{"id":12329,"date":"2025-10-07T10:31:09","date_gmt":"2025-10-07T07:31:09","guid":{"rendered":"https:\/\/misyondent.com\/?page_id=12329"},"modified":"2026-04-03T04:35:05","modified_gmt":"2026-04-03T01:35:05","slug":"kvkk","status":"publish","type":"page","link":"https:\/\/misyondent.com\/en\/kvkk\/","title":{"rendered":"KVKK"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"12329\" class=\"elementor elementor-12329\" data-elementor-post-type=\"page\">\n\t\t\t\t        <section class=\"elementor-section elementor-top-section elementor-element elementor-element-ccd1611 elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-section-overflow-visible\" data-id=\"ccd1611\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;}\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-extended\">\n                <div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2cc9119 pxl-column-none\" data-id=\"2cc9119\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                                <div class=\"elementor-background-overlay\"><\/div>\r\n         \r\n                <section class=\"elementor-section elementor-inner-section elementor-element elementor-element-25dd658 elementor-section-content-bottom elementor-section-boxed elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-section-overflow-visible\" data-id=\"25dd658\" data-element_type=\"section\" data-e-type=\"section\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-extended\">\n                <div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-89b0bf0 pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"89b0bf0\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n        \t\t<div class=\"elementor-element elementor-element-93f8d67 elementor-widget__width-auto elementor-widget elementor-widget-pxl_heading\" data-id=\"93f8d67\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"pxl_heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n<div id=\"pxl-pxl_heading-93f8d67-6159\" class=\"pxl-heading px-sub-title-default-style\">\n\t<div class=\"pxl-heading--inner\">\n\t\t\n\t\t<h3 class=\"pxl-item--title style-default  highlight-default\" data-wow-delay=\"ms\">\n\t\t\t\t\tKVKK\t\n\t\t\t\n\t\t<\/h3>\n\t\t\n\t<\/div>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\r\n        <\/div>\r\n                <div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-286a746 pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"286a746\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n        \t\t<div class=\"elementor-element elementor-element-6d7b8da elementor-widget__width-auto elementor-widget elementor-widget-pxl_breadcrumb\" data-id=\"6d7b8da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"pxl_breadcrumb.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"pxl-breadcrumb-wrap\">\n\t<ul class=\"pxl-breadcrumb\"><li><span class=\"breadcrumb-entry\">Home<\/span><\/li><\/ul><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t        <section class=\"elementor-section elementor-top-section elementor-element elementor-element-f61985b elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-section-overflow-visible\" data-id=\"f61985b\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;}\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-extended\">\n                <div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-89f7a87 pxl-column-none\" data-id=\"89f7a87\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                                <div class=\"elementor-background-overlay\"><\/div>\r\n         \r\n                <section class=\"elementor-section elementor-inner-section elementor-element elementor-element-5d00484 elementor-section-content-middle elementor-section-boxed elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-section-overflow-visible\" data-id=\"5d00484\" data-element_type=\"section\" data-e-type=\"section\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-extended\">\n                <div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-feb5a45 pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"feb5a45\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n        \t\t<div class=\"elementor-element elementor-element-b5a9802 elementor-widget elementor-widget-pxl_text_editor\" data-id=\"b5a9802\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"pxl_text_editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"pxl-text-editor default\">\n\t<div class=\"pxl-item--inner  ft-gt\" data-wow-delay=\"ms\">\n\t\t<p>At Misyondent, the security of your personal data is a priority for us. This page explains in detail how your data is collected, processed and protected.<\/p>\t\t\n\t<\/div>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\r\n        <\/div>\r\n                <div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-321ed4f pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"321ed4f\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n        \t\t<div class=\"elementor-element elementor-element-12d3a72 elementor-widget__width-auto ft-gt elementor-widget elementor-widget-pxl_icon_box\" data-id=\"12d3a72\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"pxl_icon_box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"pxl-icon-box pxl-icon-box1 style-2 ani3\" data-wow-delay=\"ms\">\r\n    <div class=\"pxl-item--inner\">\r\n        \r\n                            <div class=\"pxl-item--icon\">\r\n                                    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" fill=\"#000000\" viewbox=\"0 0 256 256\"><path d=\"M152,96V56a8,8,0,0,1,16,0V76.69l34.34-34.35a8,8,0,0,1,11.32,11.32L179.32,88H200a8,8,0,0,1,0,16H160A8,8,0,0,1,152,96Zm79.88,79.08A56.26,56.26,0,0,1,176,224C96.6,224,32,159.4,32,80A56.24,56.24,0,0,1,80.92,24.13a16,16,0,0,1,16.62,9.51l21.12,47.15,0,.12A16,16,0,0,1,117.39,96c-.18.27-.37.52-.57.77L96,121.45c7.49,15.22,23.41,31,38.83,38.51l24.34-20.71a8.12,8.12,0,0,1,.75-.56,16,16,0,0,1,15.17-1.4l.13.06,47.11,21.11A16,16,0,0,1,231.88,175.08Zm-15.88-2s-.07,0-.11,0h0l-47-21.05-24.35,20.71a6.84,6.84,0,0,1-.74.56,16,16,0,0,1-15.75,1.14c-18.73-9.05-37.4-27.58-46.46-46.11a16,16,0,0,1,1-15.7,6.13,6.13,0,0,1,.57-.77L104,87.15l-21-47a.61.61,0,0,1,0-.12A40.2,40.2,0,0,0,48,80,128.14,128.14,0,0,0,176,208,40.21,40.21,0,0,0,216,173.07Z\"><\/path><\/svg>                                <\/div>\r\n                        <div class=\"pxl-item--meta\">\r\n            <h5 class=\"pxl-item--title el-empty\">\r\n                        Call our Hotline!                        <\/h5>\r\n            <div class=\"pxl-item--description el-empty\">+90 533 397 65 56<\/div>\r\n        <\/div>\r\n    <\/div>\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t        <section class=\"elementor-section elementor-top-section elementor-element elementor-element-5246be2 elementor-section-boxed elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-section-overflow-visible\" data-id=\"5246be2\" data-element_type=\"section\" data-e-type=\"section\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-extended\">\n                <div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e39af7c pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"e39af7c\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n                <section class=\"elementor-section elementor-inner-section elementor-element elementor-element-8ad0727 elementor-section-content-middle pxl-section-overflow-hidden elementor-section-full_width elementor-section-height-default elementor-section-height-default pxl-row-scroll-none pxl-zoom-point-false pxl-full-content-with-space-none\" data-id=\"8ad0727\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\n                \n                <div class=\"elementor-container elementor-column-gap-default\">\n                <div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-25c6449 pxl-column-none pxl-column-overflow-hidden-no\" data-id=\"25c6449\" data-element_type=\"column\" data-e-type=\"column\">\r\n        <div class=\"elementor-widget-wrap elementor-element-populated\">\r\n                     \r\n        \t\t<div class=\"elementor-element elementor-element-2d68dc2 elementor-widget elementor-widget-html\" data-id=\"2d68dc2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n<p style=\"text-align:center;\"><strong style=\"text-transform:uppercase;\">MISSIONDENT<\/strong><br><strong>PERSONAL DATA PROTECTION, PROCESSING AND PRIVACY POLICY<\/strong><\/p>\n<p>1-Our Company, Misyondent (\"Company\"), with this (\"Policy\"), determines the procedures and principles to be followed by all its interlocutors and the obligations it is subject to in the acquisition, processing, deletion, destruction or anonymization of personal data.