WYG Türkiye Information Text on GDPR
As WYG TÜRKİYE INTERNATIONAL CONSULTANCY LIMITED COMPANY (the “Company”), we approach the security of your personal data with utmost sensitivity. In this regard, we attach great importance to the processing and preservation of all kinds of personal data in our possession belonging to all individuals associated with the Company, including those who benefit from our services, in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). In line with this obligation, in our capacity as the “Data Controller” as defined under the KVKK, we process your personal data in the manner set out below and within the framework of the principles of proportionality, limitation, and relevance to the purpose as prescribed by the KVKK. Within this scope, we would like to inform you, in our capacity as Data Controller under the KVKK.
1. What Is Personal Data?
Personal data is any information relating to an identified or identifiable natural person. For information to be considered personal data, it must relate to a natural person, and that person must be identified or identifiable.
Personal data may consist of data recorded and processed individually in relation to an identified or identifiable natural person (e.g., Turkish ID number, IP address, name and surname, etc.), as well as reports related to an identified or identifiable natural person (e.g., customer complaint reports, employee performance evaluation reports, interview assessment reports), records (audio or video recordings, photographs/images, user activity logs), documents (e.g., résumés/CVs, payrolls, invoices, bank receipts, credit card statements, copies of ID cards), and writings (e.g., letters, invitation letters).
2. What Does Processing of Personal Data Mean?
Processing of personal data means any operation performed on the data such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, by fully or partially automated means or by non-automated means provided that it is part of any data recording system.
3. For What Purposes and How Do We Process Your Personal Data?
Your personal data may vary depending on the services provided by our Company and our Company’s commercial activities; it may be collected and processed verbally, in writing, or electronically by automated or non-automated methods through our Company’s departments and offices, our business partners, suppliers, website, social media channels, mobile applications, and similar means. For as long as you benefit from the products and services offered by our Company and our cooperation continues, your personal data may be processed and updated for the purposes of recognizing you better to understand your needs, to respond more quickly to your requests, and to improve our communication with you.
In addition, when you use our website to access our services, when you visit our Company or our website, or when you attend trainings, seminars, or events organized by our Company, your personal data may also be processed.
The personal data collected may be processed by our business units for the purpose of carrying out the necessary work to enable you to benefit from the products and services offered by our Company; to measure your satisfaction with our Company and the products and services we provide; to develop and diversify our products and services in line with your requests and needs; and, together with these, to conduct the necessary quality and standard audits as required by the relevant laws and legislation, or to fulfill our reporting and other obligations stipulated by the laws and regulations to which we and our affiliated companies and subsidiaries are subject, all within the scope of the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVKK.
Our employees’ data may be processed by our Company or by real or legal persons with whom our Company cooperates or whom it authorizes, not only due to the obligations stipulated by the Labor Law and the labor and social security legislation and other applicable legislation in force, but also for business-related reasons such as within the scope of our human resources policy, increasing performance levels and employee satisfaction, and ensuring occupational safety and labor peace.
4. To Whom and For What Purposes the Processed Personal Data May Be Transferred
Your personal data, within and not limited to the purposes listed above and in compliance with the legislation—primarily the Constitution of the Republic of Türkiye and the KVKK—may be shared within our Company with our subsidiaries and affiliates; and, without limitation to those listed, may be transferred domestically or abroad to our business partners, our suppliers, Company officials, our shareholders, legally authorized public institutions and private persons, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the KVKK.
5. Rights of the Personal Data Subject as Set Out in Article 11 of the KVKK
The rights of natural persons whose personal data are processed, as set out in Article 11 of the KVKK, are as follows:
- To learn whether personal data are processed,
- If personal data have been processed, to request information regarding this,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- If personal data are processed incompletely or incorrectly, to request their correction and to request that the transaction carried out within this scope be notified to third parties to whom the personal data have been transferred,
- Despite being processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring processing are eliminated, and to request that the transaction carried out within this scope be notified to third parties to whom the personal data have been transferred,
- To object to the emergence of a result against the person themself by analyzing the processed data exclusively through automated systems,
- In case of damage due to unlawful processing of personal data, to demand the compensation of the damage.
If, as personal data subjects, you submit your requests regarding your rights to our Company in accordance with the methods specified in this Information Notice, our Company will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board or if the process incurs an additional cost, a fee in the tariff determined by the Personal Data Protection Board will be charged by us.
Pursuant to Article 13(1) of the KVKK, you may submit your request regarding the exercise of the rights stated above to our Company in writing or by other methods to be determined by the Personal Data Protection Board. In this context, the channels and procedures through which you may submit your written application to our Company within the scope of Article 11 of the KVKK are explained below.
To exercise the rights stated above, you may send your request containing the necessary information identifying your identity and your explanations regarding the right you wish to exercise among those specified in Article 11 of the KVKK to the e-mail address kvkk@wyg.com.tr.
In the application you will make to exercise the rights you hold as a personal data subject and that includes your explanations regarding the right you request to exercise, the matter requested must be clear and understandable, the matter requested must be related to your person, or if you are acting on behalf of someone else, you must be specifically authorized in this regard and your authority must be documented; furthermore, it must include identity and address information and the documents verifying your identity must be attached to the application.
Respectfully submitted for your information.