KVKK Clarification Text
In relation to your personal data processed or may be processed by Forte Information Communication Technologies and Defense Industry Inc. ("FORTE" or "Company") acting as the data controller within the scope of the Constitution of the Republic of Turkey and international agreements to which our country is a party regarding human rights and the Law No. 6698 on the Protection of Personal Data ("Law"), information on under what conditions and in what environment the data processing activity is carried out and the rights and obligations of both you and FORTE regarding this process are provided below.
- Purpose of Processing Your Personal Data
Your personal data, within the framework of the relationship arising from the contract between you and our company, is processed within the limits set by the Law on the Protection of Personal Data ("KVKK") under the following purposes:
- Conducting Training Activities
- Conducting Activities in Compliance with Legislation
- Conducting Communication Activities
- Conducting Business Activities / Audit
- Execution of After-Sales Support Services for Goods / Services
- Conducting Goods / Service Sales Processes
- Conducting Goods / Service Production and Operation Processes
- Conducting Activities for Customer Satisfaction
- Conducting Contract Processes/li>
- Ensuring the Security of Data Controller Operations.
- Processed Personal Data
Some of your personal data is processed within the scope of the Law No. 6698 on the Protection of Personal Data ("KVKK"). Your categorical personal data can be listed as follows:
- Identity
- Contact
- Customer Transaction
- Personnel
- Risk Management
- Other - Signature
- Other - Project Information.
- Method of Collection and Legal Reasons of Your Personal Data
Your personal data is collected orally, in writing, and electronically; while we carry out our activities as FORTE, it is collected to fully comply with the regulations, company policies, and obligations undertaken. Your personal data is obtained for the legal reason of fulfilling the obligations arising from the contract and explicitly stipulated in the laws, in accordance with the basic principles prescribed by the Law.
- Transfer of Your Personal Data
Your processed personal data is shared with "Business Partners" domestically based on the existing employment contract relationship between us, in accordance with the purposes stated in the "Purpose of Processing Personal Data" heading of this clarification text, within the framework of the personal data processing conditions specified in Article 8 of the Law and in compliance with the legislation and company policies.
- Security Measures Taken and Destruction of Personal Data
We apply the legal, administrative, and technical measures foreseen by the Law for the Protection of Personal Data and take all necessary precautions within the scope of Articles 4 and 12 of the law in processing these data. Your personal data is destroyed in the first periodic destruction process (6 months) after the legal storage obligations have ceased, and after our legitimate interests that are not contrary to the law have ceased.
- Rights under the Law as Data Subject
In accordance with Article 11 of the Law, you have the following rights regarding your personal data:
- Learn whether your personal data is processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request correction of your personal data if it is incomplete or incorrectly processed and request notification of this correction to third parties to whom your personal data has been transferred,
- Request the deletion or destruction of your personal data in case the reasons requiring its processing disappear, despite being processed in accordance with the Law No. 6698 and other relevant laws, and request the notification of this deletion or destruction to third parties to whom your personal data has been transferred,
- Object to the occurrence of a result against you by analyzing the processed data solely through automated systems,
- Request compensation for damages in case of damage due to the unlawful processing of personal data.
In accordance with Article 13, Paragraph 1 of the KVKK, to exercise your rights mentioned above and other requests, according to the "Communiqué on the Principles and Procedures for Applying to the Data Controller," with your identity and address in a clear and understandable manner, by presenting your identity with a clear and detectable method, you can send your requests to us in writing and wet-signed by registered mail or through a notary public to the addresses below. It is necessary that the subject of your request is clear and understandable, that the subject of your request is related to you personally, or if you are acting on behalf of someone else, you must be specifically authorized in this regard and this authorization must be documented, your application must include your identity and address information, and the documents proving your identity must be attached to the application. Written or electronic feedback will be provided to your applications within a maximum of 30 days from the date your request reaches us.
In relation to your personal data processed or may be processed by Forte Information Communication Technologies and Defense Industry Inc. ("FORTE" or "Company") acting as the data controller within the scope of the Constitution of the Republic of Turkey and international agreements regarding human rights to which our country is a party, and the Law No. 6698 on the Protection of Personal Data ("Law"), information on under what conditions and in what environment the data processing activity is carried out, as well as the rights and obligations of both you and FORTE regarding this process are provided below.