<\/p>\n<p>In this direction, in terms of personal data, within the scope of the Law No. 6698 on the Protection of Personal Data (\"Law\"), Employee Candidates, Customers, Company Shareholders, Company Officials, Visitors, Employees, Shareholders and Authorities of the Institutions, Sub-Contractors and Suppliers that we are in cooperation with, and Third Parties (\"Data Owner\").<\/p>\n<p>Pursuant to the Law, the terms and conditions regarding the activities subject to personal data processing carried out by the company (\"Data Controller\") are included, and it is aimed to ensure transparency by informing the data subjects and to obtain their explicit consent within the scope of the following situations. The Privacy Policy is published on our company's website (www.misyondent.com) and made available to the relevant persons upon the request of personal data subjects.<\/p>\n<p>Accordingly, this Privacy Policy (\"Policy\") has been prepared in order to process personal data in full compliance with the Personal Data Protection Law No. 6698 (\"Law\") and to inform data subjects in this context. Apart from this Policy, a \"Policy on the Processing of Personal Data of Misyondent Employees\" has been prepared for the employees of the company.<\/p>\n<p>2-This Policy is related to all personal data processed by automatic means or non-automatic means provided that it is part of any data recording system, especially Employee Candidates, Customers, Company Shareholders, Company Officials, Visitors, Employees, Shareholders and Authorities of the Institutions, Subcontractors and Suppliers we are in cooperation with and Third Parties.<\/p>\n<p>The scope of application of this Policy regarding the groups of personal data owners in the categories mentioned above may be the entire Policy or only some of its provisions.<\/p>\n<p>3-The relevant legal regulations in force regarding the processing and protection of personal data will be applied primarily. In case of any incompatibility between the legislation in force and the Policy, the Company accepts that the legislation in force will be applied.<\/p>\n<p>4-Data subjects whose personal data are processed within the scope of the Policy are categorized as follows:<\/p>\n<table border=\"1\" style=\"width:100%;\">\n<tbody>\n<tr>\n<td><strong>Employee Candidates<\/strong><\/td>\n<td>Natural persons who make their resume and related information accessible to the Company by applying for a job or by any other means.<\/td>\n<\/tr>\n<tr>\n<td>\n<div><strong>We are in Cooperation<\/strong><\/div>\n<div><strong>Institutions, Subcontractors,<\/strong><\/div>\n<div><strong>Suppliers<\/strong><\/div>\n<div><strong>Staff<\/strong><\/div>\n<div><strong>Shareholders and Officers<\/strong><\/div>\n<\/td>\n<td>Employees, shareholders and officials of organizations, subcontractors, suppliers that have a business relationship with the Company<\/td>\n<\/tr>\n<tr>\n<td><strong>Customers<\/strong><\/td>\n<td>Natural persons whose personal data are obtained due to business relations within the scope of the activities carried out by the Company, regardless of whether there is any contractual relationship.<\/td>\n<\/tr>\n<tr>\n<td><strong>Visitors<\/strong><\/td>\n<td>Natural persons who have entered or visited the physical facilities of the Company for various purposes.<\/td>\n<\/tr>\n<tr>\n<td><strong>Third Parties<\/strong><\/td>\n<td>Other natural persons whose personal data are processed within the framework of this Policy, although not defined in the Policy.<\/td>\n<\/tr>\n<tr>\n<td><strong>Company Shareholder<\/strong><\/td>\n<td>The shareholders of the company are natural persons.<\/td>\n<\/tr>\n<tr>\n<td><strong>Company Official<\/strong><\/td>\n<td>Members of the Company's board of directors and other authorized natural persons.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>5- In the implementation of this Policy;<\/p>\n<table border=\"1\" style=\"width:100%;\">\n<tbody>\n<tr>\n<td><strong>Open Consent<\/strong><\/td>\n<td>Consent on a specific issue, based on information and expressed with free will<\/td>\n<\/tr>\n<tr>\n<td><strong>Anonymization<\/strong><\/td>\n<td>Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching it with other data.<\/td>\n<\/tr>\n<tr>\n<td><strong>Personal Data<\/strong><\/td>\n<td>Any information belonging to an identified or identifiable natural person.<\/td>\n<\/tr>\n<tr>\n<td><strong>Personal Data of Special Nature<\/strong><\/td>\n<td>Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are sensitive data.<\/td>\n<\/tr>\n<tr>\n<td><strong>Processing of Personal Data<\/strong><\/td>\n<td>Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.<\/td>\n<\/tr>\n<tr>\n<td><strong>Board<\/strong><\/td>\n<td>Personal Data Protection Board<\/td>\n<\/tr>\n<tr>\n<td><strong>Politics<\/strong><\/td>\n<td>The Company's Policy on the Protection and Processing of Personal Data.<\/td>\n<\/tr>\n<tr>\n<td><strong>Data Processor<\/strong><\/td>\n<td>A natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller.<\/td>\n<\/tr>\n<tr>\n<td><strong>Data Controller<\/strong><\/td>\n<td>The data controller is the person who determines the purposes and means of processing personal data and manages the place where the data is kept systematically (data recording system).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>refers to.<\/p>\n<p>6-The issues regarding the processing of personal data of our Company's Employee Candidates, Customers, Company Shareholders, Company Officials, Visitors, Employees, Shareholders and Authorities of the Institutions, Subcontractors and Suppliers we are in cooperation with and Third Parties are regulated within the scope of this Policy text in accordance with the Law.<\/p>\n<p>7- Personal data obtained with the consent of the data subject or for other legitimate reasons listed in the Law are processed limited to the purpose specified in this policy and in the informed consent of the data subject or to the extent required by the legal basis. All your personal data will be deleted, destroyed or anonymized in cases where consent is absent or withdrawn after the legal basis disappears.<\/p>\n<p>8-With Privacy Policy<\/p>\n<ul>\n<li>To reveal what information belonging to the Data Subject is collected and what is done or not done with such data,<\/li>\n<li>To determine the responsibilities of the Data Owner, Data Controller and third parties to protect the rights and privacy of the Data Owner, Data Controller and third parties under the Law,<\/li>\n<li>It is intended to explain how the information shared is used in order to provide a functional and useful service.<\/li>\n<\/ul>\n<p>9- With this text, data subjects hereby acknowledge that they have been informed about the processing of their personal data and the privacy policy and that they consent to the use of their personal data as specified herein.<\/p>\n<p>10-Personal data processed by the Data Controller are categorized in accordance with the Law on the Protection of Personal Data (Law) as set out below. Unless otherwise explicitly stated, the term \"Personal Data\" shall cover the information below within the scope of the terms and conditions provided under this Privacy Policy.<\/p>\n<table border=\"1\" style=\"width:100%;\">\n<tbody>\n<tr>\n<td><strong>Identity Information<\/strong><\/td>\n<td>All information contained in documents such as driver's license, identity card, residence, including but not limited to name-surname, Turkish ID number, nationality, parents' name, place of birth, date of birth, gender and Social Security number<\/td>\n<\/tr>\n<tr>\n<td><strong>Contact Information<\/strong><\/td>\n<td>Clearly belonging to an identified or identifiable natural person;<br>Information such as telephone number, address, e-mail address, fax number, IP address, which is processed partially or completely automatically or non-automatically as part of the data recording system.<\/td>\n<\/tr>\n<tr>\n<td><strong>Customer Information<\/strong><\/td>\n<td>Information obtained and produced about the relevant person as a result of our commercial activities and the operations carried out by our business units within this framework.<\/td>\n<\/tr>\n<tr>\n<td><strong>Customer Transaction Information<\/strong><\/td>\n<td>Records of the use of our products and services and information such as the customer's instructions and requests necessary for the use of products and services.