Disclosure and Privacy Policies
VISITOR INFORMATION TEXT
Under the Personal Data Protection Law (KVK Law), the “Data Controller” is RF SYSTEM Dentaline.
In order to ensure security and public order in our company, CCTV (Closed Circuit Monitoring System) camera recordings and, upon your request, internet access records provided to you by RF SYSTEM are collected. These recording activities constitute personal data processing activities aimed at tracking visitor entries, exits, and access. This text has been prepared to fulfill our obligation to inform you about the purposes of processing your personal data, the legal basis, and your rights, as per Article 10 of the “Personal Data Protection Law” No. 6698.
Purposes for Processing and Transferring Personal Data
Your personal data may be processed by RF SYSTEM within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data, for the purposes of ensuring security and public order on our premises, managing access records, and fulfilling our obligations arising from legislation.
Your processed personal data may be transferred to legally authorized persons and parties within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698 on the Protection of Personal Data.
Method and Legal Basis for Personal Data Collection
Your personal data is collected by RF SYSTEM in accordance with our company principles and our legal responsibility as the data controller, based on our legitimate interests, the establishment, protection and exercise of rights. Personal data collected in this process is gathered by our organization through a closed-circuit monitoring system in electronic form, via your internet access at the RF SYSTEM location if available, or through information you provide verbally. Personal data collected through these methods may be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data.
Rights of the Data Subject Whose Data is Collected and Processed
Article 11 of the Personal Data Protection Law defines your rights;
a) To learn whether your personal data is being processed,
b) To request information regarding the processing of your personal data if it has been processed,
c) To learn the purpose of the processing of your personal data and whether it is being used in accordance with its purpose,
d) To know the third parties to whom your personal data has been transferred, domestically or abroad,
e) To request the correction of your personal data if it is incomplete or inaccurate,
f) To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the Law,
g) To request that the actions taken pursuant to clauses (d) and (e) be notified to the third parties to whom your personal data has been transferred,
h) To object to a result that is detrimental to you arising from the analysis of the processed data exclusively through automated systems,
i) To demand compensation for damages if you suffer damage due to the unlawful processing of your personal data.
Application Methods within the Framework of the Data Subject’s Rights
In accordance with Article 13, paragraph 1 of the Law on the Protection of Personal Data, you can submit your request regarding the exercise of your rights mentioned above through the methods specified in the RF SYSTEM Information Text (www.RF SYSTEM.com), based on the “Notification on the Procedures and Principles for Applications to the Data Controller” published on March 10, 2018, numbered 30356.
At RF SYSTEM, we are committed to complying with the Constitution and Law No. 6698 on the Protection of Personal Data in the processing and storage of your personal data, and we take the highest level of security measures to ensure the security of your personal data.
EMPLOYEE INFORMATION AND GUIDELINES
Data Controller and Representative
In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), the Data Controller is RF SYSTEM lab.
Çalışanlarımıza Ait Kişisel Verileri İşlemeye İlişkin İlkelerimiz
RF SYSTEM lab olarak;
a) Hukuka ve dürüstlük kurallarına uygun işlemeyi,
b) Doğru ve güncelliği sağlama gayretinde olmayı,
c) Belirli, açık ve meşru amaçlar için işlenmeyi,
ç) İşlendikleri amaçla bağlantılı, sınırlı ve ölçülü olmayı,
d) Mevzuatta öngörülen veya işlendikleri amaç için gerekli olan süre kadar muhafaza edilmeyi ilke edindik.
Information and Scope
RF SYSTEM lab processes the personal data of our employees, prospective employees, and interns, both private and general, in accordance with the data processing conditions specified in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data, provided that it is proportionate and limited, in line with our legitimate interests and adopted company principles, and due to data responsibility obligations such as the establishment, protection, and exercise of rights, our legal responsibility as the data controller, and the performance of contracts.
With this awareness, RF SYSTEM lab attaches great importance to the processing (storage, deletion, destruction, backup, etc.) of the private and general personal data of employees and prospective employees working within RF SYSTEM lab in accordance with the Law No. 6698 on the Protection of Personal Data, the secondary regulations (regulations, circulars, general circulars) enacted and to be enacted under the Law, and the binding decisions taken and to be taken by the Personal Data Protection Board.
Personal Data Processed
As an employee or job applicant, the personal data that may be processed during job application, recruitment and subsequent work processes are as follows, and as an employee or job applicant, one or more of these data may be processed;
Identity Information; All identity information, including nationality, marital status, place and date of birth, Turkish Republic identity number, gender, signature information, and social security number.
