OUR POLICY ON CONFIDENTIALITY AND PERSONAL DATA PROTECTION
GEOSIS POWERTRAIN MOTOR VE KONTROL TEKNOLOJİLERİ ANONİM ŞİRKETİ (GEOSIS POWERTRAIN MOTOR AND CONTROL TECHNOLOGIES INC.) aims to create awareness about the lawful processing and protection of personal data within its organization, as well as to establish the necessary regulations in accordance with the legislation and to provide complete legal and practical protection concerning personal data.
To fulfill the obligation of disclosure arising from Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVK Law”), GEOSIS presents the following explanations for the information and attention of third parties.
- Definitions:
- GEOSIS: Refers to GEOSIS POWERTRAIN MOTOR VE KONTROL TEKNOLOJİLERİ ANONİM ŞİRKETİ (GEOSIS POWERTRAIN MOTOR AND CONTROL TECHNOLOGIES INC.) and all companies, both domestic and foreign, in which its partners have direct or indirect shares.
- Personal data: Refers to any information related to an identified or identifiable natural person.
- Special category personal data: Refers to data related to a person’s race, ethnic origin, political opinions, philosophical beliefs, religion, sect, or other beliefs, clothing and attire, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data as specified in Article 6 of the KVK Law.
- Processing of personal data: Refers to any operation performed on personal data, including but not limited to obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transmitting, acquiring, making available, classifying, or preventing the use of data, whether by automatic or non-automatic means as part of a data recording system.
- Data processor: Refers to the natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.
- Data recording system: Refers to the recording system in which personal data is processed in accordance with certain criteria.
- Data controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
- Purpose of Processing Personal Data:
Personal data may be processed by GEOSIS for the purposes of fulfilling legal and administrative obligations, entering into and executing contractual relationships, conducting all necessary work, determining suitable products, projects, and services for customers, customizing and developing them for customers, ensuring and improving efficiency, ensuring the security of the websites and other electronic systems used, ensuring compliance with legislation, making necessary notifications to parties, conducting audit activities, investigating, identifying, preventing violations of contracts and laws, reporting to administrative and judicial authorities, exercising legal rights, resolving legal disputes, responding to requests and inquiries, measuring satisfaction, performance, and similar metrics, carrying out operations, formulating policies, meeting needs, conducting recruitment processes, and determining company strategies, establishing, using, and protecting rights.
- Who Personal Data Can Be Transferred To and For What Purpose:
Personal data may be obtained through direct discussions, as well as through the website and similar written, verbal, and electronic means from institutions and legal entities (partners, customers, suppliers, agencies, consultants, etc.) with which GEOSIS has any business relationship. This information may also be obtained during training, seminars, or events organized by third parties outside of GEOSIS in its workplaces and projects. Your personal data may be retained for the duration specified in the company’s relevant policies or as provided by law. Collected personal data may be shared with shareholders, partners, customers, suppliers, agencies, consultants, and other private or public institutions within the framework of Article 8 of the KVK Law for the purposes mentioned above, including for achieving the objectives of processing personal data.
Under Article 9 of the KVK Law, personal data may also be shared with other private individuals or legal entities, including those located abroad, as required by legislation.
- Method and Legal Basis for Collecting Personal Data:
Personal data may be collected either wholly or partially through automatic methods or non-automatic methods that are part of a data recording system, depending on the nature of the means specified in this document. Personal data are processed and transferred in accordance with Article 5 of the KVK Law and can be processed and transferred as special category data in compliance with Article 6.
- Rights of the Relevant Persons Regarding Their Personal Data and How They Can Use These Rights:
The rights of the Relevant Person regarding personal data processed by GEOSIS, as stipulated in Article 11 of the KVK Law, are listed below:
- Learn whether personal data is being processed,
- Request information about personal data if it has been processed,
- Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom personal data has been transferred, domestically or internationally,
- Request correction of personal data if it is incomplete or incorrectly processed,
- Request deletion or destruction of personal data under the conditions specified in Article 7 of the KVK Law,
- Request notification of the actions taken under (d) and (e) to the third parties to whom personal data has been transferred,
- Object to the occurrence of a result against the person itself by analyzing processed data exclusively through automated systems,
- Request compensation for damages incurred due to unlawful processing of personal data.
To exercise your rights regarding your personal data, you can submit your application using the methods specified in the “Relevant Person Application Form” arranged pursuant to Article 13 of the KVK Law on the GEOSIS website.
GEOSIS will respond to requests related to the processing and protection of personal data as soon as possible and in any case within 30 days, free of charge.
For this period to commence, requests made by the relevant persons must be sent to GEOSIS in writing or through other methods determined by the KVK Board, and the identity verification documents of the data owner must also be provided completely. Until a method is determined by the Board, applications must be made in writing. During the application to be made by the relevant person, it is necessary to clearly state which right they are exercising, and if applicable, the relevant information and documents should be sent by registered mail to the address: Yeni Bağlıca Mahallesi Zirve Caddesi No: 63 06790 Etimesgut ANKARA TÜRKİYE.
Requests made by the relevant person may be accepted by GEOSIS or rejected with a justification within the scope of the legislation, and a response will be provided in writing or electronically. If the application is accepted, GEOSIS will fulfill the requirements. In certain cases regarding requests for the processing/modification/deletion of personal data, it may not be possible to respond positively due to legal obligations or other reasons specified under Articles 5 and 6 of the KVK Law. In such cases, the reasons for rejection will be detailed and the legal basis will be communicated.
In case the application is rejected by GEOSIS within the framework of legal regulations, if the response given is deemed insufficient, or if a response is not provided within the stipulated time, the relevant person has the right to lodge a complaint with the KVK Board within 30 (thirty) days from the date they became aware of the response and in any case within 60 (sixty) days from the date of application.