<\/td>\n<\/tr>\n<tr>\n<td><strong>Transaction Security Information<\/strong><\/td>\n<td>Personal data processed to ensure technical, administrative, legal and commercial security during the execution of commercial activities.<\/td>\n<\/tr>\n<tr>\n<td><strong>Risk Management Knowledge<\/strong><\/td>\n<td>Personal data processed through methods used in accordance with generally accepted legal, commercial practices and good faith in these areas in order for us to manage our commercial, technical and administrative risks<\/td>\n<\/tr>\n<tr>\n<td><strong>Financial Information<\/strong><\/td>\n<td>Personal data processed regarding information, documents and records showing all kinds of financial results created according to the type of legal relationship established with the personal data owner<\/td>\n<\/tr>\n<tr>\n<td><strong>Employee Candidate Information<\/strong><\/td>\n<td>Personal data processed in relation to individuals who have applied to become a company employee or who have been evaluated as an employee candidate in line with the human resources needs of our company in accordance with the rules of commercial practice and honesty or who are in a working relationship.<\/td>\n<\/tr>\n<tr>\n<td><strong>Legal Process Knowledge<\/strong><\/td>\n<td>Personal data processed within the scope of determination and follow-up of our legal receivables and rights and performance of our debts.<\/td>\n<\/tr>\n<tr>\n<td><strong>Inspection Information<\/strong><\/td>\n<td>Personal data processed within the scope of the company's legal obligations and compliance with company policies<\/td>\n<\/tr>\n<tr>\n<td><strong>Sensitive Personal Data<\/strong><\/td>\n<td>As stated in Article 6 of the KVK Law; race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data,<\/td>\n<\/tr>\n<tr>\n<td><strong>Marketing Knowledge<\/strong><\/td>\n<td>Personal data processed for the marketing of our products and services by customizing them in line with the usage habits, tastes and needs of the personal data owner, and the reports and evaluations created as a result of these processing results<\/td>\n<\/tr>\n<tr>\n<td>\n<div><strong>Physical Space Security<\/strong><\/div>\n<div><strong>Info<\/strong><\/div>\n<\/td>\n<td>Personal data clearly belonging to an identified or identifiable natural person; processed partially or fully automatically or non-automatically as part of a data recording system; personal data related to records and documents taken at the entrance to the physical space, during the stay in the physical space; camera recordings and records taken at the security point, etc.<\/td>\n<\/tr>\n<tr>\n<td><strong>Audio\/Visual Information<\/strong><\/td>\n<td>Photographs and camera recordings (excluding recordings within the scope of Physical Space Security Information), voice recordings and data contained in documents that are copies of documents containing personal data, which clearly belong to an identified or identifiable natural person.<\/td>\n<\/tr>\n<tr>\n<td><strong>Request \/ Complaint Management Information<\/strong><\/td>\n<td>Personal data relating to the receipt and evaluation of any requests or complaints received.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>11-Data anonymized in accordance with Articles 3 and 7 of the Law on the Protection of Personal Data will not be considered as personal data and processing activities related to this data will be carried out without being bound by the provisions of this Privacy Policy.<\/p>\n<p>12- Our Company processes personal data in accordance with the basic principles in Article 4 of the Personal Data Protection Law and the principles set out in this Policy. In addition, personal data are processed limited to the purposes and conditions within the personal data processing conditions specified in paragraph 2 of Article 5 and paragraph 3 of Article 6 of the Law. These purposes and conditions;<\/p>\n<ul>\n<li>Explicitly stipulated in the law,<\/li>\n<li>It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his\/her consent due to actual impossibility or whose consent is not legally valid,<\/li>\n<li>It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data subject and the data controller,<\/li>\n<li>Explicitly stipulated in the law,<\/li>\n<li>It is mandatory for the data controller to fulfill its legal obligations,<\/li>\n<li>It has been made public by the data subject himself\/herself,<\/li>\n<li>Data processing is mandatory for the establishment, exercise or protection of a right,<\/li>\n<li>Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.<\/li>\n<\/ul>\n<p>On the other hand, the Law defines data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data as \"sensitive\" or \"sensitive\" personal data and stipulates more stringent conditions for their processing. Accordingly, sensitive personal data may only be processed under the following conditions, except in cases where explicit consent has been obtained from the data subject:<\/p>\n<ul>\n<li>Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, criminal convictions and security measures, and biometric and genetic data may be processed in cases stipulated by law.<\/li>\n<li>Personal data relating to health and sexual life may only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.<\/li>\n<\/ul>\n<p>13-In the absence of the above-mentioned conditions, the Company applies for the explicit consent of personal data owners in order to carry out personal data processing activities. Within this framework, personal data may be processed for the following purposes, including but not limited to:<\/p>\n<ul>\n<li>In order to fulfill the necessary work to benefit personal data owners from the products and services offered by the Company; follow-up of contract processes, customer relations, execution of sales processes, legal follow-up, follow-up of customer requests and\/or complaints,<\/li>\n<li>Carrying out the necessary work for the realization of the commercial activities carried out by the Company, planning and execution of corporate communication activities, ensuring business continuity, establishing information technology infrastructure, monitoring financial affairs, execution of corporate governance activities, analysis of business activities, planning and execution of business partners and suppliers' access to information, planning and execution of business activities, planning and execution of research and development activities,<\/li>\n<li>In line with the purpose of planning and executing the human resources policies and processes of the company; fulfillment of the obligations arising from the employment contract and legislation of employees and employee candidates, procurement of products and services needed to carry out business activities, monitoring and auditing of business activities, planning and execution of fringe benefits and benefits, execution of personnel recruitment processes, planning of performance evaluation processes, planning and execution of in-house training activities, planning of human resources processes, planning and execution of human resources needs required for production,<\/li>\n<li>In line with the purpose of ensuring the legal and commercial security of persons who have a business relationship with the company; planning and execution of operational activities necessary to ensure that company activities are carried out in accordance with company procedures and relevant legislation, planning and execution of occupational health and safety processes, providing information to authorized institutions arising from legislation, follow-up of legal affairs, creation and follow-up of visitor records, ensuring the security of company premises and\/or facilities, ensuring the security of company operations, planning and execution of company audit activities, ensuring that data is accurate and up-to-date, planning and execution of the company's financial risk processes,<\/li>\n<\/ul>\n<p>The Company mainly aims to obtain the explicit consent of the persons in order to realize the similar purposes explained. In cases where there are exceptions listed in the Law, limited and measured personal data are kept in accordance with the exceptions in order to realize these purposes. In cases where there is no explicit consent of the person, personal data is processed within the framework of the exceptions specified in the Law. In the event that the exceptions in the Law do not allow the processing of personal data and there is no explicit consent of the person, personal data is not processed.