- Purpose of Processing Your Personal Data
Your personal data is processed within the scope of the relationship arising from the contract between you and our company, within the limits set by the Law on the Protection of Personal Data ("KVKK") under the purposes of "Conducting Activities in Compliance with Legislation, Conducting Business Activities / Audit, Conducting Occupational Health and Safety Activities."
- Processed Personal Data
Some of your personal data is processed within the scope of the Law No. 6698 on the Protection of Personal Data ("KVKK"). Your categorical personal data can be listed as "Identity, Personnel, Professional Experience, and Other - Signature."
- Method of Collection and Legal Reasons for Your Personal Data
Your personal data is collected orally, in writing, and electronically while we carry out our activities as FORTE to ensure full compliance with regulations, company policies, and the obligations undertaken. Your personal data is obtained for the legal reason of fulfilling the obligations arising from the contract and explicitly stipulated in the laws, in accordance with the basic principles prescribed by the Law.
- Transfer of Your Personal Data
Your processed personal data is shared with "Customers" domestically based on the existing employment contract relationship between us, in accordance with the purposes stated in the "Purpose of Processing Personal Data" heading of this clarification text, within the framework of the personal data processing conditions specified in Article 8 of the Law and in compliance with the legislation and company policies.
- Security Measures Taken and Destruction of Personal Data
We apply the legal, administrative, and technical measures foreseen by the Law for the Protection of Personal Data and take all necessary precautions within the scope of Articles 4 and 12 of the law in processing these data. Your personal data is destroyed in the first periodic destruction process (6 months) after the legal storage obligations have ceased, and after our legitimate interests that are not contrary to the law have ceased.
- Rights under the Law as Data Subject
In accordance with Article 11 of the Law, you have the following rights regarding your personal data:
- Learn whether your personal data is processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request correction of your personal data if it is incomplete or incorrectly processed and request notification of this correction to third parties to whom your personal data has been transferred,
- Request the deletion or destruction of your personal data in case the reasons requiring its processing disappear, despite being processed in accordance with the Law No. 6698 and other relevant laws, and request the notification of this deletion or destruction to third parties to whom your personal data has been transferred,
- Object to the occurrence of a result against you by analyzing the processed data solely through automated systems,
- Request compensation for damages in case of damage due to the unlawful processing of personal data.
In accordance with Article 13, Paragraph 1 of the KVKK, to exercise your rights mentioned above and other requests, according to the "Communiqué on the Principles and Procedures for Applying to the Data Controller," with your identity and address in a clear and understandable manner, by presenting your identity with a clear and detectable method, you can send your requests to us in writing and wet-signed by registered mail or through a notary public to the addresses below. It is necessary that the subject of your request is clear and understandable, that the subject of your request is related to you personally, or if you are acting on behalf of someone else, you must be specifically authorized in this regard and this authorization must be documented, your application must include your identity and address information, and the documents proving your identity must be attached to the application. Written or electronic feedback will be provided to your applications within a maximum of 30 days from the date your request reaches us.
- What rights do you have under Article 11 of the Law on the Protection of Personal Data (KVKK), which you can request from FORTE?
Within the scope of Article 11 of the KVKK, as a personal data owner, you have the following rights
- Learn whether your personal data is being processed.
- Request information if your personal data has been processed.
- Learn the purpose of processing your personal data and whether it is used in accordance with this purpose.
- Be informed about third parties, both domestically and abroad, to whom your personal data has been transferred.
- Request the correction of your personal data if it is incomplete or incorrectly processed and demand notification to third parties to whom your personal data has been transferred regarding the transactions made in this context.
- Request the deletion or destruction of your personal data in case the reasons requiring the processing cease to exist, and demand notification to third parties to whom your personal data has been transferred regarding the transactions made in this context.
- Object to the emergence of a result against you through the analysis of your processed data exclusively by automatic systems.
- Demand compensation for damages in case you suffer damage due to the unlawful processing of your personal data.
As personal data owners, you can submit your requests regarding these rights by filling out the information request application form prepared by FORTE. You must specify the preferred method in the application form. Depending on the nature of the request, your request will be fulfilled within a maximum of thirty days. However, if the process requires an additional cost, a fee may be charged to you according to the tariff determined by the Personal Data Protection Board.
To benefit from your right to apply as a personal data owner, your application must be made in Turkish, following the procedures and principles for applying to the Data Controller according to the Communique on the Procedures and Principles of Application to the Data Controller. In written applications, the date of delivery of the document to FORTE is considered as the application date. In applications made through other methods, the date the application reaches FORTE is considered as the application date.
