- DOWNLOAD CENTER
- DESIGN TOOLS
- Media Center
- Protection of Personal Data
As EAE Electric Inc. (hereinafter shall be referred to as "EAE ELECTRIC"), our top priority is to ensure that the personal data of the real entities including our customers, suppliers and employees is processed in accordance with the Constitution of the Republic of Turkey and the international conventions on the human rights to which our country is a party and the relevant legislation, particularly the Law on Protection of Personal Data No. 6698 ("LPPD") and effective exercise of the rights of the related persons with the personal data processed.
Therefore, we have been performing the processes related to the processing, retention, transfer of the personal data of the real entities including but not limited to our employees, suppliers, customers, users visiting our website acquired through automated or non-automated means provided to be a part of any data recording system during our operations and processes in accordance with EAE ELECTRIC Policy on Protection and Processing of the Personal Data (hereinafter shall be referred to as "Policy").
Protection of personal data and observance of the fundamental rights and freedoms of real persons with the personal data collected are the basic principles of our policy with respect to the processing of personal data. Therefore, we have been sustaining and maintaining our entire activities and operations in which the personal data is processed by observing the right to protect the right of privacy, confidentiality of communication, freedom of thought and belief, and to practice effective legal remedies. We take the entire administrative and technical protection measures and precautions required by the relevant data nature in accordance with the legislation and the applicable technology for the protection of the personal data.
This Policy describes the methods applied by us for the processing, retention, transfer and deletion of the personal data disclosed during our commercial or social responsibility and similar activities and operation within the framework of the principles set forth in the LPPD.
The entire personal data of our customer, business contacts, employees, suppliers, potential customers and various third parties processed by the Corporation is within the scope of this Policy.
Our Policy is applied in the entire activities and operations for processing of the personal data, owned or managed by the Corporation and addressed and drawn up by observing LPDD and other legislation and regulations related to the personal data and the international standards applicable in this field.
The special terms and phrases, concepts, abbreviations, etc. used in this Policy shall have the following meanings.
The Committee for Personal Data Protection, established within EAE ELECTRIC and comprising of representatives of Human Resources, Accounting, Data Processing, Quality, Sales Departments and Senior Management are responsible for drawing up this policy and keeping it updated. In case of determination of any action and behavior inconsistent and contrary to the provisions of this Policy, the Committee for Personal Data Protection assessed the situation in accordance with the Procedure for Management of Personal Data Breach Incident.
The legal obligations accordance with LPPD within the scope of protection and processing of personal data acting with the capacity of the data controller are as follows:
We are taking the entire administrative and technical measures and precautions stipulated in the regulation to ensure the security of the personal data processed as acting with the capacity of the data controller. The obligations related to the data security as well as the precautions and measures taken are detailed in Sections 9 and 10 of this Policy.
The Personal Data refers to all sorts of information relating to an identified or identifiable real entity.
Protection of personal data only aims for the real entities and the data of the legal entities and the information not including any data of a real entity shall be excluded from the scope of protection of personal data. Therefore, this Policy shall not be applied to the data of the legal entities
The personal data relating to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, clothing, membership to associations, foundations or trade-unions, health, sexual life, convictions and security measures, and the biometric and genetic data are deemed to be personal data of special nature.
We are processing the personal data in accordance with the principals stated hereinbelow.
We are processing the personal data in accordance with the good faith in a transparent manner within the framework of our obligation of providing clarification.
We take the required precautions and measures in our data processing procedures to ensure the accuracy and actuality of the data processed. We provide the opportunity to the Personal Data Subject to apply to us to update the data thereof and if any, correct the errors and omissions in the data processed.
We, as the corporation, process the personal data within our legitimate purposes defined in order to sustain our operations and activities with the scope and content explicitly identified within the framework of the legislation and within the ordinary course of commercial life.
We process the personal data being associated, limited and
restrained with the purpose of processing determined explicitly
We refrain from processing of personal data that is not relevant or not required to be processed. Therefore, as long as there is no legal requirement, we do not process the personal data of special nature or should a requirement arises, we obtain explicit consent on the matter.
