KVKK - Navbea

Network Access Information Text

Information Security Policy

Call Center Information Text

COMPANY Personal Data Processing and Protection Policy

COMPANY General Information Text

COMPANY Personal Data Storage and Destruction Policy

KVKK Application Form

Network Access Information Text

Information Security Policy

Call Center Information Text

COMPANY Personal Data Processing and Protection Policy

COMPANY General Information Text

COMPANY Personal Data Storage and Destruction Policy

KVKK Application Form

COMPANY:	Kodar Bilişim İletişim ve Tanıtım Hizmetleri Tic. Ltd. Ltd.
EXPRESS CONSENT:	Consent regarding a specific subject, based on information and expressed with free will.
ANONYMOSIS:	It is the alteration of personal data in such a way that it loses its nature as personal data and this situation cannot be reversed. Ex: Masking, aggregation, data corruption, etc. Making personal data unable to be associated with a natural person using techniques.
RELATED PERSON:	The real person whose personal data is processed. Ex: Customers, visitors, employees and employee candidates.
PERSONAL DATA:	Any information regarding an identified and identifiable natural person. Therefore, processing of information regarding legal entities is not within the scope of the Law. For example: name-surname, TR ID number, e-mail, address, date of birth, credit card number, bank account number, etc.
SPECIAL PERSONAL DATA:	Data regarding race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data are special data.
PROCESSING OF PERSONAL DATA:	Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or using personal data in whole or in part by automatic or non-automatic means provided that it is a part of any data recording system. Any operation performed on the data, such as blocking.
DATA CONTROLLER:	It refers to the natural or legal person who determines the purposes and means of processing personal data and manages the place where the data is systematically kept (data recording system).
DATA OWNER APPLICATION FORM:	The application form that the Relevant Person will use when applying for their rights stated in Article 11 of the KVK Law.
CONSTITUTION:	Constitution of the Republic of Turkey, No. 9, dated 1982 November 17863, published in the Official Gazette No. 7, dated 1982 November 2709.
KVK LAW:	Personal Data Protection Law No. 7, dated 2016 March 29677, published in the Official Gazette No. 24, dated 2016 April 6698.
POLICY:	Company Personal Data Protection and Processing Policy
NOTIFICATION ON THE PROCEDURES AND PRINCIPLES TO BE FOLLOWED IN FULFILLING THE DISCLOSURE OBLIGATION:	Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, which came into force after being published in the Official Gazette No. 10 dated 2018 March 30356.
PERSONAL DATA STORAGE AND DESTRUCTION POLICY:	In accordance with the Regulation on Deletion, Destruction and Anonymization of Personal Data, the company determines the maximum period required for the purpose for which personal data is processed and the policy used as the basis for the deletion, destruction and anonymization process.
PERIODIC DISPOSAL:	The deletion, destruction or anonymization process to be carried out at recurring intervals in case all the processing conditions of personal data specified in the law are eliminated.
REGISTERED ELECTRONIC MAIL (REP):	It is a system that protects all kinds of commercial, legal correspondence and document sharing as you send it, determines exactly who the recipient is, ensures that the content is not changed, and turns the content into legally valid, safe and definitive evidence.
DATA CONTROLLERS REGISTRY INFORMATION SYSTEM:	The information system created and managed by the Presidency, accessible over the internet, that data controllers will use in applying to the Registry and other related transactions related to the Registry.

Personal Data Categories	Subheadings and Explanations
ID	Documents such as driver's license, identity card and passport containing information such as name and surname, TR ID number, nationality information, mother's name-father's name, mother's maiden name, place of birth, date of birth, gender, as well as tax number, SSI number, signature information, vehicle license plate. etc. information.
Contact	Contact information; telephone number, address, e-mail address, fax number, etc. are personal data.
personnel	Payroll information, disciplinary investigation, employment entry-exit document records, CV information, performance evaluation reports, etc.
Legal action	Correspondence information with Judicial Authorities, information in case files.
Customer Transaction	Invoice, bill of exchange, check information, request information, order information, etc. data about customers.
Physical Space Security	Entry and exit records and camera recordings of employees and visitors.
Transaction Security	Website login and logout information, IP address information, password and password information.
Finance	Balance sheet information, asset information.
Professional Experience	Diploma information, courses attended, in-service training information, transcript information, certificates.
Audiovisual Records	Visual and audio recordings
Special Personal Data	Data specified in Article 6 of the KVKK (for example, health data including blood type, biometric data, religion and membership information, etc.).