<\/p>\n<p>14-Such personal information may also be used to contact the Data Subject or to make various statistical evaluations, create a database and conduct market research without disclosing the identity of the Data Subject.<\/p>\n<p>15- The Company may process the personal data of its employees with whom it has established a service relationship without seeking consent to the extent necessary for the performance of the service contract established, the fulfillment of mutual obligations and the performance of other legal obligations. The Company ensures the confidentiality and protection of the data of its employees. In this context, \"Policy on the Processing of Personal Data of Misyondent Employees\" has been organized for company employees separately from this Policy.<\/p>\n<p>For applications and requests made by prospective employees, the Company processes all personal data, including resumes submitted by the applicant, without seeking consent until the application and request are finalized. Processing after the application process is completed with a negative result depends on the consent of the data subject. In case the data subject gives consent, personal data may be transferred to third parties. Otherwise, the data will be deleted, destroyed or anonymized after the request and application process is concluded with a definite negative result. In cases where the request or application is partially or completely concluded positively, the retention and processing of personal data is carried out according to the conditions of the new legal relationship established.<\/p>\n<p>16- The camera surveillance activity carried out by our Company is carried out in accordance with the personal data processing conditions listed in the Law on Private Security Services and the KVK Law.<\/p>\n<p>The personal data owner is informed by the Company in accordance with Article 10 of the KVK Law. The Company notifies with more than one method regarding the camera surveillance activity. For the camera surveillance activity by the Company; a notification letter regarding the monitoring is hung at the entrances of the areas. Thus, it is aimed to prevent damage to the fundamental rights and freedoms of the personal data owner, to ensure transparency and enlightenment of the personal data owner.<\/p>\n<p>In accordance with Article 4 of the KVK Law, the Company processes personal data in a limited and measured manner in connection with the purpose for which they are processed.<\/p>\n<p>The purpose of the Company's video camera monitoring activities is limited to the purposes listed in this Policy. In this direction, the monitoring areas, number and time of monitoring of security cameras are sufficient to achieve the security purpose and are limited to this purpose. The privacy of the person is not subject to monitoring in areas that may result in interference in excess of security purposes.<\/p>\n<p>In accordance with Article 12 of the KVK Law, the Company takes necessary technical and administrative measures to ensure the security of personal data obtained as a result of camera surveillance activities.<\/p>\n<p>Only a limited number of company employees have access to live camera footage and digitally recorded and stored records.<\/p>\n<p>Personal data processing activities are carried out by the Company to ensure security and to track the entry and exit of the visiting guests for the purposes specified in this Policy. The name-surname information of the persons who come to our company is processed only for the purpose of tracking their entry and exit and the relevant personal data is recorded in the recording system in physical and electronic environment.<\/p>\n<p>In order to ensure the security of the places where the Company carries out its commercial activities, the Company carries out personal data processing activities in its headquarters and facilities for the monitoring of guest entrances and exits with security camera surveillance, recording, entrance card reading and identity registration activities. Security camera surveillance activity and identity control at entrances, card reading and their recording are intended to protect the interests of the Company and other persons in ensuring the security of the Company and other persons, and the Company takes the necessary technical and administrative measures to ensure the security of personal data obtained as a result of camera surveillance activity and identity recording in accordance with Article 12 of the relevant Law.<\/p>\n<p>17- The data controller, personal data and new data obtained by using this personal data, to realize the purposes specified under the Privacy Policy and the Clarification and Consent Text on the Processing of Personal Data, to carry out the necessary work to benefit the relevant persons from the services offered, to carry out commercial activities and to carry out related business processes, outsourcing service providers, (hosting services), law offices, company officials, business partners, legally authorized public institutions and organizations, private institutions, including those who send e-mail and SMS to ensure security, detect fraudulent or unauthorized use, investigate operational evaluation and for any of these purposes.<\/p>\n<p>18-Personal data collected for the above-mentioned legal reasons may be processed and transferred for the purposes specified in the legislation in force and this Privacy Policy. In line with the legitimate and lawful personal data processing purposes, the Company may transfer personal data to third parties based on and limited to one or more of the personal data processing conditions specified in Article 5 of the KVK Law listed below:<\/p>\n<ul>\n<li>If there is explicit consent of the personal data subject,<\/li>\n<li>If there is a clear regulation in the laws regarding the transfer of personal data,<\/li>\n<li>If it is mandatory for the protection of the life or physical integrity of the personal data subject or someone else and the personal data subject is unable to disclose his\/her consent due to actual impossibility or his\/her consent is not legally valid;<\/li>\n<li>If it is necessary to transfer personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,<\/li>\n<li>If personal data transfer is mandatory for the Company to fulfill its legal obligation,<\/li>\n<li>If the personal data has been made public by the personal data subject,<\/li>\n<li>If personal data transfer is mandatory for the establishment, exercise or protection of a right,<\/li>\n<li>If personal data transfer is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the personal data owner.<\/li>\n<\/ul>\n<p>The Company may transfer the special categories of personal data of the personal data owner to third parties in the following cases in line with the legitimate and lawful personal data processing purposes by taking due care, taking the necessary security measures and taking adequate measures stipulated by the PDP Board.<\/p>\n<ul>\n<li>If the personal data subject has explicit consent or<\/li>\n<li>If the personal data owner does not have explicit consent; Personal data of special nature other than the health and sexual life of the personal data owner (race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, criminal conviction and security measures, and biometric and genetic data), in cases stipulated by law, Sensitive personal data relating to the health and sexual life of the personal data owner can only be transferred by persons or authorized institutions and organizations under the obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.<\/li>\n<\/ul>\n<p>19- In line with the legitimate and lawful personal data processing purposes, the Company may transfer personal data to Foreign Countries with Adequate Protection or to Foreign Countries where there is a Data Controller Committed to Adequate Protection in the presence of one of the following cases if the personal data owner has explicit consent or if the personal data owner does not have explicit consent:<\/p>\n<ul>\n<li>If there is a clear regulation in the laws regarding the transfer of personal data,<\/li>\n<li>If it is mandatory for the protection of the life or physical integrity of the personal data subject or someone else and the personal data subject is unable to disclose his\/her consent due to actual impossibility or his\/her consent is not legally valid;<\/li>\n<li>If it is necessary to transfer personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,<\/li>\n<li>If personal data transfer is mandatory for the Company to fulfill its legal obligation,<\/li>\n<li>If the personal data has been made public by the personal data subject,<\/li>\n<li>If personal data transfer is mandatory for the establishment, exercise or protection of a right,<\/li>\n<li>If personal data transfer is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the personal data owner.