Personal Data Protection

Saha Metal is the “Data Controller” under the KVKK and related regulations; you can reach us using the contact details below.

Address

Dağyaka Mahallesi 1057. Cadde No:5 Kahramankazan / Ankara, Türkiye

Phone

+90 312 267 36 72

Fax

+90 312 267 42 05

Registered e-mail (KEP)

sahametal@hs01.kep.tr

Within the scope of your relationship with Saha Metal, the following personal data is processed:

Personal data obtained within the scope of your relationship with Saha Metal is processed for the following purposes:

• Managing job applicants’ application processes
• Fulfilling employment-contract and legal obligations towards employees
• Managing employee fringe benefits
• Carrying out finance and accounting work
• Ensuring the security of physical premises
• Managing contract processes
• Managing human resources processes
• Managing occupational health and safety processes
• Customer relationship management
• Carrying out customer satisfaction activities
• Carrying out management activities

Under the provisions of the Law on the transfer of personal data, including transfers abroad, and for the purposes set out in Section 3 of this Privacy Notice, your personal data may be transferred to public authorities and institutions in Türkiye and abroad, courts and enforcement offices, third-party natural and legal persons we are associated with, service providers and their representatives, banks, our Company’s shareholders, suppliers and support service providers.

• Public authorities and institutions
• Courts and enforcement offices
• Associated third-party natural and legal persons
• Service providers and their representatives
• Banks
• Company shareholders
• Suppliers and support service providers

Your personal data is collected from you, from third parties and from legal authorities when your legal relationship with Saha Metal is established and throughout that relationship, via the internet, telephone and e-mail and through physical, written, verbal and electronic channels; it is collected, stored and processed for the purposes above on the following legal grounds listed in Articles 5, 6 and 8 of the Law:

1. Your explicit consent,
2. It being expressly provided for in the legislation our Company is subject to, including the Labour Law, the Occupational Health and Safety Law, the Social Insurance and General Health Insurance Law, the Code of Obligations, the Tax Procedure Law, the Turkish Commercial Code, the Identity Notification Law, the Income Tax Law, the Corporate Tax Law, the Cheque Law and the Private Pension Savings and Investment System Law,
3. Complying with national and international know-your-customer principles, and with the information retention, reporting and notification obligations set by legislation and public authorities,
4. Processing being necessary, provided it is directly related to the conclusion or performance of a contract, for personal data of the parties to the contract, to provide the requested products and services and to perform the contracts you have concluded,
5. Processing being necessary to fulfil a legal obligation,
6. The data having been made public by the data subject,
7. Processing being necessary to establish, exercise or protect a right,
8. Processing being necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

Special categories of personal data are collected, stored and processed on the following legal grounds:

1. Your explicit consent,
2. Personal data other than health data, without explicit consent in the cases provided for by law,
3. Health data only for the protection of public health, preventive medicine, medical diagnosis, treatment and care, and the planning and management of health services and their financing, by persons under a duty of confidentiality or by authorised institutions, without the explicit consent of the data subject.

Under Article 11 of the Law, you have the following rights regarding your personal data:

1. To learn whether your personal data is processed
2. To request information if it has been processed
3. To learn the purpose of processing and whether data is used in line with that purpose
4. To know the third parties in Türkiye or abroad to whom data is transferred
5. To request correction of incomplete or inaccurate data
6. To request deletion or destruction of your data
7. To request that corrections, deletions or destructions be notified to third parties the data was transferred to
8. To object to an adverse outcome arising from analysis of your data exclusively by automated systems
9. To claim compensation for damage caused by unlawful processing of your data