COOKIE NOTICE

The principles concerning the processing of your personal data by Demir Grup Yapı İnşaat Sanayi ve Ticaret Anonim Şirketi (“Company”) as the data controller (“Company”) based in “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/İstanbul” in accordance with the Turkish Law on Protection of Personal Data no. 6698 (“Law”) and other applicable legislation are provided in detail in this Disclosure Text.  

1. Purpose of Processing Personal Data

Your personal data collected as a result of your application to work for our company is used in accordance with the basic principles set forth by the Law and complaint to data processing conditions and purposes specified under article 5 and 6 of Law for the purpose of obtaining your job application within the scope of the contractual relationship based on the conduct of the recruitment process, examining your resume, evaluating your suitability for the relevant position, conducting recruitment processes and communicating with you in this context.

Within the framework of this relationship, in the event that the information and documents obtained contain personal data belonging to a third party other than you, it is accepted by our Company that you have informed the relevant data owners in the sense of Article 10 of the Law that you will share this personal data with our Company and that you have provided the legal reason for sharing in the sense of Article 5 of the Law, and the obligation to inform and obtain explicit consent in this sense is your responsibility.

2. Locations to which Processed Personal Data are Transferred and Purpose of Transfer

Your personal data may be transferred to our business partners, suppliers enabling us to carry out recruitment activities, to the customers involved in testing studies which will be carried out by you, abroad in cases of the use of cloud system, Intermediary organizations operating for R&D activities, public institutions and exceptionally to persons in accordance with Law. The purpose of transferring the data is in line with the purpose of processing personal data.

Our company cooperates with intermediary institutions for auxiliary works such as creating or storing business processes, working hours and documents in the personal employment file. Your personal data may be shared with these institutions in order to perform their duties in accordance with the Law and we state that the relevant institutions do not have the right to use this data for any other activity.

1. Method and Legal Basis For Collecting Your Personal Data

Your personal data is collected in written and electronic media as part of the data recording system by fully or partially automated methods through digital forms by filling out the form on our website (https://www.demirgrup.com/en/human-resources) regarding the execution of recruitment processes by our Company.

Your personal data may be processed or transmitted within the scope of data processing conditions and purposes specified under article 5 and 6 of Law in accordance with the purposes specified in this Disclosure Text. Our legal obligations requiring us to process your personal data arise from the Personal Data Protection Law No. 6698, Labor Law No. 4857, Turkish Penal Code No. 5237 and other relevant secondary legislation.

2. Application to the Data Controller and Your Rights

According to the Article 11 of PDPL, you also have the following rights:

1. learn whether your personal data are being processed,
2. if they are, request information,
3. obtain information on the purpose of processing and find out whether personal data has been used as fit for the purpose,
4. obtain information about the third persons in Turkey and abroad, to whom personal data are transferred,
5. request rectification of personal data that may have been incompletely or inaccurately processed,
6. request the deletion or destruction of personal data,
7. request notification of the operations made as per indents (e) and (f) to third parties to whom personal data have been transferred, 
8. object to occurrence of any detrimental result by means of analysis of personal data exclusively through automated systems and
9. request compensation for the damages due to unlawful processing of personal data.

You can send your requests to the Company according to Comminuque on the Principles and Procedures for the Request to Data Controller. You can also direct your applications to us by submit it to the address “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/İstanbul”  via registered letter or to the [●] e-mail adress.

Our Company fulfills your requests as soon as possible and within thirty days at the latest and once for free of charge. However, requester may be charged for following requests or for the initial request if the action taken on the request requires additional cost. Our Company can accept and process the request or reject the request in writing by explaining its reason.

You are entitled to file a complaint to the Turkish Board of Personal Data Protection (“Board”) within thirty days as of the notification of the reply and in all cases within sixty days if the application is rejected after carrying out the procedure mentioned above, the reply is deemed to be insufficient or the requests are not responded in a timely manner. However, the complaint cannot be filed without exhausting this application process.   

The Board may conduct the necessary inspections within its field of duty upon receiving a complaint or ex officio upon detecting a breach. The complaint shall be examined by the Board and answers shall be provided to those concerned. If no replies are given within sixty days as of the date of the complaint, the request shall be deemed to be rejected. If, as a result of inspections upon receiving a complaint or ex officio investigation, a breach is detected, the Board shall rule the identified contraventions of law to be eliminated by the data controller, and shall notify those concerned accordingly. This decision shall be fulfilled without delay but no later than within thirty days as of the notification of the decision. The Board is authorized to halt data processing or international transfer of data if damages that are hard or impossible to compensate occur and if there is an explicit infringement of the law.