COMPANY:	Kodar Bilişim İletişim ve Tanıtım Hizmetleri Tic. Ltd. Ltd.
EXPRESS CONSENT:	Consent regarding a specific subject, based on information and expressed with free will.
ANONYMOSIS:	It is the alteration of personal data in such a way that it loses its nature as personal data and this situation cannot be reversed. Ex: Masking, aggregation, data corruption, etc. Making personal data unable to be associated with a natural person using techniques.
PERSONAL DATA:	Any information regarding an identified and identifiable natural person. Therefore, processing of information regarding legal entities is not within the scope of the Law. For example: name-surname, TR ID number, e-mail, address, date of birth, credit card number, bank account number, etc.
ELECTRONIC ENVIRONMENT:	Environments where personal data can be created, read, changed and written with electronic devices.
NON-ELECTRONIC MEDIA:	All written, printed, visual, etc. except electronic media. other media
SPECIAL PERSONAL DATA:	Data regarding race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data are special data.
PROCESSING OF PERSONAL DATA:	Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or using personal data in whole or in part by automatic or non-automatic means provided that it is a part of any data recording system. Any operation performed on the data, such as blocking.
DATA CONTROLLER:	It refers to the natural or legal person who determines the purposes and means of processing personal data and manages the place where the data is systematically kept (data recording system).
DATA OWNER APPLICATION FORM:	The application form that the Relevant Person will use when applying for their rights stated in Article 11 of the KVK Law.
CONSTITUTION:	Constitution of the Republic of Turkey, No. 9, dated 1982 November 17863, published in the Official Gazette No. 7, dated 1982 November 2709.
KVK LAW:	Personal Data Protection Law No. 7, dated 2016 March 29677, published in the Official Gazette No. 24, dated 2016 April 6698.
POLICY:	Company Personal Data Storage and Destruction Policy
NOTIFICATION ON THE PROCEDURES AND PRINCIPLES TO BE FOLLOWED IN FULFILLING THE DISCLOSURE OBLIGATION:	Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, which came into force after being published in the Official Gazette No. 10 dated 2018 March 30356.
PERSONAL DATA STORAGE AND DESTRUCTION POLICY:	In accordance with the Regulation on Deletion, Destruction and Anonymization of Personal Data, the Company determines the maximum period required for the purpose for which personal data is processed and the policy used as the basis for the deletion, destruction and anonymization process.
DESTRUCTION:	Deletion, destruction or anonymization of personal data.
RELATED USER:	Persons who process personal data within the data controller organization or in line with the authority and instructions received from the data controller, excluding the person or unit responsible for the technical storage, protection and backup of the data.
RELATED PERSON:	The natural person whose personal data is processed.
RECORDING MEDIA:	Any environment where personal data is processed wholly or partially automatically or by non-automatic means provided that it is a part of any data recording system.
PERIODIC DISPOSAL:	The deletion, destruction or anonymization process to be carried out at recurring intervals in case all the processing conditions of personal data specified in the law are eliminated.
REGISTERED ELECTRONIC MAIL (REP):	It is a system that protects all kinds of commercial, legal correspondence and document sharing as you send it, determines exactly who the recipient is, ensures that the content is not changed, and turns the content into legally valid, safe and definitive evidence.
DATA CONTROLLERS REGISTRY INFORMATION SYSTEM:	The information system created and managed by the Presidency, accessible over the internet, that data controllers will use in applying to the Registry and other related transactions related to the Registry.
REGULATION:	Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28 October 2017.

Data Recording Environment	DESCRIPTION
Personal Data on Servers	For personal data on the servers whose retention period has expired, the system administrator removes the access authorization of the relevant users and deletes them.
Personal Data in Electronic Media	Among the personal data in the electronic environment, those whose period of storage has expired are made inaccessible and unusable for other employees (relevant users) except the database administrator.
Personal Data in Physical Environment	Personal data kept in physical environment, for those whose period of storage has expired, are made inaccessible and unusable by all employees except the unit manager responsible for the document archive. In addition, blackening is also applied by drawing/painting/erasing the surface so that it cannot be read.
Personal Data Contained in Portable Media	Among the personal data kept in flash-based storage media, those that have expired are stored in secure environments with encryption keys, by being encrypted by the system administrator and access authorization is given only to the system administrator.

