Privacy Policy

1. İnput

As known, in accordance with Article 10 of the Law on the Protection of Personal Data (KVKK - Creative Commercial License), the data controller is obliged to provide information about the following in the process of obtaining personal data:

a) Identification of the data controller and, if applicable, their representative,

b) The purposes of processing personal data,

c) To whom and for what purpose the processed personal data may be transferred,

d) The method of collecting personal data and the legal basis for it,

e) Other rights as specified in Article 11.

Aqua Grup is the data controller, and you can address your requests, which will also be explained below, to the following address:

Karagedik, 1104. Sk. No: 16/11, 48300 Fethiye/Muğla,

or you can send a notification to the email address:

info@aqualettings.com.

2.DEFINITIONS

In order to ensure mutual understanding of the information text without leaving place for explanations, the definitions of terms and their meanings used within the Law on the Protection of Personal Data (KVKK) are provided below:

Explicit consent: Consent expressed on a specific matter based on information and free will.

Anonymization: The process by which personal data is transformed in such a way that it cannot be identified or linked to a specific or identifiable individual, even through the use of other data.

Data subject: A natural person whose personal data is being processed.

Personal data: Any information relating to an identified or identifiable natural person.

Processing of personal data: Any operation or set of operations, whether performed in whole or in part by automated means or not, including collection, recording, storage, aggregation, alteration, editing, disclosure, transmission, transfer to successors, access, classification, or use of personal data.

Commission: The Personal Data Protection Commission (KVKK) represents.

Authority: The Personal Data Protection Authority (KVKK) represents.

Data Processor: A natural or legal person who processes personal data on behalf of the data controller in accordance with the authority granted.

Data Registration System: A system for processing personal data in accordance with specific criteria.

Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data registration system.

These definitions explain the key terms used in the Constitution on the Protection of Personal Data to ensure their understanding.

3.OPEN CONSENT

Open consent, as defined within the framework of KVKK (Personal Data Protection Law), constitutes consent given regarding a specific matter based on information and one's own free will. For you, this means consent and permission for the processing of your general, special, and confidential personal data. In this context, statements of consent and permission given by you freely, with sufficient information, and without any doubt are considered open consent.

According to Article 5/1 of KVKK (Law on Protection of Personal Data), personal data, with certain exceptions, cannot be processed without open consent. Additionally, according to Article 8/1 of KVKK, personal data cannot be transferred without open consent, unless otherwise provided by law.

With this in mind, we request your consent for the processing, storage, recording, anonymization if necessary, and sharing of your personal data, with certain exceptions, in the context of establishing contractual relationships.

As informed to you, we kindly ask you to tick the appropriate consent checkboxes. Thus, as stated in this text, your general and special data will be processed with your consent.

4.YOUR PERSONAL DATA AND THE PURPOSES OF THEIR PROCESSING

Dear employee, you are part of the Aqua Grup family, and one of the aspects reflecting our respect for you is addressing your personal data that you have provided to us. In this regard, below are your personal data that are stored, recorded, processed, and transmitted with your consent:

Personal information (Name, Surname, Date of birth, Nationality, Copy of ID, Republic of Turkey identification number, Place of birth, Gender, Marital status, Republic of Turkey identity card information),

Contact information (Phone number, Email address, Residential address),

Financial and legal information (Any contracts made with you, Salary details, Payroll records, Right to a bonus, Bonus amount, Information on legal cases and debts, Bank account information and accounts for receiving salaries, Minimum subsistence level information, Information on insurance policies),

Personal data of special categories (Medical certificate, Criminal record, Disability/determination/percentage of disability, Lung X-ray, Audiometry and vision tests, Information about pregnancy and corresponding certificate, Information about illness and pregnancy leave, Membership in public organizations and funds, Information about union membership),

Education information (Resume, Primary education, Secondary school, Higher education, Master's and doctoral studies, Information about certificates, Information about completed courses, Education and skills),

Photos, videos, and audio recordings, interview recordings,

Performance information (Monthly performance ratings, Records of bonuses and their tracking),

Other information within the framework of labor legislation (Experience, Information about severance pay, Business documentation, Annual leave, Weekly day-off and national holiday guides),

Additional information (Driver's license, Status of a person who has lost a close military serviceman, Internship, Transportation and stop information).

5.Your personal data provided to Aqua Grup is stored, recorded, processed, and, if necessary, transferred in accordance with the purposes mentioned above and with your consent.

