This Clarification Text has been prepared pursuant to Article 10 of the Law on Protection of Personal Data numbered 6698 (“KVKK”) and the Communiqué on Principles and Procedures to be Followed to Fulfill the Obligation to Inform.
Who is the Data Controller?
SST Teknoloji A.Ş. (“Company”) located at the address Küçükbakkalköy Mah. Kayışdağı Cad. No:1 Allianz Plaza K:28 Ataşehir/Istanbul who owns the website https://www.ssttek.com/ (“Website”) .
What is the Purpose and Legal Grounds for Processing Your Personal Data?
The personal data (“Personal Data”) written below of the Data Subject may be processed by the Company based on the purposes written below and the legal reasons written below.
| Data Subject | Data Category and the Personal Data Processed | Purpose(s) for Processing | Legal Ground for Processing |
| Visitor | Transaction Security Information (username and passwords, IP address and other online identifiers, account settings, browser type and versions, time zone and location settings, browser plug-in types and versions, operating systems and platform, other technologies on the devices you use to access our Website and information about how you use our Website, products and services) | Execution of Information Security Processes, Execution of Audit / Ethical Activities, Execution / Control of Business Activities, Execution of Retention and Archive Activities, Ensuring the Security of Data Controllers Operations, Giving Information to Authorized Persons, Institutions and Organizations, Execution of Activities in Compliance with Legislation, Execution of Sales Processes for Goods / Services, Tracking Requests / Compliants | Clearly provided for by the laws, Mandatory for the data controller to be able to perform its legal obligations, Mandatory for the legitimate interests of the controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject, Explicit consent |
| Marketing Information (Cookies) | |||
| Employee Candidate | ID Information (Name, Surname, Date/Place of birth, Signature and Other ID information stated by the Candidate) | Conducting Employee / Intern Candidate Recruitment and Onboarding Processes, Conducting Activities in line with the Legislation, Conducting Communication Activities, Planning of Human Resources Policies and Processes, Conducting Interviews, Execution / Inspection of Business Activities, Executing Storage and Archive Activities | Clearly provided for by the laws, Conclusion or fulfilment of a contract, Mandatory for the data controller to be able to perform its legal obligations, Mandatory for the legitimate interests of the controller, provided that this processing shall not violate the fundamental rights and freedoms of the Candidate, Data made available to the public by the Candidate, Explicit consent |
| Contact Information (Telephone no, Address, E-mail address) | |||
| Personnel Information (Military service information, information in their CV, Work experience and Other information stated by the Candidate), and Work Experience Information (Foreign languages known, Educational / Occupational background, Educational status, Certificate and diploma information and Other work information stated by the Candidate) | |||
| Physical Security Media (CCTV) | |||
| Financial Information (Salary expectation, if the Candidate states it his/her previous or current salary) | |||
| Special Categories of Personal Data (Criminal records, disability, and other health information stated by the Candidate) | |||
| Reference Information (Name, Surname, Title, Workplace, E-mail Address, Telephone Number) | |||
| Employee / Intern | ID Information (Name, Surname, Turkish ID no, Sex, Maritial Status, Birth place/date, Photograh, Signature, Social media accounts) | Managing Emergency Responses, Fulfillment of Employment Contractual and Legislative Obligations, Managing Processes for Additional Rights and Benefits of Employees, Execution of Audit / Ethical Activities, Execution of Academic Activities, Execution of Authorisation Access, Execution of Activities in Compliance with Legislation, Execution of Financial and Accounting Affairs, Execution of Assignment Processes, Monitoring and Execution of Legal Affairs, Conducting Internal Audit / Investigation / Enquiry Processes, Conducting Communication Activities, Planning of Human Resources Policies and Processes, Execution / Control of Business Activities, Execution of Occupational Health / Safety Activities, Receiving and Evaluating Suggestions for Improvement of Business Processes, Execution of Logistics Activities, Organization and Event Management, Execution of Performance Evaluation Processes, Execution of Retention and Archive Activities, Executing Contracts, Ensuring the Security of Movable Goods and Resources, Execution of Remuneration Policy, Execution of Talent / Career Development Activities, Giving Information to Authorized Persons, Institutions and Organizations, Carrying Out Management Activities | Clearly provided for by the laws, Necessary provided that the data of the parties is directly related to the conclusion or fulfilment of that contract, Mandatory for the data controller to be able to perform its legal obligations, Mandatory for the legitimate interests of the Company, provided that this processing shall not violate the fundamental rights and freedoms of the Employee / Intern, Data made available to the public by the Employee / Intern, Explicit consent |
| Contact Information (Telephone no, Home address, E-mail address) | |||
| Personnel Information (Military service information and information in their CV, Permission form information, Disciplinary proceeding information, Performance evaluation) and Work Experience Information (Foreign languages known, Educational/Occupational background, Educational status, certificate and diploma informatiın) | |||