<\/li>\n<\/ul>\n<p>20- By taking due care, taking the necessary security measures and taking adequate measures stipulated by the KVK Board; In line with the legitimate and lawful personal data processing purposes, the Company may transfer the personal data of the personal data owner to Foreign Countries with Adequate Protection or to Foreign Countries where there is a Data Controller Committed to Adequate Protection in the following cases.<\/p>\n<ul>\n<li>If the personal data subject has explicit consent or<\/li>\n<li>If the personal data owner does not have explicit consent; Personal data of special nature other than the health and sexual life of the personal data owner (race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, criminal conviction and security measures, and biometric and genetic data), in cases stipulated by law, Personal data of special nature related to the health and sexual life of the personal data owner can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.<\/li>\n<\/ul>\n<p>21-Personal data collected for the above-mentioned legal reasons may be processed and transferred for the purposes specified in Articles 5 and 6 of Law No. 6698 and this Privacy Policy.<\/p>\n<p>22-Personal data owners according to Article 11 of the Law<\/p>\n<ul>\n<li>To learn whether personal data about him\/her is being processed,<\/li>\n<li>To request information if personal data about him\/her has been processed,<\/li>\n<li>To learn the purpose of processing personal data and whether they are used for their intended purpose.<\/li>\n<li>To know the third parties to whom personal data are transferred domestically or abroad.<\/li>\n<li>To request correction of personal data in case of incomplete or incorrect processing.<\/li>\n<li>To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the Law and other relevant laws,<\/li>\n<li>To request notification of the transactions made as a result of correction, deletion and destruction requests to third parties to whom personal data are transferred.<\/li>\n<li>To object to the emergence of a result to the detriment of the person himself\/herself by analyzing the processed data exclusively through automated systems.<\/li>\n<li>In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.<\/li>\n<\/ul>\n<p>23- Pursuant to paragraph 1 of Article 13 of the KVK Law, you are required to submit your request to exercise your rights mentioned above to our Company in writing or by other methods determined by the Personal Data Protection Board.<\/p>\n<p>In this context, in the applications you will make to our Company within the scope of Article 11 of the KVK Law, you can send your request to the following address by registered letter with return receipt requested, together with the necessary information identifying your identity in order to use your rights mentioned above and your explanations regarding the right you want to use, indicating which of your rights specified in Article 11 of the KVK Law is related to the use of your right:<\/p>\n<p style=\"text-transform:uppercase;\">MISSIONDENT<br>ADDRESS: BAH\u00c7ELI\u0307EVLER MAH. COLONEL I\u0307BRAHI\u0307M KARAO\u011eLANO\u011eLU SOK. NO: 20B BAH\u00c7ELI\u0307EVLER\/I\u0307STANBUL<\/p>\n<p>It is not possible for third parties to make a request on behalf of personal data subjects. In order for a person other than the personal data owner to make a request, there must be a special power of attorney issued by the personal data owner on behalf of the person who will make the application.<\/p>\n<p>24-In accordance with Article 13 of the KVK Law, our Company finalizes the application requests made by the personal data owner free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, it is possible to charge the fee in the tariff determined by the PDP Board.<\/p>\n<p>Our Company may accept the application request of the personal data owner or reject it for the reasons listed below by explaining the reason and may notify the relevant person in writing or electronically.<\/p>\n<ul>\n<li>Interfering with the rights and freedoms of others,<\/li>\n<li>Requires disproportionate effort,<\/li>\n<li>The information is publicly available,<\/li>\n<li>Compromising the privacy of others,<\/li>\n<\/ul>\n<p>In the event that one of the situations excluded from the scope pursuant to the PDP Law exists, the personal data owner has the right to file a complaint to the PDP Board within thirty days from the date of learning the response of the data controller, and in any case within sixty days from the date of application, in cases where the personal data owner's application is rejected, finds the response insufficient or does not respond to the application in due time.<\/p>\n<p>The Company takes the necessary technical and administrative measures to ensure that personal data is not processed unlawfully, personal data is not accessed unlawfully and personal data is protected under the conditions specified in the relevant legislation or stated in this Privacy Policy. The data controller also does not disclose the personal data obtained from the data subject to anyone else in violation of the provisions of this Privacy Policy and the Law on the Protection of Personal Data and does not use it for purposes other than processing.<\/p>\n<p>25-This Privacy Policy may be updated from time to time in order to adapt to changing conditions and legislation.<\/p>\n<p>26-Although no time period has been determined for the retention of personal data under the Law, in accordance with the general principles, it is essential to retain personal data for the period stipulated in the relevant legislation or required for the purpose for which they are processed. The Data Controller Company makes an assessment based on the legislation in force regarding each data processing process and the purpose of the process in order to determine the retention periods in accordance with the principle in question. In this direction, personal data are stored at least for the period required by legal obligations and until the statute of limitations subject to the relevant Law expires.<\/p>\n<p>Personal data may be stored in case of any dispute that may arise between you and the Data Controller, in order to be able to make the necessary defenses within the scope of the dispute. Personal data are anonymized, deleted or destroyed in accordance with the Law when the purpose of processing the relevant personal data is eliminated within the scope of any process, including the expiration of the aforementioned periods.<\/p>\n<p>27- Your personal data we collect must be accurate and, where necessary, up-to-date. Therefore, in case of any change in your personal data, you can notify the relevant unit of our Company.<\/p>\n<p>28- Our Company makes the necessary assignments within the Company and establishes procedures accordingly in order to fulfill the obligations under the PDP Law and to implement the matters specified in this Policy.<\/p>\n<p>The policy containing the articles listed above is presented to the personal data owner together with other relevant clarification and consent texts, especially the \"Clarification and Consent Text Regarding the Protection, Processing and Privacy Policy of Misyondent Personal Data\". In addition, upon the request of personal data owners, the policy in question is presented to the relevant persons and access to it is provided.<\/p>\n<p style=\"text-align:center;\"><strong style=\"text-transform:uppercase;\">MISSIONDENT<\/strong><br><strong>PERSONAL DATA STORAGE AND DESTRUCTION POLICY<\/strong><\/p>\n<p>1- Personal Data Retention and Destruction Policy (\"Policy\") has been prepared by Misyondent (\"Company\") as the data controller in order to determine the procedures and principles regarding our obligations in accordance with the Personal Data Protection Law No. 6698 (\"KVKK\") and the Regulation on Deletion, Destruction or Anonymization of Personal Data (\"Regulation\") and to inform data subjects about the principles of determining the maximum retention period required for the purpose for which personal data are processed and the processes of deletion, destruction and anonymization.