As CONSTMACH Machine Industry and Trade Inc., we place maximum importance on the lawful protection and processing of Personal Data in accordance with the Personal Data Protection Law No. 6698 (KVKK). We meticulously adhere to this principle in all our planning and activities.
We do not evaluate the protection and processing of Personal Data merely as a matter of legal compliance; the foundation of our approach is the value we place on individuals. With this awareness, we take all necessary administrative and technical measures for the protection and processing of Personal Data. To ensure policy compliance, awareness-raising efforts are carried out for employees, orientation processes are implemented for new employees, and the necessary adjustments are made.
1. Examples of Personal Data
Identity Data: Name, surname, date of birth, country of birth, city of birth, gender, marital status, nationality, Turkish ID card information (ID number, serial number, father's name, mother's name, place of birth, province, district, neighborhood, volume number, family sequence number, sequence number, household number, page number, registration number, place of issue, reason for issue, issue date, previous surname), copy of ID card.
Contact Data: Phone number, address, email address, corporate communication information (internal phone number, corporate email address).
Financial Data: Financial and salary details, payroll, bonus entitlements, bonus amounts, file and debt information related to execution proceedings, bank account statement, minimum subsistence allowance information, private health insurance amount.
Special Categories of Personal Data: Union membership, former convict status/criminal record, disability status/definition/percentage, religion, health data, blood type, private health insurance policy, health reports, pre-employment health report, chest X-ray, hearing test, eye test, entry and periodic examination forms signed by the occupational health physician, pregnancy status, pregnancy report, health and maternity leave information, association/foundation memberships.
Education Data: Education status, certificate and diploma information, foreign language skills, education and skills, CV, courses taken.
Visual and Auditory Data: Photographs, voice recordings, camera recordings.
Employee Performance and Career Development Data: Training and skills, information about the date of training received, email, signed participation forms, customer interview quality assessment forms, monthly performance evaluation and achievement status, activity information.
Family and Relative Data: Marriage certificate; name, surname, Turkish ID number, gender, date of birth, height, weight, position and phone number of spouse and children; names, surnames and phone numbers of relatives.
Employment Data: Personnel number, position name, department and unit, title, date of last employment, entry and exit dates, insurance entry/retirement, allocation number, social security number, tax office number, flexible working hours status, travel status, retirement fund details, accounting code, number of working days, projects worked on, monthly total overtime information, seniority pay base date and additional days.
Leave Data: Leave seniority base date, leave seniority additional days, leave group, exit/return date, days, reason for leave, address/phone during leave.
Other: Military service deferral, vehicle plate, vehicle registration copy, driver's license copy, private fund details, shuttle and stop data, employee internet access logs, entry-exit turnstile records, employee daily activity data and similar records.
2. Purposes and Legal Bases for Processing Personal Data
Our company processes personal data of both job candidates and employees within the scope of the employment relationship for the following purposes:
- Creating personnel files,
- Fulfilling legal obligations,
- Providing information to authorized institutions as required by legislation,
- Defining personnel entry cards for monitoring work attendance,
- Personnel evaluations (performance reviews, promotions, disciplinary actions, dismissals),
- Managing legal proceedings initiated against our company,
- Organizing business trips and processing expense reports,
- Determining professional qualifications, ensuring communication and supporting production activities,
- Analyzing reasons for leaving and overtime,
- Implementing occupational health and safety practices,
- Ensuring employee safety, protecting assets, preventing losses and safeguarding our legitimate interests,
- Establishing and managing the information security infrastructure,
- Ensuring communication in emergencies.
The legal bases for processing include the Labor Law No. 4857, the Social Security and General Health Insurance Law No. 5510, the Occupational Health and Safety Law No. 6331, the Turkish Code of Obligations No. 6098, the Personal Data Protection Law No. 6698 and related regulations. Personal data may additionally be processed, stored and recorded for audits by the Ministry of Labor and Social Security Institution inspectors, statistical studies, court and expert examinations, and upon request by local law enforcement and the Directorate of the Organized Industrial Zone.
Furthermore, data related to health, criminal convictions and security measures are processed to fulfil legal obligations, provide information to authorized institutions, implement workplace health and safety measures, create and maintain personnel files, issue workplace ID cards, carry out periodic health examinations and monitor absenteeism.
3. Method of Collecting Personal Data
Personal data is collected through job application forms, shared CVs, online job applications on our website, forms defined in our procedures and completed for our HR department, onboarding documents provided during hiring, forms filled out during training, daily attendance records, overtime forms and HR forms received as a result of requested information.
4. Transfer of Personal Data
Our company complies with the regulations set out in the KVKK when transferring personal data. Except for the exceptional cases specified in the legislation, personal data and special categories of data are not transferred to other natural or legal persons without the explicit consent of the data subject. In exceptional cases required by the KVKK and other legislation, utmost care is taken to comply with the procedures and limitations stipulated in the legislation when transferring personal data to authorized administrative or judicial institutions or private organizations.
Your personal data may be transferred to authorized official institutions and legally authorized private persons for the fulfilment of legal obligations or the establishment, exercise or protection of the company's rights; to our suppliers and shipping subcontractors for resolving customer complaints, meeting customer requests and ensuring communication; and to our shareholders, suppliers, domestic and international business partners, group companies, affiliates and companies from which we receive outsourced services (security, health, occupational safety, legal, etc.), in accordance with the conditions and purposes set out in Articles 8 and 9 of the KVKK.
5. Storage and Protection of Personal Data
Your personal data is stored confidentially in our company's databases and systems in accordance with Article 12 of the KVKK, and is not shared with third parties in any way except for legal obligations and the arrangements specified in this document. Our company is obliged to prevent the unlawful processing of personal data and unauthorized access by implementing software measures such as access management as well as physical security measures.
6. Duration of Storage of Personal Data
Your personal data will be stored for the periods defined in the relevant laws for as long as you are employed; if you leave the company, your data will be stored for 15 years.
7. Your Rights under Article 11 of the KVKK
By applying to our company in accordance with the KVKK, you have the right to:
- a) Learn whether your personal data is being processed,
- b) Request information if your personal data has been processed,
- c) Learn the purpose of the processing and whether the data is used in accordance with that purpose,
- ç) Know the third parties to whom your personal data is transferred domestically or abroad,
- d) Request correction if your personal data is incomplete or inaccurate,
- e) Request deletion or anonymization of your personal data under the conditions set out in Article 7 of the KVKK,
- f) Request that the transactions carried out under items (d) and (e) be notified to the third parties to whom your data has been transferred,
- g) Object to a result arising against you due to analysis carried out exclusively by automated systems,
- ğ) Request compensation if you suffer damage due to unlawful processing of your personal data.
8. How to Apply
For requests regarding your personal data as defined in this text, you may apply:
- Via registered electronic mail (KEP) to constmach@hs01.kep.tr with the KVKK Application Form (signed and scanned),
- In writing, with the KVKK Application Form, to our address: Halilbeyli Bayosb Nif Caddesi No: 39 Bağyurdu Organize Sanayi Bölgesi.
For questions, you can reach us at info@constmach.com or +90 542 810 25 48.
9. Response Time for Applications
Your request submitted by petition or e-mail will be answered within 30 days at the latest, via the contact method you have specified.
