Irmak Trans International Transportation Industry Trade Limited Company As our customers, employees, employee candidates, of our suppliers, business partners, visitors and to protect the personal data of our website users We attach great importance to it.
In the processing of personal data, especially in accordance with the Law no. 6698. Relevant legislation, including the Personal Data Protection Law, Personal Data Protection Board decisions and data security It is aimed to act in accordance with the relevant corporate principles.
This page; Personal data that can be performed by our company Scope, purposes, legal reasons of data processing activities, data transfer processes, storage periods, security measures and General information about the rights of personal data owners It was designed to do this.
Details regarding the processing of personal data; the person concerned customer, supplier, employee, depending on the relationship established with our company, candidate employee, visitor, website user or other Separate lighting that can be prepared for relevant groups of people can be explained in the texts.
About Information and Explicit Consent
This information text applies to the processing of personal data. contains general explanations and express consent text alone It is not. Personal data processing activity is subject to explicit consent In cases where it must be based on information, it is separate from the clarification text and An express consent text specific to the relevant processing activity is provided.
Identity of the Data Controller
Within the scope of the Personal Data Protection Law No. 6698, Your personal data is processed by the following data controller. can be processed.
Purpose of Policy
The purpose of this policy is to Basic principles regarding personal data processing activities and to inform relevant persons transparently.
Within the scope of the policy, for what purposes personal data is used processed, the methods by which it was collected, to whom can be transferred, how long it can be stored and the relevant It explains how people can exercise their rights.
The company's awareness of the protection of personal data The development of this policy in all its units is a fundamental is one of its purposes.
Scope of Policy
Policy; customers, customer representatives, employees, employee candidates, interns, suppliers, business partners, subcontractors, drivers, visitors and website real persons whose personal data are processed, such as users It covers.
Information regarding legal entities, real persons as personal data to the extent that it can be associated can be evaluated.
Policy; in electronic systems and physical environments wholly or partially automated means or data recording by non-automatic means, provided that it is part of the system It covers the processed data.
Basic Concepts
The main methods used in the protection of personal data The concepts are explained below.
Personal Data
Relating to an identified or identifiable natural person It is all kinds of information.
Special Personal Data
Limitedly specified in the law; health, biometrics, genetics, criminal convictions and similar sensitive data categories.
Data Controller
Determining the purposes and methods of processing personal data, Establishing and managing the data recording system is the person responsible.
Data Processor
On behalf of the data controller, based on the authority given by the data controller is a natural or legal person who processes personal data.
Contact Person
It refers to the real person whose personal data is processed.
Anonymization
Even if the data is matched with other information, certain or cannot be linked to an identifiable person is to be brought.
Personal Data Categories That Can Be Processed
The relevant person's relationship with our company and the Some of the following data categories depending on the processing activity can be processed.
Credentials
Name, surname, date of birth, identification number, signature and Required information contained in the identity document.
Contact Information
Phone number, email address, address and other contact Information about channels.
Professional Information
Position, title, company, work experience, education, professional document, driver's license and qualification information.
Operation Information
Load, vehicle, driver, route, delivery, transport document, location and operational contact information.
Financial Information
Bank account, IBAN, invoice, payment, collection and financial transaction information.
Legal Transaction Information
Contract, warning, lawsuit, enforcement, official correspondence and legal necessary information regarding the processes.
Process and System Security
Internet protocol address, system login records, access technical information regarding records and information security.
Physical Space Security
If used in company campuses, visitor records and security camera footage.
Application and Request Information
Contact forms, complaints, suggestions, requests and KVKK Information shared in their applications.
Special Data
Health only where necessary and legally permitted, criminal conviction, biometric or other special qualification personal data.
Purposes of Processing Personal Data
Personal data depends on the relevant person's relationship with our company. within the scope of one or more of the following purposes, according to can be processed.
Data Collection Methods
Personal data; website forms, email, telephone, physical forms, contracts, invoices, transportation documents, operational records and face-to-face interviews can be collected through.
Data also includes customers, suppliers, business partners, authorized public institutions, customs units, insurance through companies and other legally authorized parties can be obtained.
Technical transaction records during website use and limited data may be processed through cookies.
Legal Reasons
Personal data, according to concrete data processing activity Personal data processing conditions specified in the law It is processed based on what is appropriate.
In this context, processing activity; not expressly foreseen in the law, Establishment or execution of the contract, legal obligation fulfillment, establishment or protection of a right and It may be based on legal reasons such as legitimate interest.
None of the other processing conditions specified in the law In cases where there is no and explicit consent is required, A separate express consent statement is obtained from the relevant person.
Protection of Special Personal Data
Special categories of personal data, individuals who are subject to discrimination or Sensitive information that could lead to victimization It requires higher protection than it actually is.
Special categories of personal data are only processed by our company. To the extent required by the processing activity, Article 6 of the Law in accordance with the conditions and necessary processed by taking security precautions.
Health report of employees or drivers, incapacity for work document, criminal conviction information or similar sensitive data Access permissions are limited when processing is required.
During the transfer, storage and destruction of this data implementation of additional technical and administrative measures appropriate to the nature of the is taken as basis.
Transfer of Personal Data
Personal data to fulfill the processing purposes is necessary and the conditions specified in the Law are present to third parties in a limited and measured manner transferable.
Parties to which transfer can be made; competent public institutions, ministries, tax offices, social security institutions, judicial authorities, customs administrations, banks, insurance companies, They may be financial advisors and legal advisors.