As a personal data owner, if your application is rejected, the response is found insufficient, or if there is no response to the application within the specified period, you can file a complaint with the Personal Data Protection Board within thirty days from the date you learned about FORTE's response and, in any case, within sixty days from the application date.
- In which cases can you not assert your rights as a personal data owner?
Personal data owners cannot assert their rights regarding the matters listed in Article 28 of the KVKK since these matters are excluded from the scope of the KVKK. It is not possible for personal data owners to assert their rights in these matters as mentioned in item 1.
- Processing of personal data for research, planning, and statistical purposes by anonymizing personal data through official statistics.
- Processing of personal data for artistic, historical, literary, or scientific purposes or for freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, the privacy of private life, or personal rights, and does not constitute a crime.
- Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized and authorized by law to ensure national defense, national security, public security, public order, or economic security.
- Processing of personal data by judicial authorities or enforcement authorities regarding investigation, prosecution, trial, or execution processes.
According to Article 28/2 of the KVKK, personal data owners cannot assert their rights except for the right to demand compensation for damages in the following cases listed below:
- When personal data processing is necessary for the prevention of a crime or for the investigation of crimes.
- Processing of personal data that has been made public by the data subject.
- Processing of personal data by public institutions and organizations authorized and authorized by law for the performance of their duties and powers, within the scope of inspection or regulatory duties and in connection with disciplinary investigation or prosecution.
- Processing of personal data for purposes related to budget, tax, and financial matters to protect the economic and financial interests of the State.
- How should you make your application as a personal data owner?
In line with your rights mentioned in item 1 above, you can apply by filling out the form on the FORTE website at https://www.forte.com.tr/kvkk. Choose one of the methods below when making your application:
Application Method Address for Application Submission Information to be Specified in Application Submission In-Person Application (Applicant personally comes with identity document) Mustafa Kemal Mahallesi 2123. Cad. Cepa Sitesi Alışveriş Merkezi No:2/501 Çankaya/Ankara Write "Request for Information under the Personal Data Protection Law" on the envelope. Notarized Delivery Mustafa Kemal Mahallesi 2123. Cad. Cepa Sitesi Alışveriş Merkezi No:2/501 Çankaya/Ankara Write "Request for Information under the Personal Data Protection Law" on the notarized envelope Via E-mail kvkk@forte.com.tr Write "Request for Information under the Personal Data Protection Law" in the subject of the e-mail. Via Registered Electronic Mail (KEP) with a "secure electronic signature" fortebilgi@hs02.kep.tr Write "Request for Information under the Personal Data Protection Law" in the subject of the e-mail. If you do not apply in person as the data subject, the original of the power of attorney specifically issued on behalf of the person who will apply by the data subject must be submitted during the application.
- How is the process of responding to your applications?
As a data subject, if you submit your request to FORTE following the procedure specified in item 3, FORTE will conclude the relevant request as soon as possible and at the latest within thirty days, depending on the nature of the request.
In accordance with the second paragraph of Article 13 of the KVKK, your applications submitted to us are answered free of charge within 30 (thirty) days from the date your request reaches us, depending on the nature of the request. However, if a written response is given, a processing fee of 1 Turkish Lira may be charged for each page exceeding ten pages. The fee that may be requested by FORTE for responding in a recording medium such as a CD or a storage device cannot exceed the cost of the recording medium. Our responses are delivered to you in writing or electronically in accordance with the provision of Article 13 of the relevant Personal Data Protection Law.
FORTE may request information from the relevant person to determine whether the applicant is the data subject and may ask the data subject questions related to the application.
Upon clarification of the request, the relevant unit evaluates to what extent your request will be fulfilled. FORTE may partially fulfill your request by taking necessary administrative and technical measures in accordance with its legal obligations to obtain personal data in a manner consistent with the purpose of acquisition. However, in any case, personal data will be destroyed within 180 days after FORTE's legal obligations requiring the retention of personal data cease.
FORTE may reject the application of the applicant with an explanation of the reason in the following cases:
- Processing of personal data for research, planning, and statistical purposes by anonymizing personal data through official statistics.
- Processing of personal data for artistic, historical, literary, or scientific purposes or for freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, the privacy of private life, or personal rights, and does not constitute a crime.
- Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized and authorized by law to ensure national defense, national security, public security, public order, or economic security.
- Processing of personal data by judicial authorities or enforcement authorities regarding investigation, prosecution, trial, or execution processes.
- When personal data processing is necessary for the prevention of a crime or for the investigation of crimes.
- Processing of personal data that has been made public by the data subject.
- Processing of personal data by public institutions and organizations authorized and authorized by law for the performance of their duties and powers, within the scope of inspection or regulatory duties and in connection with disciplinary investigation or prosecution.
- Processing of personal data for purposes related to budget, tax, and financial matters to protect the economic and financial interests of the State.
- Possibility of the applicant's request to hinder the rights and freedoms of other individuals.
- Making requests that require disproportionate effort.
- The information requested is public information.
In accordance with the Constitution of the Republic of Turkey, international agreements related to human rights, and the Law on the Protection of Personal Data No. 6698 ("Law"), this information note is provided by Forte Information Communication Technologies and Defense Industry Inc. ("FORTE" or "Company"), acting as the data controller, regarding the processing of personal data processed or may be processed.
- Purpose of Processing Your Personal Data
Your personal data will be processed within the framework of the employee candidate-employer candidate relationship between our institution and you, in compliance with the limits set by the Law on the Protection of Personal Data No. 6698 ("KVKK"), for the following purposes:
- Execution of Employee Candidate / Intern / Student Selection and Placement Processes,
- Execution of Job Applicant Application Processes,
- Conducting Activities in Compliance with Legislation,
- Conducting Financial and Accounting Affairs,
- Execution of Communication Activities,
- Planning Human Resources Processes,
- Conducting / Auditing Business Activities,
- Execution of Occupational Health and Safety Activities.
- Processed Personal Data
Under the Law on the Protection of Personal Data No. 6698 ("KVKK"), some of your personal data is processed. These categorical personal data are as follows:
- Identity
- Contact
- Personnel
- Physical Space Security
- Finance
- Professional Experience
- Visual and Auditory Records
- Health Information
- Other - could be considered as a Signature.
- Method of Collection and Legal Reasons for Processing Your Personal Data
KYour personal data is collected verbally, in writing, and electronically; during the execution of our activities as FORTE, in full compliance with regulations, company policies, and obligations assumed, to ensure compliance. Your personal data is acquired based on legal reasons such as those envisaged in the laws, fulfillment of legal obligations of our company, establishment of rights arising from the law, obtaining explicit consent for special categories of personal data, and the legitimate interests of the data controller.
- Transfer of Your Personal Data
Processed personal data, in accordance with the fundamental principles envisaged by the Law and the personal data processing conditions specified in Article 8 of the Law, is shared with authorized public institutions and organizations (Ministry of National Defense) within the framework of the purposes stated in the "Purpose of Processing Personal Data" section of this information note, in compliance with legislation and company policies, provided that there is an existing employment contract relationship, and explicit consent is obtained for special categories of personal data.
- Security Measures Taken and Destruction of Personal Data
We apply legal, administrative, and technical measures prescribed by the Law to protect your personal data, and we take all necessary measures within the scope of Articles 4 and 12 of the Law in processing this data. Your personal data is destroyed in the first periodic destruction process (6 months) after the legal storage obligations cease and after our legitimate interests that are not contrary to the law cease.
- Rights of the Data Subject under the Law
In accordance with Article 11 of the Law, you have the following rights regarding your personal data:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request correction of your personal data if it is incomplete or incorrectly processed and request notification of this correction to third parties to whom your personal data has been transferred,
- Request the deletion or destruction of your personal data in case the reasons requiring its processing cease to exist, despite being processed in accordance with the law and other relevant laws, and request notification of this deletion to third parties to whom your personal data has been transferred,
- Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
- Request compensation in case you suffer damage due to the unlawful processing of your personal data.
In accordance with Article 13, Paragraph 1 of the Law, you can use your rights mentioned above and make other requests by presenting your identity and address in a clear and identifiable manner, in accordance with the "Regulation on the Procedures and Principles of Application to the Data Controller." You can submit your written and wet-signed applications to our company by registered mail or notary. Requests must include clear and understandable information about the subject of the request, be related to you personally, or, if acting on behalf of someone else, you must be specifically authorized and this authorization must be documented. The applications made to us will be responded to in writing or electronically within 30 days at the latest from the date the request reaches us.