REGARDING THE PROTECTION OF PERSONAL DATA
EMPLOYEE LIGHTING TEXT
Data Controller; Işıksan Automotive Industry. ve Tic. Ltd. Sti. (Address: Sancaktepe Mah. Millet Cad. No:36-2 Çantaköy, 34580 Istanbul https://isiksan.com/ +90 212 746 51 56 +90 212 746 52 16), Law No. 6698 on Protection of Personal Data ( From now on, it will be referred to as "KVKK".) and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Clarification Obligation (hereinafter, it will be referred to as the "Communiqué"), in order to inform the employees about the procedures and principles to be followed in the protection of their personal data in their relations with our institution. has been announced.
KVKK article 10; “During the acquisition of personal data, the data controller or the person authorized by it; It is obliged to inform about the identity of the data controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11.
BASIC DEFINITIONS IN THE LAW
Personal Data: Any information relating to an identified or identifiable natural person.
Processing of Personal Data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system, It is all kinds of operations performed on data such as classification or prevention of use.
Data Controller: It is the natural and legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Within the scope of this text, Sancaktepe Mah. Millet Cad. Işıksan Otomotiv San. ve Tic. Ltd. Şti.
Data registration system (VERBIS): It is the registration system in which personal data is processed and structured according to certain criteria.
Explicit Consent: Consent about a specific subject, based on information and expressed with free will.
Board: Refers to the Personal Data Protection Board.

PERSONAL DATA ON EMPLOYEE
Our institution can process personal data of employees in line with the purposes and processing conditions specified in this text. The personal data subject to processing are as follows:
a. Identity Data
Name, surname, parents' name, mother's maiden name, date of birth, place of birth, T.R. Identity Number, gender, marital status, identity card serial number, nationality information, passport information, duty and title information, family relatives information.
b. Contact Data
Telephone number, e-mail address, address information, internal company contact information (company phone number, extension phone number, corporate e-mail address, registered e-mail address).
NS. Location Data
Location information, etc.
D. Financial Data
Bank IBAN number, payrolls, file and debt information related to execution files.
to. Professional Experience Data
Educational status, in-service training information, certificate and diploma information, language information, courses attended, education and skills, work experience, transcript information.
f. Visual and Audio Data
Photographs of real people, camera recordings.
g. Personnel Data
Disciplinary investigation, entry-exit records, resume information, performance evaluation reports, insurance information, criminal record, leave and return date, department and unit.
h. Health Data
Health report, blood type, personal health information, health and maternity leave documents, information about disability, device and prosthesis information used.
NS. Other Data
IP address information on corporate computers, website entry-exit records on corporate computers, license plate, accommodation and travel information, handwriting and signature, request - complaint information.

Işıksan Automotive Industry. ve Tic. Ltd. Şti.'S PURPOSE OF PROCESSING PERSONAL DATA
Within the scope of Article 10 of KVKK and Article 5 of the Communiqué, personal data of employees can be processed in accordance with the processing conditions specified in Article 4 of KVKK:
Depending on the service contract; fulfillment of service obligations, fulfillment of employer responsibilities, ensuring occupational safety, management, supervision and performance of work,
Receiving and evaluating suggestions for the Improvement of Business Processes,
To inform about the changes that may occur in our terms of service,
Resolving employee complaints and processing data access or correction requests,
Execution of work and residence permit procedures for foreign personnel,
Arranging all records and documents that will be the basis of the transaction in electronic (internet / mobile etc.) or physical environment,
Labor Law

Execution of contract processes within the scope of this and all other legislation,
Providing information to public officials on matters related to public safety upon request and in accordance with the legislation,
Fulfilling legal obligations and exercising the rights arising from the current legislation,
Fulfilling the legal obligation, if the relevant authority requests it within the scope of judicial and administrative investigations and if it is necessary to respond,
Execution of the application processes of employee candidates
Execution of fringe benefits and benefits processes for employees
Fulfillment of obligations arising from employment contracts and legislation for employees
Carrying out training activities for employee satisfaction
Carrying out activities for training employees
Conducting business activities
Execution of occupational health and safety activities
Execution of assignment processes
Carrying out internal audit activities
Execution of performance evaluation processes
Providing information to authorized persons, institutions and organizations
Execution of emergency management processes
Conducting communication activities
Execution of accounting and financial affairs
Organization and event management
Execution of information security processes
Execution of storage and archive activities
Ensuring physical space security
METHOD AND LEGAL REASON FOR PERSONAL DATA COLLECTION
Personal data may be obtained directly from the person concerned, third parties and legal authorities during the establishment of legal relations. In this context, personal data; It can be collected from verbal, written or electronic media via tools such as e-mail, application forms and written or oral communication channels. In accordance with the legislation, especially the Labor and Social Security Laws, personal data can be collected in order for employers to fulfill their obligations arising from employment contracts and laws in a complete and correct manner.
Pursuant to the provision in Article 5 of the KVKK, personal data cannot be processed without the explicit consent of the person concerned. The law, as an exception, has specified cases where explicit consent is not required. Provided that there is a clear provision in the law and it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, it is compulsory for the company to fulfill its legal obligations, it has been made public by the data subject itself, the data is for the establishment, exercise or protection of a right. Personal data may be processed by our company without seeking explicit consent, provided that the processing is obligatory and does not harm the fundamental rights and freedoms of the data subject.
Işıksan Automotive Industry. ve Tic. Ltd. Şti. to continue its activities, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, and in line with the principles and procedures stipulated by other relevant legislation, in order to fulfill the legal obligations and to achieve the purposes specified in this Clarification Text. reasons can be processed.

TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED
Provided that sufficient and effective measures are taken in accordance with the security and confidentiality principles set in the legislation in order to ensure the realization of the personal data of the employees, the data transfer and processing conditions specified in Articles 8 and 9 of the Law and the purposes listed above; suppliers, shareholders, authorized dealers, private legal persons from whom services are received (in matters such as security, training, auditing, event and organization, health, work safety, law, etc.), independent audit firms, financial institutions, direct and indirect affiliates. and foreign business partners, domestic and foreign companies that receive storage, archiving, information technology support (server, hosting, software, cloud computing), legally authorized public institutions and private legal persons, and third-party services in areas such as security, sales and marketing. persons, legally authorized public institutions and private individuals and institutions and Işıksan Otomotiv San. ve Tic. Ltd. Sti. It can be shared and transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.
PERSONAL DATA STORAGE PERIOD
In accordance with the provisions of the KVKK, your personal data that has been processed for the purposes specified in this "Information Text on the Processing of Personal Data" disappears when the purpose for which it is to be processed pursuant to Article 7/f.1. When the statute of limitations expires, your personal data will be deleted, destroyed or anonymized and continued to be used by us in accordance with the Personal Data Retention and Disposal Policy.

RIGHTS OF THE RELATED PERSON
The person concerned, learning whether their personal data is processed, 

If personal data has been processed, requesting information about it, learning the purpose of processing personal data and whether they are used in accordance with its purpose, knowing the third parties in the country or abroad to whom personal data is transferred, requesting correction of personal data in case of incomplete or incorrect processing, KVKK and other relevant laws Requesting the deletion or destruction of personal data in case of disappearance of the reasons requiring processing, despite the fact that it has been processed in accordance with the provisions of the provisions of the law, requesting that the transferred third parties be notified in case of deletion, destruction or correction of personal data upon request by our institution, by analyzing the processed data exclusively through automated systems. has the right to object to the emergence of a result against the person himself, to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.
EXCEPTIONS TO THE RIGHT OF APPLICATION
Pursuant to the 28/2 provision of the Law, except for the right to demand the compensation of the damage in the following cases, it will not be possible for the persons concerned to benefit from the rights specified in Article 11 of the Law.
Personal data processing is necessary for the prevention of crime or for criminal investigation,
Processing of personal data made public by the person concerned.

APPLICATION METHOD AND FORM
The person concerned may submit their requests regarding their rights listed above to Işıksan Otomotiv San. ve Tic. Ltd. Şti. can apply.
Requests within the scope of the rights enumerated in Article 11 of the Law on the Protection of Personal Data No. 6698, in accordance with Article 13 of the KVKK and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller, at https://isiksan.com/tr/kurumsal/kvkk. can apply by filling out the form using one of the methods described below.
Applications submitted to the Company will be answered within 30 days from the date the request reaches the Company, depending on the nature of the request, in accordance with Article 13/2 of the KVKK. The answers regarding the application will be delivered to the applicant in writing and electronically in accordance with Article 13 of the KVKK.

APPLICATION METHOD
ADDRESS TO APPLY
INFORMATION TO BE INCLUDED IN THE APPLICATION
1. Written Application
Personal application with wet signature or via Notary Public
Sancaktepe Mah. Millet Cad. No:36-2 Cantakoy, 34580 Istanbul
"Information Request Under the Personal Data Protection Law" will be written on the envelope/notification.
2. With a Registered Electronic Mail (KEP) address
With a Registered Electronic Mail (KEP) address
isiksanotomotiv@hs01.kep.tr
"Personal Data Protection Law Information Request" will be written in the subject part of the e-mail.
3. Application with the e-mail address found in the company system
By using the e-mail address registered in Işıksan Automotive system,
info@isiksan.com
"Personal Data Protection Law Information Request" will be written in the subject part of the e-mail.
4. Application with an e-mail address not found in the company system
By using an e-mail address that does not exist in Işıksan Automotive system, including mobile signature/e-signature
info@isiksan.com
"Personal Data Protection Law Information Request" will be written in the subject part of the e-mail.

If the request is accepted or rejected by explaining the reason, the response will be notified to the requester electronically or in writing. If the request in the application is accepted, the necessary action will be taken by our company without delay.
COMMUNIQUÉ ON THE PROCEDURES AND PRINCIPLES OF APPLICATION TO DATA SPEAKER MD. 7
FEE: In case of a written response to the application, no fee will be charged for up to 10 pages, and a processing fee of 1 Turkish Lira may be charged for each page over 10 pages. If the response to the application is given in a recording medium such as CD or flash memory, a fee may be charged in the amount of the cost of the recording medium.