<\/p>\n<p>2-Within the scope of this Policy, customers, prospective customers, prospective employees, employee candidates, employees, company shareholders, company officials, visitors, business partners, employees, shareholders and officials of the institutions, subcontractors and suppliers we cooperate with, and third parties as real persons who are processed automatically or non-automatically, provided that they are part of any data recording system.<\/p>\n<p>The Policy is applied in the activities carried out for the processing and protection of all personal data managed by our Company.<\/p>\n<p>3-This policy is published on our company's website (www.misyondent.com) and made available to the relevant persons upon the request of personal data owners.<\/p>\n<p>4-Category in the implementation of this Policy,<\/p>\n<ul>\n<li><strong>Contact Person<\/strong>&nbsp;Persons who process personal data within the organization of the data controller or in accordance with the authorization and instruction received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data,<\/li>\n<li><strong>Destruction:<\/strong>&nbsp;Deletion, destruction or anonymization of personal data,<\/li>\n<li><strong>Law:<\/strong>&nbsp;Law No. 6698 on the Protection of Personal Data,<\/li>\n<li><strong>Recording medium:<\/strong>&nbsp;Any medium containing personal data that is fully or partially automated or processed by non-automated means, provided that it is part of any data recording system,<\/li>\n<li><strong>Personal data:<\/strong>&nbsp;Any information relating to an identified or identifiable natural person,<\/li>\n<li><strong>Personal data subject:<\/strong>&nbsp;The natural person whose personal data is processed,<\/li>\n<li><strong>Processing of personal data:<\/strong>&nbsp;All kinds of operations performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system,<\/li>\n<li><strong>Personal data processing inventory:<\/strong>&nbsp;The inventory that data controllers create by associating the personal data processing activities they carry out depending on their business processes with the purposes of processing personal data, data category, transferred recipient group and data subject group, and detailing the maximum period required for the purposes for which personal data are processed, personal data foreseen to be transferred to foreign countries and the measures taken regarding data security,<\/li>\n<li><strong>Board:<\/strong>&nbsp;Personal Data Protection Board,<\/li>\n<li><strong>Institution:<\/strong>&nbsp;The Personal Data Protection Authority,<\/li>\n<li><strong>Sensitive personal data:<\/strong>&nbsp;Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data,<\/li>\n<li><strong>Periodic extermination:<\/strong>&nbsp;The process of deletion, destruction or anonymization to be carried out ex officio at recurring intervals specified in the personal data retention and destruction policy in the event that all of the conditions for processing personal data specified in the law disappear,<\/li>\n<li><strong>Data Retention and Destruction Policy:<\/strong>&nbsp;This Policy, which data controllers use as a basis for the process of determining the maximum period of time required for the purpose for which personal data are processed and the process of deletion, destruction and anonymization,<\/li>\n<li><strong>Personal Data Protection, Processing and Privacy Policy:<\/strong>&nbsp;the policy determining the procedures and principles regarding the management of personal data on the company's website,<\/li>\n<li><strong>Registry<\/strong>&nbsp;The register of data controllers kept by the Personal Data Protection Authority,<\/li>\n<li><strong>Data processor:<\/strong>&nbsp;Natural and legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller,<\/li>\n<li><strong>Data recording system:<\/strong>&nbsp;A recording system where personal data is structured and processed according to certain criteria,<\/li>\n<li><strong>Data controller:<\/strong>&nbsp;The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.<\/li>\n<\/ul>\n<p>For definitions not included in this Policy, the definitions in the Law apply.<\/p>\n<p>5 - All unit managers of the Company provide effective support for the proper implementation of technical and administrative measures regarding the processing, storage and destruction of personal data in their units. For this purpose, unit managers shall provide training and raise awareness of unit employees, monitor and supervise the operations, help prevent unlawful processing of personal data and unlawful access to the processed data, take and implement technical and administrative measures for data security.<\/p>\n<p>By increasing the knowledge and awareness of the relevant users on the protection of personal data, it actively supports the processing, storage and destruction of personal data in accordance with the legislation.<\/p>\n<p>The titles, units and job descriptions of those involved in the storage and destruction of personal data are as follows<\/p>\n<ul>\n<li><strong>General Manager :<\/strong>&nbsp;As the representative of the data controller, he\/she is responsible for all transactions related to the protection and destruction of personal data and for the implementation of the policy.<\/li>\n<li><strong>Human Resources Manager :<\/strong>&nbsp;Preparation, development, execution of the policy, in relevant settings\n<div>publishing and updating, ensuring the compliance of the processes within its responsibility with the retention period, and management of the personal data destruction process, training and information in accordance with the periodic destruction period.\n<\/div><\/li>\n<li>\n<strong>Accounting Manager :<\/strong>&nbsp;It is responsible for the preparation, development, execution, publication and updating of the policy in the relevant media, ensuring compliance of the processes within its responsibility with the retention period and managing the personal data destruction process in accordance with the periodic destruction period.\n<\/li>\n<li>\n<strong>Information Systems Manager :<\/strong>&nbsp;Responsible for the technical storage, protection and backup of data, determining and implementing the technical solutions needed to implement the policy.\n<\/li>\n<li><strong>Other Unit Managers :<\/strong>&nbsp;It is responsible for the implementation of the policy in its own units, monitoring and auditing the implementation, ensuring compliance of the processes within its duty with the retention period and managing the personal data destruction process in accordance with the periodic destruction period.<\/li>\n<li>\n<strong>Relevant Users and Data Processors :<\/strong>&nbsp;It is responsible for ensuring that data processing and storage are in accordance with the procedure and the law.\n<\/li>\n<li><strong>Specially Authorized Relevant User :<\/strong>&nbsp;It is responsible for the protection and storage of personal data deleted by the procedure or at the request of the person concerned, until it is destroyed, and not to be accessed by the relevant users.<\/li>\n<\/ul>\n<p>6-Personal data stored by the Company are kept in a recording medium appropriate to the nature of the relevant data. The recording media used for the storage of personal data are specified below. On the other hand, personal data may be stored in a different environment than the environments specified here due to their nature. In any case, the data controller company processes and protects personal data in accordance with the Law, the Personal Data Protection, Processing and Privacy Policy and this Personal Data Storage and Destruction Policy within the framework of international data security principles.<\/p>\n<p><strong>Electronic Environments;<\/strong>&nbsp;Servers, portable disks, software, information security devices, employee computers, optical disks, removable memories, printers, scanners and other digital media such as photocopiers.<\/p>\n<p><strong>Physical Environments;<\/strong>&nbsp;Paper, manual data recording systems, written, printed, visual media and other media where data is kept by printing on paper or microfilms.<\/p>\n<p><strong>Cloud Environments;<\/strong>&nbsp;These are the environments where encrypted internet-based systems are used, which are not in the possession of the company, but are in the use of the company.