Contact Information; This includes a phone number, a backup person’s phone number for emergencies, an address, and an email address.
Educational Information; data such as educational status, information on courses and seminars attended, foreign language skills, training received during working life and performance information, diploma information, and curriculum vitae information.
Financial Information; Data such as financial and salary details, bonus list, enforcement and debt information, bank information, minimum living allowance information.
Visual Data; Photographs, camera recording images.
Auditory Data; Voice recordings.
Special Categories of Personal Data; Disability status, health reports, health declaration document, health reports, pregnancy information, occupational disease records, pre-employment medical examination form, daily patient complaints and records, blood type information, criminal record, information regarding legal transactions, religion information section in the (old) identity card.
Special categories of personal data are not processed without explicit consent.
Employment Data; Registration number, position name, department and unit, title, last employment date, employment start and end dates, insurance start/retirement, social security number, flexible hours status, travel status, number of working days, projects worked on, total monthly working hours information, severance pay base date, additional days for severance pay, days spent on strike, employee internet and company internal access logs.
Leave Data; Leave seniority base date, additional leave seniority days, leave group, departure/return date, day, reason for leave,
Other data includes: military service status, vehicle license plate number, performance information, family notifications, and guardian information.
Purpose of Processing Your Personal Data
Your collected personal data will be processed for the purposes of evaluating your job application and your suitability for the relevant position, conducting and finalizing recruitment processes within the framework of our institution’s human resources policies, and contacting you in this context; and also for the purpose of ensuring the fulfillment of legal and commercial obligations of our institution and parties with whom our institution has a business relationship; determining and implementing our commercial and business strategies; developing and improving the recruitment principles applied by our institution; as foreseen in the laws; factual impossibility; our legal obligation as the data controller; establishment and performance of the contract; our legitimate interest; establishment, use and protection of the right; disclosure and explicit consent, etc., within the scope of the personal data processing conditions specified in Articles 5 and 6 of Law No. 6698.
To Whom and for What Purposes the Processed Personal Data May Be Transferred
As RF SYSTEM lab, your personal data collected may be transferred to the relevant legal parties, business partners, affiliated companies, company officials, shareholders, customers, suppliers (insurance companies, financial institutions, catering, car rental, operator companies, etc.), employees, legally authorized public institutions and private individuals, for the purposes limited to the purposes specified in Articles 5 and 6 of Law No. 6698, in order to plan and execute our company’s human resources policies and processes, and to ensure that the activities carried out by our company are performed in accordance with the relevant legislation and company procedures, and to carry out the necessary operational activities by our business units.
Method and Legal Basis for Personal Data Collection
We collect your personal data directly or indirectly via email, through our company website and other third-party websites that allow you to apply for jobs, or in physical form, through your resume, application form, and personality inventory form. We process this data in accordance with the obligations in the Labor Law No. 4857, the Turkish Commercial Code No. 6102, the Social Security Institution Legislation, the Turkish Code of Obligations No. 6098, Occupational Health and Safety and Tax Legislation, and other related legislation, and the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698, provided that it is proportionate and limited.
Rights of the Personal Data Subject as Listed in Article 11 of Law No. 6698
As personal data subjects, if you submit your requests regarding your rights to our company through the methods set out in the RF SYSTEM lab Disclosure Statement, our company will process the request free of charge within a maximum of thirty days, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, our company will charge the fee in the tariff determined by the Personal Data Protection Board. In this context, personal data subjects have the following rights:
Individuals have the right to:
Learn whether their personal data is being processed;
Request information regarding the processing of their personal data if it has been processed;
Learn the purpose of the processing of their personal data and whether it is being used in accordance with its purpose;
Know the third parties to whom their personal data has been transferred, domestically or internationally;
Request the correction of their personal data if it is incomplete or inaccurate, and request that this action be notified to the third parties to whom their personal data has been transferred;
Request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with Law No. 6698 and other relevant laws, and request that this action be notified to the third parties to whom their personal data has been transferred;
Object to a result that is detrimental to them arising from the analysis of their processed data exclusively through automated systems;
Demand compensation for damages if they suffer harm due to the unlawful processing of their personal data.
Data Protection
All necessary technical and administrative measures are taken to ensure the security of all personal data collected by our institution. In this context, in accordance with the requirements of the Personal Data Security Guide published by the KVKK (Personal Data Protection Authority), ISO/IEC 27001 Information Security, ISO/IEC 27017 Cloud Services Information Security, ISO/IEC 27701 Privacy Information Management (CIMS) standards, and the European Union General Data Protection Regulation (GDPR), data is protected against unauthorized access, misuse, disclosure, or alteration by taking physical, technical, organizational, and managerial measures.
