandatory and not to harm the fundamental rights and freedoms of the data subject. Provided that data processing is mandatory for the legitimate interests of the data controller, processed on the basis of reason.

5. Notification of Persons or Organizations to which Your Personal Data may be Transferred 

Your collected personal data; In addition to the above-mentioned purposes,
a. Tax Procedure Law, Court of Accounts Law, Labor and Social Security Law, Revenues of Crime Anti-Money Laundering Law on Anti-Money Laundering Person required by the Law, Turkish Commercial Code, Code of Obligations and other legislation or organizations; obligatory for the data controller to fulfill its legal obligation on legal grounds,

b. Legally authorized public institutions and organizations, Ministry of Family, Labor and Social Services, law enforcement forces, prosecutors' offices and other judicial authorities making a request for legal reasons, the relevant court, executive directorates and other administrative and legal authorities, fulfill the legal obligation of the data controller Based on the legal reason that it is compulsory to bring

c. The reason why our company is one of the companies subject to audit in accordance with the Turkish Commercial Code No. 6102 and internal and external audit companies and auditors, fulfill the legal obligation of the data controller Based on the legal reason that it is compulsory to bring

D. Insurance – private pension companies, occupational health and safety institutions, financial (bank etc.) establishments, catering company, car rental, airport and similar transfer companies, telephone operators, to companies from which necessary services such as printing business cards are provided, authorized on behalf of our Company. given to law firms, lawyers, archive firms, official institutions We are working to get consultancy on the determination and calculation of possible incentives.
consulting firms and private employment agencies, executive assistants-secretariat (only business travel organization provided by executive assistants-secretariat data necessary for the organization of travel of the personnel) our legal obligations data processing is mandatory for the fulfillment of a right, the establishment, exercise or protection of a right, and Legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Based on the legal reason that data processing is mandatory for

to. Our company's personal, accounting, financial units and transactions Tepe Servis Kart Hizmetleri Inc. and Bilkent Holding Joint Services Consultancy Services Inc. will be fulfilled by and fulfillment of banking transactions and general financial transactions, salary etc. your payments personnel payroll and personnel transactions, keeping track records, fuel, service, food, communication and joint service purchases including but not limited to administrative and official Personal data of the personnel mentioned in detail above for the purpose of managing the relations, Tepe Servis Kart Services Inc. to Bilkent Holding Joint Services Consultancy Services Inc. is transferred.

6. How is Your Personal Data Collected?
  Your Personal Data, information personally provided by you, our website, Contracts, applications, forms, offers, With cookies, audio and video that our computer uses to recognize you during website visits recording devices can be collected verbally, in writing or electronically through intermediary firms. Your personal data, in accordance with the processing conditions in Article 5 of the Law; processed personal data if explicit consent is required for processing, subject to your express consent; otherwise, as specified in Articles 5 and 6 of the Law. Based on one of the other reasons (these reasons are mentioned in the 4th article of the clarification text).

7. Rights of Personal Data Owners Enumerated in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights through the methods set out below The company will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request. In the reply Up to ten pages will not be charged. A transaction fee of 1 Turkish lira will be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD, flash memory, our company will request it. The fee may not exceed the cost of the recording medium. In this context, personal data owners;

• To learn whether personal data is processed or not,
• If their personal data has been processed, to request information about it,
• Kişisel verilerin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme,
• To know the third parties to whom personal data are transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing, and Requesting notification of the transaction made within the scope of the transaction to the third parties to whom the personal data has been transferred,
• Although it has been processed in accordance with the provisions of the Law No. 6698 and other relevant laws, In the event that the reasons for the processing disappear, personal data will be deleted or destroyed. requesting the transfer of personal data to third parties to whom the personal data is transferred. request notification,
• By analyzing the processed data exclusively through automated systems, to object to the emergence of a result against him,
• In case of damage due to unlawful processing of personal data, request removal
rights.

Your request regarding the exercise of your above-mentioned rights, paragraph 1 of Article 13 of the Law No. 6698 and 30356 dated 10.03.2018 on the Procedures and Principles of Application to the Data Controller. In Turkish and in written form or registered electronic mail (KEP) address, secure electronic signature, mobile signature or By using the e-mail address previously notified to the Company and registered in our system. you can send In applications, only information about the applicant will be given, and other family members and It will not be possible to obtain information about third parties. your identity before the Company responds. The right to verify is reserved. In your application;

• Your name, surname and, if the application is written, your signature,
• For citizens of the Republic of Türkiye, T.R. your identity number, your nationality if you are a foreigner, your passport number or your identity number, if any,
• Your place of residence or workplace address for notification,
• Your e-mail address, telephone and fax number, if any,
• Your request subject

Information and documents related to the subject, if any, must be attached to the application. As a data controller, you can submit your written applications by attaching the necessary documents. Our company's address to the Universiteler Mahallesi 1597 Cadde No:3/87 Bilkent Center AVM 06800 Çankaya/Ankara You can give. To the application form here you can access.

Applications you want to make via e-mail kvkk.bilgi@tepesavunma.com.tr tepesavunma@hs02.kep.tr

According to the nature of your request, the information and documents that will allow identification are completely and accurately. must be provided to us. In case the requested information and documents are not provided as required, the Company Failures in the full and qualified conduct of the researches to be carried out by our company based on your request. will be possible. In this case, the Company declares that it reserves its legal rights. Therefore, your application According to the nature of your request, it must be sent completely and in a way that includes the requested information and documents.