Numerous regulations in the legislation entail retention of the
personal data. Therefore, we store the personal data for the
period stipulated in the relevant legislation or required for
the purposes of processing personal data.
In case of expiration of the retention periods stipulated in the relevant regulation or the purpose of processing personal data no longer exist, we are delete or destroy the personal data. Our principles and procedures for the retention periods are detailed in Article 9.1. of this Policy.
We obtain the explicit consent of the Related Person, excluding the circumstances stipulated in the Legal in where explicit consent is not required.
We, as the Corporation, perform processing of the personal for the purposes including but not limited with the following:
Personal data of special nature is processed by us in case of
explicit consent or in circumstances imposed by the legislation
by taking the administrative and technical precautions and
measures stipulated in the laws and set forth by the PDP
In case of personal data of special nature related to medical condition and sexual life of the, the said data can and public shared to parties to or authorized institutions and organizations under the obligation of non-disclosure merely for the purpose of protection of public health, preventive medicine, medical diagnosis, execution of treatment and healthcare services, planning and management of healthcare services and financing. Such type of data of our employees can be processed by the persons stipulated in the laws.
We apply cookies for the purpose of improving the functioning and usage of our website and we perform endeavors to provide you a better user experience and improve the time you spend on our website to become more efficient and enjoyable. In addition to this, we make use of certain cookies to remember your preferences on our website and thus, offering you an improved and customized navigation experience on our website.
During process of the applications you shall file as an Employee Candidate, we process, store and transfer your personal data in documents such as your CV, diploma etc. you disclosed to us for job application evaluation process. Processing, transferring and storing the personal data you disclosed as an Employee Candidate are within the scope of this Policy and the Policy on the Protection of Personal Data for Employee Candidates.
We are entitled to process the personal data without obtaining the explicit consent in exceptional circumstances stated hereinbelow and arising from law:
The exceptional circumstances in where the personal date of special nature can be processed without the explicit consent of the Related Person are specified in Article 7.4. of this Policy.
As a corporation, with regards to transferring of personal data, we are acting in accordance with the LPPD and the resolution rendered by PDP Board.
Save for the exceptional circumstances stipulated by the legislation, the personal data of special nature cannot be transferred to other real or legal entities without the explicit consent of the Related Person or the guardian or legal representative thereof in case the Related Person is a minor.
In exceptional circumstances stipulated by LPPD and various legislations, data can be transferred to administrative or judicial organizations or institutions granted with the required authorization subject to the manner and limits set forth in the legislation without the explicit consent of the Related Person or the guardian or legal representative thereof in case the Related Person is a minor.
Moreover, in exceptional circumstances stipulated by the legislation;
Upon taking the precautions and measures set forth by the PDP Board and the relevant legislation, in case of personal data of special nature related to medical condition and sexual life of the employee, the said data can only be shared to parties to or authorized institutions and their explicit consent under the obligation of non-disclosure merely for the purpose of protection of public health, preventive medicine, medical diagnosis, execution of treatment and healthcare services, planning and management of healthcare services and financing.
The personal data cannot be transferred overseas without the explicit consent of the Related Person or the guardian or legal representative thereof in case the Related Person is a minor. However, in case of any of the exceptional circumstances stated in articles 7.4. and 7.7. of this Policy, only in case the overseas third parties are;
The personal data can be transferred overseas without the explicit consent.
The personal data can be transferred to, including but not limited to;
within the terms and purposes stipulated in Articles 8. and 9. of the Law in accordance with the principles and rules stated hereinabove..
For the purpose of protection of the personal data, we are taking the required technical measures, including but not limited to;
For the purpose of protection of the personal data, we are taking the required technical measures, including but not limited to;
Save for the retention periods for the personal data stipulated in the legislation, we store the personal data for the period required by the purpose of processing of personal data.
In circumstances where we process the personal date for various purposes, in case the purposes of processing of personal data no longer exist or upon the request of the guardian or legal representative of the Related Person in case the Related Person is a minor, the data shall be deleted or destroyed in case of no hindrance in the legislation to do so. The provisions of the relevant legislation and resolutions of PDP Board shall apply for the provisions of destruction or deletion of the personal data.
