Business Partner Clarification Text

Data Controller and Representative

By the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), the Data Controller is Ulus Engineering Environmental Consultancy Education Occupational Health and Safety Ltd. Co.

Our Principles Regarding the Processing of Personal Data of Our Business Partners

Ulus Engineering Consultancy Inc. aspect;

a) To process by the law and honesty rules,

b) To strive to ensure correctness and up-to-dateness,

c) To be processed for specific, explicit, and legitimate purposes,

d) To be connected, limited, and restrained with the purpose for which they are processed,

e) We have adopted the principle of being preserved for the period required by the legislation or for the purpose for which they are processed.


Clarification and Scope

Ulus Engineering as data controller. As, all kinds of private and general personal data obtained within the scope of our business relations, provided that it is measured and limited in line with the data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698, by our company principles, the establishment, protection, use of the right, It can be processed by our legal responsibility as the data controller, data responsibility obligations such as the performance of the contract and due to legal requirements.


With this awareness, the parties are obliged to comply with the Personal Data Protection Law No. 6698, the secondary regulations (regulation, communiqué, circular), and the binding decisions are taken and to be taken by the Personal Data Protection Board. It attaches great importance to its proper processing (storage, deletion, destruction, backup, etc.).


Processed Personal Data

Your personal data and explanations that may be processed by us within the scope of the business relationship are as follows;

Identity Information; All identity information, nationality, marital status, place, and date of birth, T.R. data such as identity number, gender, signature information, SGK number,


Communication information; Data such as phone number, backup person phone information, address information, e-mail address, if necessary,


Educational Information; Data such as education status, certificate of course and seminar information, training received within the scope of the relevant job and reference information, diploma information, curriculum vitae information,


Financial Information; Data such as financial information, enforcement proceedings and debt information, bank information


Visual Data; Photographs, camera recording images processed for the security of business processes in our location,


Audio Data; Voice recordings processed for the purpose of service quality and fulfillment of demand/complaint processes,


Special Quality Personal Data; Data such as background information, health reports, health declaration document, health reports, religion, and blood group in the copy of identity card/driver's license,


Working Data; Registry number, position name, department, and unit, title, SSI entry declaration and assignment documents, date of employment, title, signature circular, projects worked, internet and internal access logs,


Other; Data such as vehicle information, military service status


The processed data may be one or more of them within the scope of our business relationship.


Purpose of Processing Personal Data

As a data controller, your private and general personal data obtained by us within the scope of our business relations may be processed for the following purposes and legal reasons.


Execution and continuity of business relationship, execution of emergency management processes, execution of information security processes, execution of audit / ethical activities, execution of training activities, execution of access authorizations, execution of activities in accordance with the legislation, execution of finance and accounting works, execution of company / product / services commitment processes , ensuring physical space security, executing assignment processes, follow-up and execution of legal affairs, carrying out audit / investigation / intelligence activities, executing communication activities, executing / auditing business activities, executing occupational health / safety activities, executing business continuity activities, executing logistics activities, executing goods / services procurement processes, executing goods / services operation processes, Execution of business relations management processes, execution of activities for satisfaction, organization and event management, execution of analysis and evaluation studies, execution of performance evaluation processes, execution of risk management processes, execution of storage and archive activities, executing contract processes, tracking requests / complaints, ensuring the security of movable goods and resources, conducting supply chain management processes, ensuring the security of data controller operations, informing authorized persons, institutions and organizations, executing management activities, creating and tracking visitor records, In accordance with the obligations in SGK Legislation, Turkish Commercial Code, Labor Law, Turkish Code of Obligations, Occupational Health and Safety and Tax Legislation, for the purposes of ensuring physical space security, conducting assignment processes, creating and monitoring visitor records, It will be processed within the personal data processing conditions and purposes specified in Article 6.


To Whom and For What Purpose the Processed Personal Data Can Be Transferred

Your data obtained by us within the scope of the business relationship, from time to time and to the extent required by the activity, with the relevant legal parties, with the professional consultants that our institution receives service, with banks and insurance companies, with the institutions with which our institution has commercial, administrative or contractual relations, with business partners and affiliated companies to carry out our business relations. It can be shared with third parties such as offices, provided that it is limited to the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698. In these shares, the data processing conditions and purposes are measured and acted within the data security rules.


Method and Legal Reason for Personal Data Collection

Fulfilling our legal obligations as an institution, performance of the contract with your company and/or you, establishment and protection of the right, for the reasons stipulated in the laws and for the legitimate interests of the Company, Turkish Commercial Code No. 6102, Labor Law No. 4857, Turkish Code of Obligations No. 6098, 6563 It is obtained so that the services determined in the provisions of the Law on the Regulation of Electronic Commerce No.


We collect your data that we request from you and/or other representatives/employees representing your company, physically or electronically, by transmitting them to us verbally, physically or electronically by you and/or other representatives/employees of your company, and through the cameras, we place on the Company buildings.


Rights of Personal Data Owners Enumerated in Article 11 of Law No. 6698


As personal data owners, you can submit your requests regarding your rights to Ulus Engineering. If you forward it to our company using the methods set out in the Clarification Text, our company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by the Personal Data Protection Board will be charged by our company. In this context, personal data owners;

  • Learning whether personal data is processed or not,
  • If personal data has been processed, requesting information about it,
  • To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
  • Knowing the third parties to whom personal data is transferred in the country or abroad,
  • Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
  • Requesting the deletion or destruction of personal data if the reasons requiring its processing have disappeared, although it has been processed by the provisions of Law No. 6698 and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
  • Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
  • If personal data is damaged due to unlawful processing, it has the right to demand compensation for the damage.


How Do We Protect?

All necessary technical and administrative measures are taken for the security of all personal data collected by our institution. In this context, unauthorized access, misuse by the Personal Data Security Guide requirements published by the KVKK Board, ISO/IEC 27001 Information Security, ISO/IEC 27017 Cloud Services Information Security, ISO/IEC 27701 Privacy Information Management standards, European Union General Data Protection Regulation GDPR. We take physical, technical, organizational, and managerial safeguards against use, disclosure, or alteration.


Application Methods;

  1. The applicant personally works with Ulus Engineering address, by filling in the «Application Form», with a closed envelope and the note “Information Request according to the Law on the Protection of Personal Data” on the envelope, with a hand-delivery report to our central location.
  2. The applicant, through a notary public, to Ulus Engineering address;


Changes to Our Privacy Statement

If we change our Privacy Statement, we will post the revised statement here with the updated revision date. If we make material changes to our Privacy Statement that will materially change our privacy practices, we may notify you before the changes take effect, such as by sending an e-mail or posting a notice on our corporate website and/or social media accounts.