<\/p>\n<p>7- All administrative and technical measures taken within the framework of the principles in Article 12 of the KVKK in order to store your personal data securely, to prevent unlawful processing, access and to destroy the data in accordance with the law are stated below.<\/p>\n<p><strong>Technical Measures<\/strong><\/p>\n<p>It takes the following technical measures in all environments where personal data is stored in accordance with the nature of the relevant data and the environment in which the data is stored:<\/p>\n<ul>\n<li>Only up-to-date and secure systems in accordance with technological developments are used in the environments where personal data are kept.<\/li>\n<li>Security systems are used for the environments where personal data are kept.<\/li>\n<li>Security tests and researches are conducted to identify security vulnerabilities on information systems, and existing or potential risks identified as a result of the tests and researches are eliminated.<\/li>\n<li>Access to the media where personal data is kept is restricted and only authorized persons are allowed to access this data limited to the purpose of storing personal data and all accesses are recorded. In limiting access, whether the data is of special nature and the degree of importance are also taken into consideration.<\/li>\n<li>The Company employs sufficient technical personnel to ensure the security of the environments where personal data are kept within the Company. Ensures that the access authorizations of employees working in information technology units to personal data are kept under control<\/li>\n<li>Destruction of personal data is ensured in such a way that it cannot be recycled and leaves no audit trail.<\/li>\n<li>Pursuant to Article 12 of the Law, any digital media where personal data is stored shall be protected by encrypted methods to ensure information security requirements.<\/li>\n<\/ul>\n<p><strong>Administrative Measures<\/strong><\/p>\n<p>It takes the following administrative measures in all environments where personal data is stored in accordance with the nature of the relevant data and the environment in which the data is stored:<\/p>\n<ul>\n<li>Efforts are made to raise awareness and raise awareness of all company employees who have access to personal data on information security, personal data and privacy.<\/li>\n<li>Legal and technical consultancy services are obtained in order to follow developments in the field of information security, privacy and protection of personal data and to take necessary actions.<\/li>\n<li>In the event that personal data is transferred to third parties due to technical or legal requirements, protocols are signed with the relevant third parties for the protection of personal data, and all necessary care is taken to ensure that the relevant third parties comply with their obligations in these protocols.<\/li>\n<li>In the event that the processed personal data is obtained by others through unlawful means, it shall notify the relevant person and the Board as soon as possible.<\/li>\n<li>Carries out and has carried out the necessary audits to ensure the implementation of the provisions of the Law within the Company. It eliminates the confidentiality and security weaknesses that arise as a result of the audits.<\/li>\n<\/ul>\n<p>8-Personal data belonging to data subjects are securely stored by the company in physical or electronic media, especially for the continuation of commercial activities, fulfillment of legal obligations, planning and execution of employee rights and fringe benefits, management of customer relations and other purposes specified in the Personal Data Protection, Processing and Privacy Policy within the limits specified in the KVKK and other relevant legislation. Personal data held by the Company shall be deleted, destroyed or anonymized ex officio in accordance with this destruction policy upon the request of the relevant person or in the event that the reasons listed in Articles 5 and 6 of the Law disappear. The reasons listed in Articles 5 and 6 of the Law consist of the following:<\/p>\n<ul>\n<li>Explicitly stipulated in the law.<\/li>\n<li>It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his\/her consent due to actual impossibility or whose consent is not legally valid.<\/li>\n<li>Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.<\/li>\n<li>It is mandatory for the data controller to fulfill its legal obligation.<\/li>\n<li>It has been made public by the person concerned.<\/li>\n<li>Data processing is mandatory for the establishment, exercise or protection of a right.<\/li>\n<li>Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.<\/li>\n<\/ul>\n<p>9-The procedures and principles regarding the techniques of deletion and destruction of personal data by the Company are listed below.<\/p>\n<p><strong>DELETION OF PERSONAL DATA<\/strong><\/p>\n<p><strong>Blackout of Personal Data on Paper Media:<\/strong>&nbsp;It is the method of physically cutting the personal data on the relevant document and removing it from the document or making it invisible by using fixed ink so that it cannot be reversed and cannot be read with technological solutions.<\/p>\n<p><strong>Secure Deletion from Software:<\/strong>&nbsp;It is a method of deleting personal data stored in the cloud or local digital environments and making it inaccessible again.<\/p>\n<p><strong>DESTRUCTION OF PERSONAL DATA<\/strong><\/p>\n<p><strong>Physical Annihilation:<\/strong>&nbsp;The system of physically destroying personal data in a way that cannot be used afterwards is applied. Paper documents are destroyed by shredding machines in such a way that they cannot be reassembled. Optical and magnetic media containing personal data are physically destroyed by melting, incineration or pulverization.<\/p>\n<p><strong>De-magnetization:<\/strong>&nbsp;It is a method of distorting the data on magnetic media in an unreadable way by passing it through special devices where it will be exposed to high magnetic fields.<\/p>\n<p><strong>Do not write on it:<\/strong>&nbsp;It is a destruction method that eliminates the ability to read and recover old data by writing random data consisting of 0s and 1s at least seven times on magnetic media and rewritable optical media through special software.<\/p>\n<p><strong>ANONYMIZATION OF PERSONAL DATA<\/strong><\/p>\n<p><strong>Removing variables:<\/strong>&nbsp;It is the method of anonymization by removing the highly descriptive variables from the variables in the data set created after the data collected from the relevant person are brought together.<\/p>\n<p><strong>Regional concealment:<\/strong>&nbsp;Anonymization is achieved by hiding a single piece of data if it is of a distinctive nature due to the fact that it creates a combination that is barely visible. The exception is the deletion of information that may be distinctive about the data.<\/p>\n<p><strong>Generalization:<\/strong>&nbsp;It is the process of bringing together personal data belonging to many people and turning them into statistical data by removing their distinctive information.<\/p>\n<p><strong>Lower and Upper Bound Coding:<\/strong>&nbsp;It is a method of anonymizing the values in a data group with predefined categories by combining them by determining a certain criterion.<\/p>\n<p><strong>Micro-merging:<\/strong>&nbsp;All data are first sorted into groups in a meaningful order, and then anonymization is achieved by taking the average of the groups and substituting the value obtained for the relevant data in the current group.<\/p>\n<p><strong>Data hashing and corruption:<\/strong>&nbsp;Direct or indirect identifiers in personal data are mixed or distorted with other values, severing their relationship with the person concerned and making them lose their identifying characteristics.<\/p>\n<p><strong>10-Retention and Destruction Periods<\/strong><\/p>\n<table border=\"1\" style=\"width:100%;\">\n<tbody>\n<tr>\n<td><strong>PROCESS<\/strong><\/td>\n<td><strong>STORAGE TIME<\/strong><\/td>\n<td><strong>DISPOSAL PERIOD<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Personnel data based on recruitment documents and notifications to the Social Security Institution regarding length of service and wages<\/td>\n<td>It shall be retained for 10 years from the beginning of the calendar year following the continuation and termination of the service contract.