Data Recording Environment	DESCRIPTION
Personal Data in Physical Environment	Personal data stored on paper that have expired are irreversibly destroyed in paper shredding machines.
Personal Data Contained in Optical / Magnetic Media	Personal data contained in optical media and magnetic media whose storage period has expired are physically destroyed, such as melting, burning or pulverizing. In addition, the data on the magnetic media is rendered unreadable by passing it through a special device and exposing it to a high magnetic field.

Method	DESCRIPTION
Masking	Data masking is the method of anonymizing personal data by removing the basic identifying information of personal data from the data set.
Regional Hiding	In the regional hiding method, if a single data has a deterministic nature because it creates a very less visible combination, hiding the relevant data provides anonymization.
Removing Records	In the derecording method, the data line that contains a singularity is removed from the records and the stored data is made anonymous.
Global Coding	With the data derivation method, a more general content is created from the content of personal data and it is ensured that personal data cannot be associated with any individual. For example; Specifying ages instead of dates of birth; stating the region of residence instead of full address.
Adding Noise	The method of adding noise to the data, especially in a data set where numerical data is predominant, makes the data anonymous by adding some positive or negative deviations to the existing data at a determined rate.

PERSON GROUP WHOSE DATA IS PROCESSED	DATA CATEGORY	DATA STORAGE PERIOD
Working	Identity, Communication, Location, Personnel, Legal Process, Physical Space Security, Process Security, Professional Experience, Audio-Visual Records, Duty and Title Data, Belief Information, Employee Relative Information.	It is kept for 10 (ten) years from the termination of the employment contract.
Working	Health	It is kept for 15 (fifteen) years from the termination of the employment contract. (Occupational Health and Safety Services Regulation Article 7)
Employee Candidate	Identity, Communication, Legal Process, Professional Experience, Audio-Visual Records, Position and Title Data.	6 months from the date of job application, 10 years from the termination of the employment contract
E-Commerce Information	E-Commerce Membership Information	6563 year from the creation of the record in accordance with the Law on the Regulation of Electronic Commerce No. 1.
Website Visitor	Transaction Security	2 years from the creation of the record.
Product/Service Recipient	Identity, Communication, Transaction Security, Customer Transaction	Each product/service purchased by the service recipient is stored for 146 (ten) years in accordance with Turkish Code of Obligations Article 82 and Turkish Commercial Code Article 10.
Product/Service Recipient, Supplier, Employee, Intern	Physical Space Security	3 Months from the Date of Recording in Ordinary Times, Statute of Limitations for Legal Cases
Institutions/Companies (Suppliers) with which the company cooperates	Identity, Contact Information, Financial Information	It is kept for 146 years during and after the termination of the business/commercial relationship in accordance with the Turkish Code of Obligations Article 82 and the Turkish Commercial Code Article 10.

Name and surname:
Turkish Identity Number:
Address:
Mobile phone:
E-mail address:

☐ Customer	☐ Business Partner/Solution Partner/Consultant
☐ Visitor	☐ Other (Explain…)
The unit you are in contact with within our company:
Konu:

GDPR

PART 1

1.1 INTRODUCTION

1.2. PURPOSE

WHAT IS THE SCOPE?

1.4. AIM

SECTION 2

2.1. DEFINITIONS AND ABBREVIATIONS

SECTION 3

PART 4

4.1. Processing of Personal Data in Accordance with the Principles Provided in the Legislation

4.1.1. Engaging in Personal Data Processing Activities in Compliance with Law and Honesty

4.1.2. Ensuring Personal Data is Accurate and Up-to-Date When Necessary

4.1.3. Processing for Specific, Clear and Legitimate Purposes

4.1.4. Being Related to the Purpose for Processing, Limited and Proportionate

4.1.5. Preservation for the Period Envisaged in the Relevant Legislation or Necessary for the Purpose for which they are Processed

4.2. Conditions for Processing Personal Data

PART 5

SECTION 6

PART 7

PART 8

PART 9

PART 1

1.1 INTRODUCTION

1.2. PURPOSE

SECTION 2

2.1. DEFINITIONS AND ABBREVIATIONS

SECTION 3

PART 4

PART 5

PART 6

PART 7

CERTIFICATES

BULLETIN SUBSCRIPTION

Select Language

Cookies are used on this website to provide you with a better service. You can review the Privacy Policy to change your cookie preferences and get detailed information about Cookies.