DATA PROTECTION INFORMATION NOTICE
ZS Yurtdışı Kariyer Danışmanlığı ve Pazarlama Ltd. Şti. (“ZS”) attaches the utmost importance to the security of your personal data. This document has been prepared to inform the data subject about the policies created and implemented by ZS Yurtdışı Kariyer Danışmanlığı ve Pazarlama Ltd. Şti.(“ZS”) regarding the obligations imposed on data controllers within the scope of the Personal Data Protection Law (“KVKK”), which came into effect by being published in the Official Gazette dated April 7, 2016.
- Information About the Data Controller
In accordance with the law, ZS Yurtdışı Kariyer Danışmanlığı ve Pazarlama Ltd. Şti., registered with the Istanbul Trade Registry with the registration number 414891-5, having a MERSIS number 0999-1320-8340-0001, and located at Taksim Square Sıraselviler Cad. Taner Palas Apt. No:9 Floor:6 Apt:12, 34427 Beyoğlu/ISTANBUL, is the Data Controller.
- Definitions Within the Scope of KVKK
Explicit Consent | Consent based on being informed about a specific subject and declared with free will.
|
Anonymization | Making personal data so that it cannot be associated with an identified or identifiable real person by matching it with other data in any way. |
Personal Data | Any information related to an identified or identifiable real person. |
Special Categories of Personal Data | Special categories of data include race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal conviction, and data related to security measures, as well as biometric and genetic data. |
Processing of Personal Data | Any operation performed on personal data, whether fully or partially automatic, or non-automatic means as part of any data recording system, including obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making obtainable, classifying, or preventing the use of data. |
Board | Personal Data Protection Board. |
Policy | ZS Kariyer Danışmanlığı ve Pazarlama Ltd.Şti.‘s Personal Data Retention and Destruction Policy.
|
Data Processor | A natural or legal person who processes personal data on behalf of the data controller based on the authority given by them. |
Data Controller | The person determining the purposes and means of processing personal data, managing the place where data is systematically kept (data recording system), is the data controller. |
Purpose and Scope
Your collected personal data is processed within the framework of the conditions and purposes of personal data processing specified in Articles 5 and 6 of the Law for the purposes of receiving your suggestions, requests, thanks, or complaints regarding the services you receive from ZS through the “Information Request Form,” conducting activities for customer satisfaction, tracking requests and complaints, conducting customer relationship management processes, and managing communication activities. The processing is carried out in a lawful, honest, and always relevant, limited, and proportionate manner for these purposes. Within the scope of the mentioned purposes, your Identity Data such as your name and surname, Customer Transaction data, your Contact Data such as your phone number and email address, and other data from the “Information Request Form” text box can be collected and processed.
Principles Considered for the Processing and Storage of Personal Data
Personal data must be collected and processed in a lawful manner to protect the rights of data subjects. Care should be taken to collect and process only the necessary and sufficient information in line with the scope and purpose of the activity, avoiding the collection and processing of out-of-scope information. Personal data must be stored and preserved as confidential information. Necessary administrative and technical measures should be taken to prevent unauthorized access, illegal processing, sharing, accidental loss, alteration, or destruction of personal data, and it should be kept confidential at a personal level.
To Whom and for What Purposes Processed Personal Data Can Be Transferred
Your collected personal data may be transferred to our employees for the purpose of conducting the necessary work in line with the returns received regarding the service you received from ZS through the “Information Request Form.” This may include employees, contracted IT companies for data security and server hosting services, company officials, company shareholders, legally authorized public institutions and organizations, and, with your explicit consent, to servers belonging to the program integrated with the “Information Request Form” abroad and to our contracted business partner, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.
Your personal data is processed and transferred within the scope of the purposes mentioned above, based on your explicit consent in accordance with Article 5/1 of the Law and on the legal basis of the necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, as specified in Article 5/2 of the Law, and in accordance with the general principles in Article 4 of the Law.
- Rights Arising from the Law for the Data Subject
As the data subject, you can request to exercise your rights arising from the Law through the methods specified below, and ZS will respond to your request within 30 (thirty) days at the latest, depending on the nature of the request. However, if a fee is envisaged by the Law and the Personal Data Protection Board, the fee determined by ZS will be charged to you. In this context, in accordance with Article 11 of the Law, you can request to exercise the following rights:
- To learn whether personal data is being processed,
- To request information if personal data has been processed,
- To learn the purpose of the processing of personal data and whether they are used in accordance with that purpose,
- To obtain information about third parties to whom personal data is transferred, whether domestically or abroad,
- To request the correction of personal data in case of incomplete or incorrect processing,
- To request the deletion or destruction of personal data in case the reasons requiring the processing of personal data cease to exist, despite being processed in accordance with the Law and other relevant laws, and to obtain information about third parties to whom personal data has been transferred for such processing,
- To object to a result that arises against the individual by analyzing the processed data exclusively through automated systems,
- To request the remedy of damages in case of harm due to the processing of personal data unlawfully.
- Reasons Requiring Deletion
Personal data:
- Change or repeal of the relevant legislation that constitutes the basis for processing,
- Withdrawal of the explicit consent of the relevant person when processing personal data is based solely on the condition of explicit consent,
- Acceptance by the Board of the application made by the relevant person in accordance with Article 11 of the Law for the deletion and destruction of personal data,
- Rejection of the application for the deletion, destruction, or anonymization of personal data by the Board, finding the response insufficient, or failure to respond within the period specified in the Law,
- If the maximum duration for which personal data must be retained has elapsed and there are no conditions justifying the continued storage of personal data, the authority will, upon the individual’s request, delete, destroy, or automatically delete, destroy, or anonymize the data.
You can submit your requests related to your rights and the application of the Law by filling out the application form that you can obtain from the workplace and sending it to Taksim Meydanı Sıraselviler Cad. Taner Palas Apt. No:9 Kat:6 D:12, 34427 Beyoğlu / ISTANBUL address by notary public, registered mail with return receipt, or personal application. Alternatively, you can send the completed application form in electronic form with your wet signature, mobile signature, or secure electronic signature to [email protected] using your KEP address or the email address already registered in ZS’s data recording system. ZS will respond in writing to requests in this context free of charge if a written response is required.