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Personnel data other than recruitment documents and personnel data based on notifications to the Social Security Institution regarding length of service and wages<\/td>\n<td>Retained for 10 years from the beginning of the calendar year following the continuation and termination of the service contract<\/td>\n<td>Following the end of the storage period<\/td>\n<\/tr>\n<tr>\n<td>Data in the Workplace Personal Health File<\/td>\n<td>Retained during the continuation of the service contract and for 10 years after its termination<\/td>\n<td>Within 180 days<\/td>\n<\/tr>\n<tr>\n<td>Occupational health and safety practices<\/td>\n<td>Retained for 10 years following the termination of the employment relationship.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Responding to court\/execution information requests related to personnel<\/td>\n<td>Retained for 10 years following the termination of the employment relationship.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Personnel Financing Processes<\/td>\n<td>Retained for 10 years following the termination of the employment relationship.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Identity information, contact information, financial information, Business Partner\/Solution Partner\/Consultant employee data regarding the execution of the commercial relationship between the Business Partner\/Solution Partner\/Consultant and the company<\/td>\n<td>It is kept for 10 years during and after the termination of the business\/commercial relationship with the Company in accordance with Article 146 of the Turkish Code of Obligations and Article 82 of the Turkish Commercial Code.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Visitor's name, surname, vehicle license plate number and camera records taken at the entrance to physical locations,<\/td>\n<td>Stored for 2 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Information contained in the CV and job application form of the prospective employee<\/td>\n<td>It will be kept for a maximum of 2 years, for as long as it takes for the CV to become outdated.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Information in the internship file of the intern<\/td>\n<td>It shall be maintained for 10 years during the continuation of the internship relationship and from the beginning of the calendar year following the end of the internship relationship.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Customer's name, surname, T.C.K.N., contact information, payment information and methods, product\/service preferences, transaction history,<\/td>\n<td>Each product\/service purchased by the Customer is kept for 10 years from the date of delivery in accordance with Article 146 of the Turkish Code of Obligations and Article 82 of the Turkish Commercial Code.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Identity information, contact information, financial information obtained during contract negotiations regarding the establishment of a commercial relationship between the Potential Customer and the company,<\/td>\n<td>Stored for 2 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Identity information, contact information, financial information regarding the execution of the commercial relationship between the company and the institutions, companies and customers with which the company cooperates, data on the employees of the institutions, companies and customers with which the company cooperates<\/td>\n<td>It is kept for 10 years during and after the termination of the business\/commercial relationship with the Company in accordance with Article 146 of the Turkish Code of Obligations and Article 82 of the Turkish Commercial Code.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Planning and Execution of Corporate Communication Activities<\/td>\n<td>Retained for 10 years following the termination of the employment relationship.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Other Data Required to be Processed for the Establishment or Performance of a Contract or Processed within this Scope<\/td>\n<td>It is kept for 10 years during and after the termination of the business\/commercial relationship with the Company in accordance with Article 146 of the Turkish Code of Obligations and Article 82 of the Turkish Commercial Code.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Information on shareholders and members of the board of directors<\/td>\n<td>Stored for 10 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Accident Reporting<\/td>\n<td>Stored for 10 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Document preparation<\/td>\n<td>Stored for 10 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<tr>\n<td>Filing of training records<\/td>\n<td>Stored for 10 years.<\/td>\n<td>Within 180 days after the end of the retention period<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>11-Although no time period has been determined for the retention of personal data under the Law, it is essential to retain personal data for the period stipulated in the relevant legislation or required for the purpose for which they are processed in accordance with the general principles. The Data Controller Company makes an assessment based on the legislation in force regarding each data processing process and the purpose of the process in order to determine the retention periods in accordance with the principle in question. In the event that a longer period is regulated in accordance with the legislation or a longer period is stipulated for statute of limitations, deprivation of rights, retention periods, etc. in accordance with the legislation, the periods in the provisions of the legislation are accepted as the maximum retention period. Accordingly, personal data are retained at least for the period required by legal obligations and until the expiration of the statute of limitations subject to the relevant Law.<\/p>\n<p>Personal data may be stored in case of any dispute that may arise between you and the Data Controller in order to make the necessary defenses within the scope of the dispute. Personal data are anonymized, deleted or destroyed in accordance with the Law when the purpose of processing the relevant personal data is eliminated within the scope of any process, including the expiration of the aforementioned periods.<\/p>\n<p>12- Personal data whose retention period has expired or the purpose of retention has disappeared are deleted, destroyed or anonymized by destroying them every six months by means of a process specified in this Personal Data Retention and Destruction Policy and to be carried out ex officio at recurring intervals. Periodic destruction is also carried out in January and July of each year.<\/p>\n<p>13- Our Company makes the necessary assignments within the Company and establishes procedures accordingly in order to fulfill the obligations under the PDP Law and to implement the matters specified in this Policy.<\/p>\n<p>14- Changes that may occur in the company's activities and processed personal data groups, changes to be made in the legal legislation and the principle decisions of the Personal Data Protection Board are followed, this policy is reviewed according to the emerging need and the necessary sections are updated, amended or recreated.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t            <\/div>\r\n        <\/div>\r\n        \t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>KVKK Ana Sayfa Misyondent olarak, ki\u015fisel verilerinizin g\u00fcvenli\u011fi bizim i\u00e7in \u00f6nceliklidir. Bu sayfa, verilerinizin nas\u0131l topland\u0131\u011f\u0131n\u0131, i\u015flendi\u011fini ve korundu\u011funu detayl\u0131 bir \u015fekilde a\u00e7\u0131klamaktad\u0131r. &nbsp; Dan\u0131\u015fma Hatt\u0131m\u0131z\u0131 Aray\u0131n! +90 533 397 65 56 M\u0130SYONDENT K\u0130\u015e\u0130SEL VER\u0130LER\u0130N KORUNMASI, \u0130\u015eLENMES\u0130 VE G\u0130ZL\u0130L\u0130K POL\u0130T\u0130KASI 1-\u015eirketimiz, Misyondent (\u201c\u015eirket\u201d), bu (\u201cPolitika\u201d) ile t\u00fcm muhataplar\u0131n\u0131n, ki\u015fisel verilerinin elde edilmesi, i\u015flenmesi, silinmesi, yok [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-12329","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/pages\/12329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/comments?post=12329"}],"version-history":[{"count":0,"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/pages\/12329\/revisions"}],"wp:attachment":[{"href":"https:\/\/misyondent.com\/en\/wp-json\/wp\/v2\/media?parent=12329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}