INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), we, as Gürsoy İnşaat ve Proje Yönetimi A.Ş., would like to inform you about the processing, collection, methods, purposes of processing, the recipients of your personal data, the legal grounds, and your rights regarding the personal data and special categories of personal data of individuals and/or employees, partners, representatives, candidates, visitors, and other third parties with whom we have a relationship for commercial and/or other legal reasons.

Data Controller: Gürsoy İnşaat ve Proje Yönetimi A.Ş.
Mevlana Mah., Fatihbey Cad., No:10, Ataşehir/Istanbul

"Personal Data" refers to any information related to an identified or identifiable natural person.
"Special Categories of Personal Data" refers to data about a person’s race, ethnic origin, political opinions, philosophical beliefs, religion, sect, or other beliefs, clothing and appearance, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data.

Method of Collecting Your Personal Data, Purpose of Processing, and Processed Personal Data

Method of Collecting Your Personal Data
Your personal data is collected through direct or indirect means when entering into a contract, performing a service, applying for a job, collaborating with us, visiting our premises or website, and other similar activities. This data is processed in accordance with legal purposes and stored within legal limits for the required period.

Purpose of Processing Your Personal Data
In line with the lawful grounds set forth in the Personal Data Protection Law No. 6698, your personal data may be processed to ensure communication, fulfill legal and/or contractual obligations, comply with statutory and contractual obligations, provide notifications, and similar purposes without violating your fundamental rights and freedoms and your right to privacy.

Processed Personal Data
These include, but are not limited to, your name-surname, ID number, place and date of birth, employment details, profession, email address, address, phone information, video and audio recordings for security purposes, bank account and IBAN details, etc.
Special categories of personal data may include clothing and appearance due to your voice and image being recorded by video cameras.

Special categories of personal data can be processed with your explicit consent, required by law and the necessity of fulfilling legal obligations.

Your personal data is:

Processed in accordance with the law and good faith, for specific, clear, and legitimate purposes.
Kept accurate and, when necessary, updated.
Used in connection with the purpose for which it was collected, limited, and proportionate.
Retained for the duration of the legal retention period.

Your personal data will not be processed unlawfully or used for purposes other than its intended purpose, and will not be shared.

Legal Grounds for Processing Personal Data and Consent

Your personal data is processed for reasons including compliance with contractual obligations, legal obligations, fulfilling legal responsibilities, ensuring legitimate interests, and with your explicit consent in the case of processing special categories of personal data. If you agree, your explicit consent will be obtained in writing for the processing of such data. You may withdraw your consent at any time through the methods described below.

Personal Data may be processed in the following cases:

Explicit consent of the data subject
As expressly provided by law
When explicit consent cannot be obtained due to physical impossibility
When directly related to the establishment or performance of a contract
For the fulfillment of legal obligations
When the personal data subject has made the data public
For the establishment or protection of a legal right
When processing is necessary for legitimate interests of the company

Sharing and Transfer of Personal Data

Your processed personal data may be transferred to third parties within the limits prescribed by law, under adequate and effective security measures, and only when necessary for legal obligations or within the scope of agreements. If necessary, your explicit consent will be obtained for data sharing.
No personal data will be transferred abroad.

Retention, Protection, and Deletion of Personal Data

Personal data will be deleted, destroyed, or anonymized once the purpose for which it was collected has ceased or the legal or contractual obligation has been completed.
We take necessary administrative and technical measures to protect the confidentiality of your personal data, and implement access restrictions to ensure its security.

Your Rights Under the Law

Under the Personal Data Protection Law, you have the right to:

Learn whether your personal data is processed,
Request information regarding processed data,
Learn the purpose of processing and whether it is being used in compliance with that purpose,
Learn the recipients of your data, both domestically and internationally,
Request correction of any incomplete or incorrect data, and to request that third parties be notified of such corrections,
Request the deletion or destruction of personal data if the reasons for processing no longer apply, and to have third parties notified of the deletion or destruction,
Object to the processing of your data that leads to an adverse legal consequence for you, solely by automated means,
Seek compensation for any damage caused by the unlawful processing of your personal data.

To exercise your rights, please send your requests, along with documents verifying your identity, to gursoyinsaat@gursoygroup.com.tr via email (either with or without an electronic signature), or deliver it in person to Mevlana Mah., Fatihbey Cad., No:10, Ataşehir/Istanbul, or send it via notarized or registered mail.

We will respond to your requests within 30 (thirty) days without charge, unless the process incurs a cost. If a fee is required, the amount determined by the Personal Data Protection Board will be charged.

Sincerely,
Data Controller
Gürsoy İnşaat ve Proje Yönetimi A.Ş.