These data are processed, stored, and transferred in accordance with your consent and agreement as indicated in the consent form.

Your personal data provided to Aqua Grup are stored, recorded, processed, and, if necessary, transmitted in accordance with your consent and for the following purposes:

-To fulfill the employment contract (confirming employees' leave permissions, reviewing remaining vacation days, processing leave requests, conducting employee termination procedures, preparing and processing payroll records, paying salaries to employees, and other similar processes),

-To comply with the requirements of the Labor Code, Occupational Health and Safety Law, Social Security Law, and other relevant laws and regulations, as well as to adhere to other laws and regulations,

-Upon request from judicial and administrative authorities, as necessary and after receiving a written request,

-To resolve disputes related to customer contracts (resolving customer complaints, determining the validity of customer complaints, increasing customer satisfaction, understanding customer needs and improving customer-related processes, assessing the quality of customer service, and conducting employee training),

-For managing the company, executing business processes, and implementing company policies (transferring company-related data to branches, partners, shareholders, archiving data for the required data retention periods, and performing various operations such as transportation management, maintaining a vehicle fleet, printing business cards, parking management, and similar purposes).

These data are stored, recorded, processed, and transferred in accordance with your consent for the purposes mentioned above.

6.The transfer of personal data

Your personal data may be transferred to third parties with your permission for the purpose of carrying out necessary measures and managing business processes, providing access to products and services offered by our website and our company, as well as for planning and implementing commercial and/or business strategies.

Furthermore, your personal data may be transferred to third parties abroad to facilitate communication during trips abroad, organize travel, and conduct mass email communications.

Also, your personal data may be disclosed to our corporate officers, affiliated companies, business partners, suppliers, shareholders, as well as authorized government agencies and private institutions for the purposes mentioned above.

7.METHODS OF COLLECTING AND PROCESSING PERSONAL DATA, LEGAL BASIS

-Your personal data is collected and processed in accordance with the purposes mentioned above, based on the following legal grounds and circumstances:

-In accordance with legislative requirements.

-For the purpose of fulfilling contracts and in accordance with their provisions.

-Necessity of processing personal data to ensure the performance of contracts and obligations.

-Compliance with general principles to determine campaign strategies.

-Personal data is retained as required by applicable laws and regulations and within the necessary timeframes defined for each data processing process.

The retention periods of personal data are assessed in accordance with the purposes of each data processing process and in consideration of relevant legal regulations. After the expiration of the retention periods or if the purpose of data processing is no longer relevant, your personal data will be anonymized, deleted, and/or destroyed in accordance with the law on the protection of personal data.

Therefore, your personal data is collected and processed in accordance with the law on the protection of personal data and in line with the purposes and legal bases stated in this information notice.

8.DATA STORAGE

Your provided personal data is processed in accordance with the principle of purpose limitation and in line with the purposes described in this document for the period necessary to achieve these purposes in accordance with applicable regulations and commercial practices. After the processing period has expired, the data is deleted, destroyed, or anonymized.

Furthermore, your personal data may only be used in cases explicitly provided for by legislation, when it is mandatory for the fulfillment of the legal obligations of the data controller company, and does not harm the fundamental rights and freedoms of the data subjects.

Therefore, access to stored personal data for other purposes will be prohibited, and the data may only be used in cases of emergency circumstances as described above. After the conclusion of these emergency circumstances, your personal data will be deleted, destroyed, or anonymized in accordance with the law.

9.DATA SUBJECT RIGHTS

You can send all your requests and demands regarding the recording, storage, collection, processing, and transmission of your personal data to info@aqualettings.com, as mentioned above.

Within the framework of this process, your requests will be reviewed and fulfilled in accordance with the Personal Data Protection Law within no more than thirty (30) working days.

However, in the event that the process requires additional expenses, payment of the fee established by the Personal Data Protection Committee may be required.

In accordance with the Personal Data Protection Law, data subjects (data owners) have the following rights:

-Request information about whether their personal data is being processed.

-Obtain information about how and for what purposes their personal data is being processed.

-Find out whether their personal data has been transferred to third parties within or outside the country.

-Request the correction of incorrect or incomplete personal data.

-Demand the deletion or destruction of personal data if there are no legal grounds for their processing.

-Challenge decisions based solely on automated data processing if such decisions have legal consequences for the data subject.

-Request compensation for damages if the data subject has suffered harm due to a violation of the personal data protection law.

The terms and information provided in this document may be subject to changes in accordance with legal and technological developments.