Disclosure Text

**In accordance with the provisions of the Personal Data Protection Law No. 6698 (KVKK), any information that identifies or makes you identifiable, including your sensitive personal data, is processed by HASAT BNO GRUP GIDA YEMEK HAYVANCILIK TEKSTİL İNŞAAT SANAYİ TİCARET ANONİM ŞİRKETİ (hereinafter referred to as  HASAT) as the Data Controller within the scope outlined below.

The term “Processing of Personal Data” as defined in the Personal Data Protection Law No. 6698 refers to any operation performed on data such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data.

At HASAT, we place the utmost importance on processing the personal data you share with us securely and lawfully, in connection with and to the extent necessary for our activities and service purposes, whether you are a shareholder, company partner, potential customer, customer, supplier/subcontractor employee or officer, employee, employee candidate, intern/student, physical or online visitor, or any other third party whose data we process.

In this context, we would like to inform you about the purposes of processing your personal data, the legal reasons, the collection methods, the recipients and purposes of transfer, and the rights granted to you under KVKK.

1. Purposes of Processing Personal Data

As HASAT, we process your personal and/or sensitive personal data obtained as the data controller for the following purposes:
– Managing Emergency Processes
– Managing Information Security Processes
– Conducting Employee Candidate/Intern/Student Selection and Placement Processes
– Managing Employee Candidate Application Processes
– Fulfilling Obligations Arising from Employment Contracts and Legislation for Employees
– Conducting Audit/Ethical Activities
– Conducting Training Activities
– Managing Access Authorizations
– Ensuring Compliance with Legal Obligations
– Conducting Financial and Accounting Affairs
– Ensuring Physical Space Security
– Managing Assignment Processes
– Monitoring and Conducting Legal Affairs
– Conducting Communication Activities
– Planning Human Resources Processes
– Conducting Business Activities/Audits
– Conducting Occupational Health and Safety Activities
– Ensuring Business Continuity
– Conducting Logistics Activities
– Conducting Goods/Services/Operations Processes
– Managing Goods/Service Procurement Processes
– Managing Goods/Service Sales Processes
– Conducting Customer Relationship Management Processes
– Conducting Customer Satisfaction Activities
– Organizing and Managing Events
– Conducting Storage and Archiving Activities
– Managing Contract Processes
– Conducting Supply Chain Management Processes
– Providing Information to Authorized Persons, Institutions, and Organizations
– Creating and Monitoring Visitor Records

Your personal data collected is processed in accordance with the principles of legality and fairness, accuracy, and up-to-dateness when necessary, being processed for specific, explicit, and legitimate purposes, being relevant, limited, and proportionate to the purposes for which they are processed, and being retained for the period required by the relevant legislation or the purpose for which they are processed.

As HASAT, we process the following types of personal data for the stated purposes:
– Identity Information: e.g., name, surname, date and place of birth, identity number
– Contact Information: e.g., address, email address, phone/mobile number
– Personnel Information: e.g., payroll details, employment records, CV information
– Legal Transaction Information: e.g., information in correspondence with judicial authorities, information in case files
– Customer Transaction Information: e.g., invoice, check information, order details
– Physical Space Security Information: e.g., entry-exit records of employees and visitors, camera recordings
– Transaction Security Information: e.g., website login information, password details
– Financial Information: e.g., IBAN/account number details
– Professional Experience Information: e.g., diploma details, attended courses, in-service training information, certificates
– Visual and Auditory Records: e.g., passport photo, photos and video recordings
– Health Information: e.g., disability information, blood type, personal health information
– Criminal Conviction and Security Measures Information: e.g., information related to criminal convictions
– Other Information: e.g., vehicle plate number

2. Recipients and Purposes of Personal Data Transfer

HASAT may transfer your personal data to the following entities in compliance with the conditions and purposes for personal data processing specified in Articles 8 and 9 of the Law No. 6698 and by taking the necessary precautions and complying with the conditions stipulated in the legislation:
– To fulfill legal obligations, obtain occupational health and safety services and health software services, ensure legal compliance by the occupational health and safety firm, enable contracts between the company and the occupational safety specialist, provide information to authorized persons, institutions, and organizations, share information for mandatory financial audits due to the Capital Markets Board and Stock Exchange, share information with auditors for conducting audit activities, show data and records for audit reports, inform authorized external auditors, inform suppliers and customers, share information with official institutions, use cloud email infrastructure and cloud computing infrastructure, identify users by IT service providers, back up data at data centers, obtain external IT technical support, share guest information with vehicle transfer companies as per the transportation law, share accommodation information with law enforcement, notify the Capital Markets Board (KAP) about board and committee members, share information for international commercial travel visas, provide information for employee credit applications, inform suppliers for agreements with farmers, obtain external security services, conduct training activities, ensure compliance with regulations, inform customers about employee training, inform authorized personnel for conducting training, obtain consultancy support for any legal processes that may arise within the scope of labor law, conduct occupational health and safety activities, fulfill the automatic enrollment contract specified by law, make salary payments, provide information for traceability audits by auditors, conduct necessary examinations for periodic inspections, share shipping invoice copies with carriers and port customs authorities, arrange hotel and ticket bookings for travel, follow up legal processes on behalf of the company.

Your personal data may be transferred to real persons or private law legal entities, our suppliers, group companies, and authorized public institutions and persons, within the scope specified in Articles 8 and 9 of the Law No. 6698, by taking necessary measures and complying with the conditions stipulated in the legislation.