KVKK

1. Introduction

The policy is prepared to ensure that personal data processing activities of the Company comply with the Personal Data Protection Law No. 6698 and relevant legislation. It covers employees, suppliers, customers, service providers, and third parties.

2. Abbreviations and Definitions

Key concepts such as “Explicit Consent”, “Anonymization”, “Data Subject”, and “Data Controller” are defined in detail.

3. Responsibilities

All units of the company are responsible for implementing the necessary administrative and technical measures to ensure personal data security.

4. Data Recording Environments

Personal data is securely stored in digital and physical environments such as servers, software, computers, paper media, and USB devices.

5. Explanation on Retention and Destruction

Personal data is retained for the period required by legislation or purpose. Once this period ends, data is deleted, destroyed, or anonymized.

6. Technical and Administrative Measures

Security measures such as firewalls, antivirus software, access controls, authorization matrices, and user training are implemented.

7. Data Destruction Techniques

Personal data is destroyed using methods such as deletion, physical destruction, or anonymization, depending on the storage environment.

8. Retention and Destruction Periods

Personal data is periodically deleted in June and December of each year, based on the defined retention schedules.

9. Publication and Update of the Policy

This policy is published in both printed and electronic form. It is disclosed on the company website and updated as needed.

10. Enforcement

This policy came into effect on 13.09.2021. If repealed, hard copies are stamped and archived for at least 5 years by the IT Department.

For more information, please contact us via info@forcemuhendislik.com.