We would like to emphasize that your data is meticulously protected by our Company and thank you for the trust that you place in us.

Consent Form to Process Personal Data

   I declare that I have obtained permission from my references to contact them. I also give permission to contact the representatives of the places where I have worked before my application and my references, limited to the recruitment process, to ask the representatives of the employers I have previously worked for about my position, my duties, my resignation process, my SSI exit code, and to share information about the position I will be evaluated by your Company.

   I declare that even in the event of a negative result of my application, I authorise my CV to be kept by your company for three years for future job opportunities and to be transferred to group companies.

Name:
Surname:
Date:
Signature:

In this Information Notice, the principles regarding the processing of your personal data by Demir Group Construction Industry and Trade Joint Stock Company (“Company”), located at “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/Istanbul”, acting as the data controller in accordance with the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation, are set out below.

1. Purpose of Processing Personal Data

Your personal data in the identity category such as name and surname, and contact information such as email address, are processed for the purposes of carrying out customer service activities, including obtaining information, receiving your requests and suggestions, and collecting complaints.

In addition to the above, your personal data may also be processed in order to ensure that you can benefit from our services without interruption, to improve our product and service diversity, and to prepare and present various reports, analyses, and studies, provided that your fundamental rights and freedoms are not harmed.

2. Method and Legal Basis for Collecting Personal Data

Your personal data collected through the Contact Form on our website is obtained via the digital form you fill out in order to benefit from the customer service provided.

Your personal data such as name, surname, phone number, email address, and message content submitted via the contact form are processed for the purposes of receiving, evaluating, concluding your requests, suggestions, opinions, and complaints, and contacting you within this scope.

These personal data are processed based on the legal ground that processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, in accordance with Article 5(2)(f) of the Personal Data Protection Law No. 6698.

3. Recipients of Personal Data and Purpose of Transfer

The purpose of processing personal data is aligned with the purpose of their transfer. Our Company may transfer the collected personal data to institutions and organizations we cooperate with in order to carry out our activities, to our group companies, to official authorities and public institutions upon request, and to relevant business partners within the scope of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law.

4. Your Rights and Application to the Data Controller

In accordance with Article 11 of the Law, by applying to our Company, you have the right to: a) learn whether your personal data is processed, b) request information if it has been processed, c) learn the purpose of processing and whether it is used in line with its purpose, d) learn the third parties to whom it is transferred domestically or abroad, e) request correction if it is incomplete or incorrectly processed, f) request deletion or destruction within the framework of Article 7 of the Law, g) request notification of the actions carried out under clauses (e) and (f) to third parties to whom the data has been transferred, h) object to a result against you arising from analysis exclusively through automated systems, and i) claim compensation for damages in case of unlawful processing.

You may submit your requests regarding your rights listed above to our Company in accordance with the Communiqué on Principles and Procedures for Application to the Data Controller. You may send your applications by filling out the Application Form on our website and sending it to “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/Istanbul”, or via email to “[kvkk@demirgrup.com]”.

Our Company will finalize your requests as soon as possible and within thirty days at the latest, free of charge for the first application. However, a fee may be charged for subsequent applications on the same subject or if the process requires additional costs. Our Company may accept and process the request or reject it in writing by stating its justification.

In cases where the application made following the above procedure is rejected, the response is found insufficient, or no response is given within the time limit; you have the right to file a complaint with the Personal Data Protection Board (“Board”) within thirty days from the notification of the response and in any case within sixty days from the date of application. However, a complaint cannot be filed without exhausting the application process.

The Board, upon complaint or ex officio upon learning of an alleged violation, examines matters within its jurisdiction. Upon complaint, the Board evaluates the request and responds to the relevant parties. If no response is given within sixty days, the request is deemed rejected. As a result of the examination conducted upon complaint or ex officio, if a violation is identified, the Board orders the data controller to remedy the unlawful actions and notifies the relevant parties. This decision must be implemented without delay and within thirty days at the latest. In cases where irreparable or impossible harm may occur and there is a clear violation of law, the Board may decide to suspend data processing or data transfer abroad.

We would like to emphasize that your data is securely protected by our Company and thank you for your trust.