| Legal Action Information (Lawsuit/legal proceeding information, information written in legal notices judicial/administrative correspondences) | |||
| Security of Physical Media (CCTV and voice records) | |||
| Transaction Security Information (IP address, Entering-exiting Sites, E-mail traffic logs, Company e-mail address archive, Username and password) | |||
| Financial Information (Salary, Debt/Balance information, Bank details, Additional payments and stoppage if any) | |||
| Sensitive Personal Data (Criminal records, Disability, Health report, Information needed for health insurance) | |||
| Reference Information (Name, Surname, Title, Workplace, E-mail Address, Telephone Number) | |||
| Person to Call in an Emergency (Name, Telephone No, Relationship Type, E-mail Address) | |||
| Business Partner | ID Information (Name, Surname, Turkish/Tax ID no, ID information and signature of the representative written in the signature circular) | Conducting Communication Activities, Execution / Control of Business Activities, Tracking Requests / Complaints, Giving Information to Authorized Persons, Institutions and Organizations, Execution of Activities in Compliance with Legislation, Execution of Agreement Processes, Execution of Financial and Accounting Affairs, Monitoring and Execution of Legal Affairs, Execution for Retention and Archive Activities | Clearly provided for by the laws, Necessary provided that the data of the parties is directly related to the conclusion or fulfilment of that contract, Mandatory for the data controller to be able to perform its legal obligations, Mandatory for the legitimate interests of the controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject |
| Contact Information (Telephone no, Address, E-mail address) | |||
| Legal Action Information (Lawsuit/legal proceeding information, information written in legal notices judicial/administrative correspondences of disputes, if any) | |||
| Financial Information (Bank details) |
In absence of legal grounds stipulated in Article 5/2 and 6/3 of the KVKK, Data Subject’s personal data may only be processed based on his/her explicit consent. The Data Subject may always withdraw his/her consent.
If the Data Subject gives his/her explicit consent, the Company will process personal data by sending him/her promotional, advertising and marketing materials related to our fields of activity and scope of services, as well as e-mails, sms, containing detailed information about our services, and by phone calls, in order to make him/her informed on our services and events and to provide his/her participation in the campaigns we organize. At the same time, if the Data Subject gives his/her explicit consent, the Company will store personal data in order to send the materials related to these service details and our advertising-marketing materials (such as surveys, satisfactory calls, marketing studies) periodically.
If the Employee Candidate or the Employee / Intern gives his/her explicit consent, the Company may process his/her sensitive data, which are criminal records and health information, in order to conduct its activities in line with the legislation.
To Whom and For What Purposes Can Your Personal Data Be Transferred?
Personal Data be transferred to legally authorized agencies and the Company’s branches, group companies, affiliates and business partners of the Company within the framework of the conditions and purposes for processing personal data outlined in Article 8 and Article 9 of the KVKK in order to fulfill its legal obligations.
Personal Data may be transferred to and the Company’s foreign group companies and/or affiliates based on the Data Subject’s explicit consent.
Method for Collecting Personal Data and its Retention Period
Personal Data collected during the employment process will be processed and acquired in any written or electronic format stored in data bases locally and/or abroad, if the Data Subject has given explicit consent, in line with the purposes outlined above .
Personal Data will be kept during the period stated in the relevant legislation or the term necessary for the processing purposes. Personal Data will be deleted, destroyed or anonymized ex officio or upon the Data Subject’s request, in case the legal grounds requiring data processing are eliminated.
Rights Determined in Article 11 of the KVKK and Methods to Contact the Company
As a data subject, the Data Subject has the following rights in accordance with Article 11 of the KVKK:
- Find out whether or not personal data has been processed,
- Request information about the processing of personal data if it has occurred,
- Find out the purpose of processing the personal data and whether or not it was processed for this purpose,
- Know third parties to whom personal data was transferred either domestically or abroad,
- Request that personal data processed incorrectly or incompletely be corrected and request that third parties to whom the transaction in correction was made are informed,
- Request that personal data be erased or destroyed if the reasons that required processing no longer apply in spite of the fact that it was processed in accordance with the provisions of the PPDL or other applicable legislation, and request that third parties to whom personal data was transferred as part of this process be informed,
- Object to any unfavorable consequences arising from the analysis of processed data via exclusively automatic systems,
- Request remedy of damages if they incur losses due to the unlawful processing of personal data.
The Data Subject may transmit his/her applications and requests regarding personal data to the Company through the Data Subject Application Form. Requests shall be answered by the Company within 30 days at the latest following its receipt. However, if a charge is specified by the Personal Data Protection Board, the cost on the fee schedule specified shall be collected by the Company.