PERSONAL DATA PROTECTION AND PROCESSING POLICY SECTION
In accordance with the Personal Data Protection Law No. 6698, Octo Aqua Marine Equipment and Consultancy Services and Trade Limited Company (OCTOAQUA), as the ‘Data Controller’, takes all measures in accordance with the legislation in force in this regard, to protect the personal data of its customers, employees and other real persons with whom it is in relationship. takes great care in obtaining it.
1.1. PURPOSE AND SCOPE
With this Personal Data Protection and Processing Policy (Policy), the personal data of our customers, potential customers, employees, employee candidates, visitors and third parties are transferred to the Republic of Turkey. It is aimed to process and protect personal data in accordance with the Constitution, international conventions, Personal Data Protection Law No. 6698 (Law or KVKK) and other relevant legislation, and to ensure transparency regarding the systems adopted for the processing and protection of personal data. The provisions and principles contained in this Policy apply to the processing of personal data that can be associated with an identified or identifiable natural person, obtained directly from relevant persons or obtained from third parties, wholly or partially automated or non-automatic, provided that it is part of any data recording system. It covers all kinds of operations and principles based on data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of data.
In the processing and protection of personal data, OCTOAQUA officials, employees and third parties who have access to the data processed by OCTOAQUA are bound by the principles set out in this Policy. OCTOAQUA takes all necessary administrative and technical measures to protect and process personal data in accordance with the law, and carries out the necessary inspections in this context. is doing or having it done.
DEFINITIONS
The legal and technical terms to be used in this Policy are explained below.
Explicit consent: Consent regarding a specific issue, based on information and expressed with free will.
Relevant person: Natural person whose personal data is processed.
Law: Personal Data Protection Law No. 6698, published in the Official Gazette No. 29677 dated April 7, 2016.
Personal data: Any information regarding an identified or identifiable natural person.
Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system, Any action performed on data, such as classifying or preventing its use.
Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
Data processor: Natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller.
Data recording system: A recording system in which personal data is structured and processed according to certain criteria.
Recording medium: Any environment where personal data is processed by fully or partially automatic or non-automatic means, provided that it is part of any data recording system.
3..ISSUES RELATED TO THE PROCESSING OF PERSONAL DATA
3.1. BASIC PRINCIPLES
OCTOAQUA, in accordance with Article 20 of the Constitution and Article 4 of the Personal Data Protection Law, regarding the processing of personal data; It processes personal data in a limited and measured manner, in accordance with the law and the rules of honesty, in an accurate and up-to-date manner when necessary, in connection with the purpose, for specific, clear and legitimate purposes, and retains personal data for the period stipulated by law or required by the purpose of personal data processing.
3.2. CATEGORIZATION OF PERSONAL DATA
OCTOAQUA collects personal data in the following categories according to KVKK Article 5 and 3.3 of this Policy. It is processed in accordance with the PERSONAL DATA PROCESSING CONDITIONS article.
Identity (name and surname, parents’ names, date of birth, place of birth, marital status, TR ID number, etc.)
Contact (address number, e-mail address, contact address, registered e-mail address (KEP), telephone number, etc.)
Location (location information of the location)
Personnel (payroll information, disciplinary investigation, employment entry-exit document records, property declaration information, resume information, performance evaluation reports, etc.)
Legal Procedure (such as information in correspondence with judicial authorities, information in the case file)
Customer Transaction (such as call center records, invoice, bill of exchange, check information, order information, request information)
Physical Space Security (such as employee and visitor entry and exit registration information, camera recordings)
Transaction Security (IP address information, internet