Application Methods:
The applicant may personally deliver the completed “Application Form” to RF SYSTEM in a sealed envelope, noting “Information Request Pursuant to the Personal Data Protection Law,” to our central location with a hand-delivered receipt.
The applicant may send a notification to RF SYSTEM via a notary public, but the envelope must also include the note “Information Request Pursuant to the Personal Data Protection Law.”
The applicant may personally submit an application using a “Secure Electronic Signature” as defined in the Electronic Signature Law No. 5070 to our registered electronic mail address RFSYSTEM@xx.kep.tr, with the subject line “Information Request Pursuant to the Personal Data Protection Law.” You can access our application form regarding the rights mentioned above on our website.
Changes to Our Privacy Statement;
If we change our Privacy Statement, we will publish the revised statement, along with the updated revision date, on our website (www.dentaline.com). If we make significant changes to our Privacy Statement that substantially alter our privacy practices, we may notify you before the changes take effect, such as by sending an email or posting a notice on our corporate website and/or social media accounts.
Data Controller and Representative
In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), the Data Controller is RF SYSTEM.
İş Ortaklarımıza Ait Kişisel Verileri İşlemeye İlişkin İlkelerimiz
RF SYSTEM olarak;
a) Hukuka ve dürüstlük kurallarına uygun işlemeyi,
b) Doğru ve güncelliği sağlama gayretinde olmayı,
c) Belirli, açık ve meşru amaçlar için işlenmeyi,
ç) İşlendikleri amaçla bağlantılı, sınırlı ve ölçülü olmayı,
d) Mevzuatta öngörülen veya işlendikleri amaç için gerekli olan süre kadar muhafaza edilmeyi ilke edindik.
Clarification and Scope
As RF SYSTEM, in our capacity as data controller, all types of private and general personal data acquired within the scope of our business relationships may be processed in accordance with the data processing conditions specified in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data, provided that it is proportionate and limited, in accordance with our company principles, for the establishment, protection, and exercise of rights, for the performance of business activities, for our legal responsibility as data controller, for data control obligations such as the performance of the contract, and for legal requirements. With this awareness, the parties attach great importance to the processing (storage, deletion, destruction, backup, etc.) of private and general personal data acquired in business relationships in accordance with the Law No. 6698 on the Protection of Personal Data, the secondary regulations (regulations, circulars, general circulars) enacted and to be enacted under the Law, and the binding decisions taken and to be taken by the Personal Data Protection Board.
Personal Data Processed
The personal data that may be processed by us within the scope of the business relationship and their descriptions are as follows;
Identity Information; All identity information, such as nationality, marital status, place and date of birth, Turkish Republic identity number, gender, signature information, and social security number.
Contact Information; This includes a phone number, a backup person’s phone number for emergencies, an address, and an email address.
Educational Information; data such as educational status, information about courses and seminars attended, training received within the scope of the job, reference information, diploma information, and curriculum vitae information.
Financial Information; Data such as financial information, debt collection and enforcement information, and bank information.
Visual Data; Photographs and camera footage processed for security reasons related to business processes at our location,
Audio Data; Audio recordings processed for the purpose of service quality and fulfilling request/complaint processes,
Special Categories of Personal Data; Curriculum vitae information, health reports, health declaration document, health reports, data such as religion and blood type contained in the copy of the identity card/driver’s license,
Employment Data; Registration number, position name, department and unit, title, SGK entry declaration and assignment documents, start date of employment, title, signature circular, projects worked on, internet and company internal access logs,
Other; Vehicle information, military status, etc.
The data processed may be one or more of these within the scope of our employment relationship.
Purpose of Processing Personal Data
As the data controller, your personal data, both private and general, acquired by us within the scope of our business relationships may be processed for the purposes and legal grounds stated below.
