The Informative Text On Processing Personal Data
Gemicioğlu Law Office(“GMC”) gives importance to security of the personal data collected of “clients, business partners, employee candidates and other third parties whom it is in contact with”. GMC is assumed to be the Data Controller in regard to processing of below-mentioned personal data under “Turkish Personal Data Protection Act, No:6698” (“Act”).
The below-mentioned activities are carried out in accordance with the necessities of the Act.
1)EMPLOYEE CADIDATES
The data, such as “name, surname, nationality ID, mother and father’s name, gender, birth date and place, civil status and other information placed on national ID card, phone number, address, e-mail, photograph, diploma/degree and CV, foreign language degree, previous work experience, computer knowledge, certificate and education information, course information, military service information” stated on documents and “interview notes” taken during the job interviews, that have been shared with GMC by yourself, the HR business partners or by your references, via using “http://www.gemicioglu.av.tr/kariyer/” addressed web site, digitally or non-digitally, are collected by automated and non-automated meansand such data are stored at archives, server, backup servers and e-mail of GMC. The personal data collected are processed based on the following legal grounds: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.The data is processed for the following purposes: “to carry out the job applicant’s recruitment process, to carry out candidate / intern / students as summer intern recruitment process, to carry out the hr process, to carry out communication activities,to carry out / audit the business activities”. The collected personal data is not shared with third parties.
2)CLIENTS
In regard to providing legal services, the data that have been shared digitally or non-digitally with GMC by yourself is collected by automated and non-automated means and such data are stored at archives, server, backup servers and e-mail of GMC. The personal data collected are processed based on the following legal grounds: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”, “processing is necessary for the institution, usage, or protection of a right”, “it is expressly permitted by law”, “for the legitimate interests of the data controller without violating the fundamental rights of the data subject”; in the case that such collected data involves sensitive data, the processing is based on the client’s consent. The data is processed for the following purposes: “to carry out the business activities in regard to the law and legislation, to carry out the legal, litigation and counselling services, to carry out communication activities,to carry out / audit the business activities”. The collected personal data is shared with judicial authorities, governmental institutions and third parties where necessary.
3)COMMUNICATION
In order to communicate with GMC, the information and data that is stated on the documents shared digitally or non-digitally via e-mail and etc. with GMC is collected by automated and non-automated means and such data are stored at archives, server, backup servers and e-mail of GMC. The personal data collected are processed based on the following legal grounds: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”, “processing is necessary for the institution, usage, or protection of a right”, “for the legitimate interests of the data controller without violating the fundamental rights of the data subject”; in the case that such collected data involves sensitive data, the processing is based on the data subject’s consent. The data is processed for the following purposes: “to carry out the business activities in regard to the law and legislation, to carry out the legal, litigation and counselling services, to carry out communication activities,to carry out / audit the business activities”. The collected personal data is not shared with third parties unless it is necessary.
As the Data Subject, you may apply to GMC in order to exercise the following rights in regard to provision 11 of the Act:
- request to learn whether your personal data is processed or not,
- to request information if your personal data is processed,
- to learn the purpose to process of your data and whether this data is used for intended purposes or not,
- to have information about the third parties (domestic/abroad) to whom your personal data is transferred,
- to request the rectification of the incomplete or inaccurate data and to request to notify the third parties that your personal data has been transferred to, about the operations carried out, if your personal data has been processed in compliance with the Act and the other relevant regulations, (in case there is no other legal ground to store), you have a right to demand erasure or destruction of your personal data,
- to object to the processing, exclusively by automated means, of your personal data, which leads to an unfavorable consequence for you,
- to request compensation for the damage arising from the unlawful processing of your personal data.
In this context, in order to use your rights stated above, please lodge your applications of exercising rights via sending a signed copy of the demand to the address of GMC: “Büyükdere Cad. Ecza Sk. No:6 SafterİşMrkz. Kat 2/9 1. Levent İSTANBUL” in person or through a notary, deliver it to [email protected] via using secured electronic signature/mobile signature or to[email protected]e-mail address via using your e-mail which has been already registered at the GMC system.
Kindest Regards,