We are taking administrative and technical measures to the extent allowed by the technological facilities and implementation costs to prevent unlawful and unauthorized access to personal data and lawful retention of personal data.
For the purpose of prevention of unlawful the processing of personal data;
We are taking administrative and technical measures from the prevent unlawful disclosure of personal data and to duly update the relevant procedures appropriately. In the event that we identify unauthorized disclosure of the personal data, we have been establishing infrastructures and system to notify this situation to the Related Person or the guardian or the legal representative thereof in case the Related Person is minor and to PDP Board accordingly.
In case of occurrence of an unlawful disclosure in despite of the entire administrative and technical measures taken, this condition shall be notified on the website of PDP Board or through any other means.
We inform the Personal Data Subject within the scope of our obligation for enlightenment and establishing system and infrastructures for the provision of information. We perform the technical and administrative arrangements required for the personal data subjects to exercise their rights regarding their personal data.
The Personal Data subject shall have the following rights on their personal data;
The Personal Data Subject is entitled to communicate his request related to his personal data by means of a method in case of defined by the PDP Board or by using the "LPPD Application Form" on our website at email@example.com in written and bearing the original signature or deliver to our registered mail firstname.lastname@example.org signed with the secure signature.
The Personal Data Subject, in his application to be filed to exercise the rights stated hereinabove and including explanations related to the right claimed to exercise, the matter claimed is required to be clear and comprehensive, the matter claimed is required to be related to the applicant or the applicant is required to be exclusively authorized in case the applicant acts on behalf of others and document such authorization, furthermore, the application is required to include the identification particulars and address details of the applicant and documentation certifying the identification particulars is required to be included in the application.
The guardian or legal representative, in case the Related Person is a minor, is required to file the application related to the personal data including the documents stated hereinabove along with the ones certifying the identity of the Related Person. The said requests shall be filed on an individual basis and the requests related to the personal data filed by the third parties shall not be taken into evaluation.
Requests related to the personal data are concluded as soon as possible depending on the nature and within no later than 30 (thirty) days in any case, or against the fee indicated on the tariff in case of occurrence of the conditions in the tariff to be announced by the PDP Board regarding the fee.
Additional information and documentation can be requested during the application or evaluation process of the application.
The applications related to the personal data can be refused under the following conditions;
application procedure not being followed.
In order for the responding term stated in article 11.2.1 of this Policy to be initiated, the requests filed must be delivered in written and bearing original signature or electronic signature and through the registered mail or with the information and documents certifying the identity of the application through any other means determined by the PDP Board. The guardian or legal representative, in case the Related Person is a minor, is required to file the application related to the personal data including the documents stated hereinabove along with the ones certifying the identity of the Related Person.
In case the request is accepted, relevant processes are applied and the applicant is notified in written or by electronic means. In case of refusal of the request, the applicant is notified on the justification of the refusal in written or by electronic means.
In case the application is refused, unsatisfactory response or failure to respond in time, the applicant is entitled to file a complaint before the Personal Data Protection Board within 30 (thirty) days following the reception of the response and in any case 60 (sixty) days following the application date.