Carriers for the purpose of carrying out logistics operations, drivers, agencies, port operators, customs consultants, warehouses, suppliers, customers and operation solutions Necessary data can be shared with partners.
Information technologies, hosting, backup, e-mail or Sharing data with suppliers from whom software services are obtained In this case, data security and confidentiality conditions are taken into account.
Transfer of Personal Data Abroad
Our company's international transportation activities offices, agencies, customers and business partners outside Transfer of some personal data abroad due to It may be necessary.
Also used email, software, cloud storage, communications or domestic of the providers of information technology services If located abroad, data transfer abroad is not possible. may be the subject.
For data transfers abroad, numbered 6698 Current transfer specified in Article 9 of the Law acts in accordance with the conditions.
Competence about the country or sector to be transferred decision, providing one of the appropriate safeguards or one of the limited exceptional cases specified in the Law presence is evaluated.
Standard contract, binding company rules or other Where appropriate assurance methods must be used Notification and application specified in the relevant legislation obligations are fulfilled.
Our Storage and Disposal Policy
Personal data is processed within the periods stipulated in the relevant legislation or It is stored for the period required for the purpose of processing.
When determining the storage period, the purpose of data processing is the company's legal obligations, contractual relationship, statute of limitations such as deadlines and protection of rights in case of possible disputes. matters are taken into account.
Legal reasons and purposes requiring the processing of data In case of disappearance, personal data is ex officio or related deleted, destroyed or anonymous upon the request of the person. is made.
Recording the destruction operations carried out and records for the periods specified in the legislation. storage is essential.
Destruction Methods
- Secure deletion of electronic data
- Secure destruction of physical documents
- Making data inaccessible
- Removing personal elements from the data set
- Anonymization of data
- Managing records in backup systems
Personal Data Security
Illegal processing and access of personal data to prevent and ensure that data is kept securely technical and administrative services appropriate to the nature of the activities for the purpose of It is based on taking precautions.
Authorization and Access Control
Access to personal data is based on task and business need. It is limited to authorized persons.
System Security
For the security of software, devices and information systems Appropriate protection, update and access methods are applied.
Backup and Continuity
Suitable for supporting the continuity of business processes backup and restore methods are used.
Privacy Commitments
Personal data of employees and service providers Obligations not to share unauthorized is determined.
Employee Awareness
Protection of personal data, privacy and information security Employee awareness on the subject is supported.
Control and Audit
Data processing processes comply with the Law and company rules Its suitability is checked according to need.
Personal Data Breach Management
Loss of personal data, access by unauthorized persons opening, altering, disclosing or unlawfully possibility of being obtained in any form within the scope of data breach can be evaluated.
When a suspicious situation is detected, the scope of the incident determination, limitation of its effects, necessary technical taking precautions and creating incident records is intended.
Processed personal data may be transferred to others through illegal means. If it is determined that it has been obtained by The prescribed notification processes are applied.
Website and Cookies
Ensuring that our website operates safely and efficiently, remembering user preferences and site usage Cookies may be used for analysis purposes.
Mandatory cookies enable basic functions of the website. It can be used to ensure operation and safety. Use of cookies for analytical, functional or advertising purposes In case of preference and information in accordance with the relevant legislation mechanisms are presented.
Type of cookies used, purpose of use, duration and third party Details about party cookies are available in a separate Cookie. It may be explained in the Information Text or Cookie Policy.
Limiting cookies via browser settings or It is possible to delete. Disabling some cookies, the operation of certain functions on the website may affect.
Contact Forms
Communication, offer or information available on the website Data shared through request forms, evaluation and communication with the user may be processed for the purpose.
The forms contain only those required to finalize the request. requesting information and not collecting unnecessary data is intended.
Job and Internship Applications
CV, education, job sharing shared by employee candidates experience, contact and professional qualification information It may be processed for the purpose of carrying out procurement processes.
After the recruitment process is completed, applications will be submitted to the relevant Considering the storage period and legal reasons can be stored or disposed of safely.
KVKK Application Method
Your requests within the scope of the law, your identity and your request as data controller, with an application clearly stating You can forward it to our company.
Written Application
Submit your application with wet signature to the company. You can forward it to [OPEN CENTER ADDRESS].
Email Application
Via your e-mail address registered in our system You can apply to [KVKK E-MAIL ADDRESS].
KEP Application
Send your application securely to [KEP ADDRESS] if you have one. You can send it using electronic signature or mobile signature.
In the application, name, surname, signature, identity and contact information are required. However, the subject of the request must be clearly stated. request If there are supporting documents, they should be added to the application.
Applications must be submitted as soon as possible and at the latest depending on the nature of the request. It is concluded within thirty days. The process is also a within the scope of the relevant legislation if it requires cost The specified fee may apply.
Our company is responsible for verifying the identity of the applicant and personal to prevent data from being disclosed to unauthorized persons. may request information or documents.
Third Party Websites
Our website includes websites belonging to third parties, to social media platforms, mapping services or other Links to online services may be available.
Personal data of the platforms accessed through these links processing activities, the relevant platforms' own privacy and subject to personal data policies.
Before using third party services It is recommended to review the privacy statements of the platforms.
Updating the Policy
This policy; legislative changes, Personal Data Protection Board decisions, changes in company activities and In line with the developments in the information systems used can be updated.
The updated policy is valid from the date of publication on the website. It takes effect from. When significant changes are required It can be notified to people through appropriate communication methods.
This page contains the current version of the policy and its effective date. can be accessed via.