The management and continuity of business relationships, the execution of emergency management processes, the execution of information security processes, the execution of audit/ethical activities, the execution of training activities, the execution of access permissions, the execution of activities in compliance with legislation, the execution of finance and accounting operations, the execution of company/product/service loyalty processes, the ensuring of physical security, the execution of assignment processes, the follow-up and execution of legal affairs, the execution of audit/investigation/intelligence activities, the execution of communication activities, the execution/auditing of business activities, the execution of occupational health/safety activities, the execution of business continuity activities, the execution of logistics activities, the execution of goods/services procurement processes, the execution of goods/services operations processes, the execution of business relationship management processes, the execution of satisfaction-oriented activities, organization and event management, the execution of analysis and evaluation studies, the execution of performance evaluation processes, the execution of risk management processes, the execution of storage and archiving activities, the execution of contract processes, the follow-up of requests/complaints, the ensuring of the security of movable property and resources, the execution of supply chain management processes, and data controller operations. Personal data will be processed in accordance with the obligations in the Social Security Institution Legislation, the Turkish Commercial Code, the Labor Law, the Turkish Code of Obligations, Occupational Health and Safety Law, and Tax Legislation, and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for purposes such as ensuring security, providing information to authorized persons, institutions and organizations, carrying out management activities, creating and tracking visitor records.
To Whom and for What Purpose Personal Data May Be Transferred
Your personal data obtained by us within the scope of our business relationship may be shared from time to time and to the extent required by the activity with relevant legal parties, professional consultants from whom our institution receives services, banks and insurance companies, institutions with which our institution has commercial, administrative or contractual relationships, and third parties such as business partners and affiliated offices for the purpose of conducting our business relationship, provided that it is limited to the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698. In these sharings, we act in accordance with the conditions and purposes of data processing and within the rules of data security.
Method and Legal Basis for Personal Data Collection
As an institution, we collect personal data to fulfill our legal obligations, to perform the contract between you and your company, to establish and protect rights, for reasons stipulated in the laws and for the legitimate interests of the Company, to provide the services determined in the provisions of the Turkish Commercial Code No. 6102, the Labor Law No. 4857, the Turkish Code of Obligations No. 6098, the Law on the Regulation of Electronic Commerce No. 6563 and other legislation within the legal framework, and to enable the Company to fully and properly fulfill its contractual and legal obligations. We collect the personal data we request from you and/or other representatives/employees representing your company verbally, physically or electronically, through the communication of this data to us by you and/or other representatives/employees of your company, and physically or electronically through cameras we have placed in the Company buildings.
Rights of the Personal Data Subject as Listed in Article 11 of Law No. 6698
As personal data subjects, if you submit your requests regarding your rights to our company through the methods set out in the RF SYSTEM Disclosure Statement, our company will process the request free of charge within a maximum of thirty days, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, our company will charge the fee in the tariff determined by the Personal Data Protection Board. In this context, personal data subjects have the following rights:
Individuals have the right to:
Learn whether their personal data is being processed;
Request information regarding the processing of their personal data if it has been processed;
Learn the purpose of the processing of their personal data and whether it is being used in accordance with its purpose;
Know the third parties to whom their personal data has been transferred, domestically or internationally;
Request the correction of their personal data if it is incomplete or inaccurate, and request that this action be notified to the third parties to whom their personal data has been transferred;
Request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with Law No. 6698 and other relevant laws, and request that this action be notified to the third parties to whom their personal data has been transferred;
Object to a result that is detrimental to them arising from the analysis of their processed data exclusively through automated systems;
Demand compensation for damages if they suffer harm due to the unlawful processing of their personal data.
Data Protection
All necessary technical and administrative measures are taken to ensure the security of all personal data collected by our institution. In this context, we protect against unauthorized access, misuse, disclosure or alteration by taking physical, technical, organizational and managerial measures in accordance with the requirements of the Personal Data Security Guide published by the KVKK (Personal Data Protection Authority), ISO/IEC 27001 Information Security, ISO/IEC 27017 Cloud Services Information Security, ISO/IEC 27701 Privacy Information Management (CIMS) standards, and the European Union General Data Protection Regulation (GDPR).
Application Methods: The applicant may personally deliver the completed “Application Form” to RF SYSTEM in a sealed envelope, noting “Information Request Pursuant to the Personal Data Protection Law,” to our central location with a hand-delivered receipt. The applicant may also send a notification to RF SYSTEM via a notary public, but the envelope must also bear the note “Information Request Pursuant to the Personal Data Protection Law.” Alternatively, the applicant may personally submit an application using a “Secure Electronic Signature” as defined in the Electronic Signature Law No. 5070 to our registered electronic mail address RFSYSTEM@xx.kep.tr, with the subject line “Information Request Pursuant to the Personal Data Protection Law.” You can access the application form regarding your rights mentioned above on our website.
Changes to Our Privacy Statement;
If we change our Privacy Statement, we will publish the revised statement, along with the updated revision date, on our website (www.dentaline.com). If we make significant changes to our Privacy Statement that substantially alter our privacy practices, we may notify you before the changes take effect, such as by sending an email or posting a notice on our corporate website and/or social media accounts.