This Confidential Policy includes our policy related to your personal data while offering services on the Corporate website. In accordance with the Law on Protection of Personal Data No. 6698 on Acquisition and Processing of your Personal Data ("LPPD"), we hereby inform you that your personal data disclosed to us and requested by us acting with the capacity of the Data Controller strictly in connection to, limited and restricted to the processing purpose and period, shall be recorded, stored, maintained and re-regulated again within the framework of the purpose required and disclosed to the organizations and institutions authorized to request such personal data and transferred to domestic and overseas third parties, assigned, classified under the circumstances and conditions set forth by LPPD and processed in any other ways stipulated in LPPD. The User(s) hereby acknowledge(s) and agree(s) that they disclose their personal data such as name, surname, e-mail address, job applications on our website for the purpose of filing job application, filing their requests and suggestions, introducing themselves and closely following the user preferences, directly using the website or establishing communication on their freewill and with their explicit consent in accordance with the Law on Protection of Personal Data No. 6698, and such data is requested from them for the mere purposes of getting familiar with them, offering better services, and getting informed on the applications or complaints filed and site events and novelties and the website traffic data can be processed as hosting provider during their visits. Your personal data can be transferred to the legally authorized public authorities and organizations, private legal and real entities, including but not limited to ones operating in accordance with the Turkish Code of Commerce (TCC), Turkish Code of Obligations, Law on Protection of the Consumer, other relevant laws and regulations and other relevant legislation and regulations and entitled to record the identity, address and other required information and data for the determination of the information on the party performing the process within the scope of above-cited legislation, to issue the entire required vouchers, records and documentation indicating the process or on paper means, maintain and store the records and documentation for the periods stipulated in the laws within the scope of the relevant laws and legislation, including but not limited to; for the purposes of ensuring the process security in accordance with the relevant regulations, fulfilling the obligations of data retention, reporting, providing information set forth by public organizations and institutions, evaluating, storing, collecting the personal data disclosed during the job applications on verbal, written or electronic environment explicitly authorized by the law. Your entire personal data disclosed to our corporation shall be stored in strict abidance and compliance to the principles of confidentiality in accordance with Article 12 of the Law on Protection of Personal Data No. 6698. Your said personal data can only be disclosed to the corporate employees authorized to store and maintain such data and public organizations and institutions authorized to request such data pursuant to the explicit consent of the users, except the exceptions stipulated in the law/circumstances excluded.
The entrance and exit processes of visitors and guests are monitored by a security camera within the premises of our Corporation (inside and outside) for the purpose of ensuring the security and sustaining the operations by our Corporation and the personal data is processed in accordance with the Constitution, LPPD and other relevant regulation. The camera images of our visitors are taken within the premises of our corporation, at the entrance of premises and within the building through the monitoring system for the purposes of ensuring the security, increasing the service quality and ensuring the security and safety of our Corporation, visitors and others and data processing is performed accordingly. Only a limited number of Corporate personnel has access to the records stored on the digital means and the confidentiality is ensured upon concluding a non-disclosure affirmative covenant. Live camera footages can be watched by the outsourced security personnel. In accordance with the article 12 of the LPPD, the required technical and administrative measures are taken to ensure the security of the personal data acquired as a result of the monitoring activities by cameras. The log records of your Internet access provided to our visitors are recorded in accordance with the Law No. 5651 and the governing provisions of the legislation regulated in accordance with this Law and these records are only processed when requested by authorized public institutions and organizations or to fulfill our legal obligations in the audit processes to be performed within our Corporation. Only a limited number of Corporate personnel with the affirmative covenant on the non-disclosure have access to the log records acquired, and access these records only to be used upon request audit processes from authorized public institutions and organizations, and disclose such data to legally authorized persons. The activities of the persons visiting the websites owned and operated by our corporation are recorded in accordance with the Law and the relevant legislation for the purpose of ensuring to optimize the experience of our visitors.
Although the person data is in accordance with Article 7 of the LPPD and other relevant laws (Article 138 of the Turkish Penal Code), in case the reasons for processing no longer exist, the personal data shall then be deleted or destroyed by the data controller, either ex officio, based on the decision of the Corporation or upon request of the personal data subject. The provisions stipulated in other laws related to the deletion or destruction of the personal data shall be reserved. Our corporation, as techniques for deletion or destruction, employs corporate specialist technical personnel or a contracted specialist for the deletion of the personal data in a non-retrievable manner, physically destruction of the personal data and secure deletion on the current software. The techniques employed for the anonymization process are as follows; consolidation, derivation, masking, mixed techniques and the personal data lawfully processed can be anonymized by our corporation or affiliates in case the purposes requiring processing shall no longer exist. As the anonymized personal data shall not within the scope of the LPPD, it can be processed for the purposes such as research and statistics.
This Policy is stored by two different means as printed paper and electronic environment.
This Policy shall be reviewed in the intervals to be designated by the Corporation and updated, if required, within the principles determined in the law and regulation as well as in-house.
This Policy shall deemed to be inured upon being released environment, which is the Document Management System of our corporation and the corporate website.