Neva Charge

Personal Data Protection Clarification Text

This clarification text has been prepared by Neva Charging in the capacity of data controller within the scope of the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Illuminate with Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”).

1. Data Controller

Personal data is processed in the categories of Employees, Candidates for Employees, Owners, Trainees, Supplier Employees, Supplier Officials, Persons Receiving Products or Services, and Visitors in the categories notified to the verbis system, taking into account the privacy issues. Pursuant to the Law, the extent to which it can be processed by Neva Charging in the capacity of data controller is explained with this lighting text (“Lighting Text”).

2. What is the Collection Method and Legal Reason of Personal Data?

Personal data, including health information, are obtained from the person concerned, from the systems that can detect location, and from the authority of the company where the supplier employees work, fully or partially automatically or non-automatically, provided that they are part of any data recording system. . Personal data can be processed in accordance with the basic principles stipulated by the Law, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, with the natural and legal persons specified in this Clarification Text, in the country and abroad for the following purposes; and can be transferred.

3. What are the Circumstances in which the Data Controller can Process Personal Data without Explicit Consent in accordance with the Law?

Pursuant to Article 5 of the Law, Neva Charge may process the personal data it has received in accordance with the law, without seeking explicit consent, in the following cases:

Where expressly provided for by law,
If the Personal Data Owner is unable to express his or her consent due to actual impossibility, or in cases where the consent is not legally valid, it is necessary to process personal data in order to protect the life or physical integrity of the Personal Data Owner or someone else,
It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract concluded between Neva Charging and the Personal Data Owner,
It is mandatory for Neva Charging to fulfill a legal obligation,
The personal data has been made public by the Personal Data Owner,
Data processing is mandatory for the establishment, exercise or protection of a right,
Provided that fundamental rights and freedoms are not harmed, data processing is mandatory for the legitimate interests of Neva Charging.
In addition, in accordance with Article 6 of the Law, in the following cases, Neva Charging may process the sensitive personal data it has received in accordance with the law without seeking consent:

Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are of special nature. is personal data.
Special categories of personal data other than the health and sexual life of the personal data owner, if prescribed by law,
Persons or authorized institutions and organizations that are under the obligation to keep confidential, only for the purpose of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing. be by.

4. What are the Purposes of Processing Personal Data?

Personal data;

Execution of Employee Candidates and Internship Application Processes
Fulfillment of Employment and Legislation Obligations for Employees
Execution of Benefits and Benefits Processes for Employees
Conducting Educational Activities
Execution of Access Authorizations
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Providing Physical Space Security
Execution of Assignment Processes
Follow-up and Execution of Legal Affairs
Execution of Communication Activities
Planning of Human Resources Processes
Execution / Supervision of Business Activities
Execution of Occupational Health / Safety Activities
Execution of Service Procurement Processes
Execution of After-Sales Support Services
Execution of Service Sales Processes
Execution of Performance Evaluation Processes
Execution of Contract Processes
Execution of Wage Policy
Providing Information to Authorized Persons, Institutions and Organizations
Creating and Tracking Visitor Records

5. To Whom Personal Data Is Transferred For What Purpose?

Collected personal data shall be sent to legally authorized public institutions and organizations, Real persons or private law legal entities, Neva With charging, it can be transferred to companies/organizations that will establish a business contract and their business partners, suppliers and service providers.

Follow-up and Execution of Legal Affairs
Obtaining permissions and Execution of Assignment Processes for the personnel to work in the field
Notification of Subscription Initiation and Payment of Bills
Providing Physical Space Security,
Providing Information to Authorized Persons, Institutions and Organizations
Telephone Line Supply
Obtaining Access Authorizations to the Software of Business Partners
Meeting Tender Entry Requests
Fulfillment of Legal Obligation
Realization of SSI Notifications
Performing Card Printing
Opening Corporate User Accounts
Making Personnel Salary Payments
Execution of Contract Processes
Keeping the trainee attendance record
E-Prescription creation after diagnosis
by Neva Charge; To foreign countries declared to have sufficient protection by the KVK Board (“Foreign Country with Sufficient Protection”) or, in the absence of sufficient protection, to foreign countries where the data controllers in Turkey and the relevant foreign country undertake an adequate protection in writing and for which the permission of the KVK Board is available. Personal data can be transferred to countries (“Foreign Country with a Data Controller Undertaking Adequate Protection”).

6. What are the Rights of the Personal Data Owner?

Within the framework of Article 11 of the Law, the Personal Data Owner always applies to the data controller and;

Learning whether personal data is processed or not,
If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing,
Requesting the deletion or destruction of personal data in case the reasons requiring the processing of personal data disappear, in order to be evaluated within the principles of purpose, duration and legitimacy, Requesting the deletion or destruction of personal data,
Requesting the deletion, destruction or anonymization of personal data in the event that the reasons for processing disappear, although it has been processed in accordance with the Law on the Protection of Personal Data No. 6698 and other relevant laws.
Requesting notification of the transactions regarding the correction, deletion or destruction of personal data to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
Requesting the compensation of the damage in case of loss due to unlawful processing of personal data
has rights.

7. How Does the Personal Data Owner Use Their Rights?

Pursuant to Article 11 of the Law, the Personal Data Owner must fill in the application form completely and submit it to Neva Charging through the channels specified in the form in order to use the above-mentioned rights.
Neva Charging will conclude the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, Neva Charging reserves the right to charge the fee in the tariff determined by the Personal Data Protection Board.

8. How Long Will Personal Data Be Processed?

In accordance with the Law, personal data processed for the purposes specified in this Clarification Text will be deleted by Neva Charging when the purpose that requires processing in accordance with Article 7 of the Law disappears and/or when the statute of limitations required for data processing by Neva Charging expires, will be destroyed or anonymized and will continue to be used.