| YOUR PERSONAL DATA COLLECTED, PROCESSED and TRANSFERRED | |
| Identity | Documents such as driving licences, copies of identity cards and passports containing information such as name-surname, Turkish ID number, tax identification number, nationality, mother’s name-father’s name, place of birth, date of birth and gender, and signature/initials within the scope of contracts. etc. |
| Contact | Telephone number, full address, e-mail address, internal company contact details (including extension number and corporate e-mail address), contact details of family members, registered electronic mail address (KEP) |
| Location | Current location information, place of residence, home address, city, unit, company shuttle route, etc. |
| Personnel File | All kinds of personal data processed in order to obtain the information forming the basis of the personnel rights of natural persons in an employment relationship with our Company (identity information included in the personnel file, job application form, passport photograph, education information, graduation information, copy of diploma, profession, previous workplace, CV information, private pension information). |
| Legal Transaction | Personal data processed within the scope of determining and following up legal receivables and rights, performing debts, and complying with legal obligations and our Company’s policies, and file and debt information relating to enforcement proceedings files (information contained in documents such as decisions of courts and administrative authorities). |
| Customer Transaction | Personal data processed to ensure our technical, administrative, legal and commercial security while conducting commercial activities (information matching the person to the transaction associated with the data subject and showing that the person is authorised to carry out that transaction) (user name, password and registration number information) |
| Physical Premises Security | Personal data relating to records and documents taken on entering the physical premises and while staying inside the physical premises; camera recordings, fingerprint records, facial scan records, identity and contact information taken at the security point. |
| Transaction Security | IP address information, website login/logout information, password and passcode information, authorisation access records, authorisation access logs, your cookie information automatically collected on the website, (You can review our Cookie Policy on our websites.) |
| Finance | Financial and salary details, payslips, bonus entitlements, bonus amounts, file and debt information relating to enforcement proceedings files, bank account number, IBAN number, bank account book, minimum living allowance information, private health insurance and life insurance amounts, bank loan application and tracking records |
| Professional Experience | Personal information relating to the promotion process, work papers describing the person’s experience, diploma information for the assignment process, certificates of expertise, records within the scope of professional experience |
| Marketing | Collection of personal data enabling communication, such as the name-surname, telephone, e-mail and business address of potential customers and customer employees, obtained within the scope of trade fair, promotion and campaign organisations for the purpose of identifying the needs and expectations of our customers and potential customers and adding new markets and customers to our portfolio |
| Visual and Audio Recordings | Photographs and camera recordings (visual data obtained within the scope of Physical Premises Security, videos, photographs, etc. obtained within the scope of trade fairs, organisations, events, etc. |
| Special Categories of Personal Data | |
| Appearance and Dress | Clothing sizes within the scope of conducting business activities |
| Health Information | The employee’s general illnesses and blood group information within the scope of occupational health and safety (OHS) physician examinations and reporting (in an emergency, this information is shared with the relevant parties by e-mail, with the explicit consent of the person concerned being obtained), health report, |
| Criminal Conviction and Security Measures | Criminal records; where requested within the legal framework, detailed civil registry record, GBT (general information screening) record |
| Genetic Data | Family medical history information within the scope of OHS physician examinations and reporting |
Our Data Subject Groups whose personal data we process within the purposes listed above are: Employee, Job Applicant, Other – Customer / Employee, Other – Customer / Company Owner, Other – Customer Employee, Other – Supplier / Company Owner, Shareholder/Partner, Potential Product or Service Buyer, Intern, Supplier Employee, Supplier Representative, Product or Service Recipient, Parent / Guardian / Representative, and our Visitors.
Our websites and social media networks, through which we provide services to you within the scope of our processes, collect your data and share information with your knowledge, are listed below for your information.
Website : https://www.unna.com.tr/
Twitter : twitter.com/unnabilisim
Instagram : https://www.instagram.com/unnabilisim
There is no obligation whatsoever regarding the personal data you have shared with us through these sites and social networks, and care is taken to obtain only as much of your information as is needed to meet your needs and requests.
Transfer of Your Personal Data
Within the purposes listed above and in accordance with KVKK (Turkey’s Personal Data Protection Law No. 6698) and the legislation in force, your personal data are transferred, domestically or abroad, by taking the necessary administrative and technical measures, in the cases provided for by the relevant legislation / scopes and in line with the purpose of the product and service we offer, to our employees, our customers and their employees, our suppliers and their employees, our other relevant business partners, our shareholders, our affiliates and subsidiaries, the public institutions and organisations to which we are subject and their employees, and, with your knowledge, our social media followers.
Retention and Deletion of Data
Our Company retains the personal data it processes in accordance with the following statutory periods determined in legislation and in company procedures and policies. Where no period is separately specified in legislation, personal data are retained for as long as their processing is required under our Company’s practices and the customs of commercial life, depending on the services our Company provides while processing those data, and, after that period, only for the periods whose necessity is established in practice for the purpose of serving as evidence in possible legal disputes.
| PERSONAL DATA RETENTION PERIODS | |||
| Data Category | Data Retention Period | Data Category | Data Retention Period |
| Identity | 10 Years | Risk Management | 10 Years |
| Contact | 10 Years | Finance | 10 Years |
| Location | 10 Years | Professional Experience | 10 Years |
| Personnel File | 10 Years | Marketing | 10 Years |
| Legal Transaction | 10 Years | Visual and Audio Recordings | 5 Years |
| Customer Transaction | 10 Years | Health Information | 15 Years |
| Physical Premises Security | 5 Years | Criminal Conviction and Security Measures | 1 Year |
| Transaction Security | Min. 2 Years | Genetic Data | 15 Years |
After the expiry of the specified periods, the personal data in question are deleted, destroyed or anonymised, as required, using the methods defined in the “Secure Destruction Instruction” and the relevant company procedures and policies.
