Personal Data Processing – Business Partner Acceptance Process Privacy Notice

1) Data Controller and Purpose of Processing

Pursuant to the Turkish Personal Data Protection Law No. 6698 (“Law No. 6698”) and, to the extent applicable, other relevant legislation, the personal data listed below may be processed by OCY Danışmanlık (“Company”) as the data controller within the scope described herein.

In accordance with Law No. 6698 and in its capacity as Data Controller, your personal data will be processed, stored, updated, and, where permitted by law, transferred to third parties in a limited and proportionate manner for the purposes described on this page.

2) Recipients and Purpose of Sharing Your Personal Data

Your personal data may be processed to manage job application processes, communicate regarding inquiries submitted to us, track requests and complaints, conduct events and training activities, and maintain associated business processes, all within the framework of privacy principles. Additionally, personal data may be processed for legal obligations and security purposes (e.g., website log records).

Processed personal data may be transferred to legally authorized public authorities, private entities, our group companies, business partners, and suppliers in line with the purposes and legal grounds of processing. Moreover, due to the use of office and email applications whose servers may be located abroad, your data may be transferred outside the country solely for server and storage services.

3) Methods of Personal Data Collection and Legal Grounds

Your personal data may be collected directly from you (e.g., job applications), through website usage (cookies, etc.), via telephone, messages, email, online training, or through verbal, written, or electronic channels.

The legal grounds for processing your personal data include:

• Explicitly provided for by law (e.g., maintaining log records),
• Necessary for establishing, exercising, or protecting a legal right (e.g., job applications),
• Legitimate interests of the Company, provided your fundamental rights and freedoms are not violated (e.g., cookies, online training).

4) Your Rights as a Data Subject 

You have the following rights regarding your personal data

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing and whether it is used appropriately,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of incomplete or inaccurate data,
• To request deletion or destruction of your personal data within the framework of KVKK regulations,
• To request notification to third parties to whom your personal data has been transferred when correction, deletion, or destruction is requested,
• To object to automated analysis that may result in a negative outcome for you, and
• To request compensation for any damages caused by unlawful processing of your personal data.

5) How to Exercise Your Rights

You can submit your applications and requests regarding your personal data via:

•The Data Subject Application Form,
•By sending an email from a registered and approved email address to info@ocydanismanlik.com.tr, or
•By personally submitting a signed application with a copy of your ID to:
Molla Yusuf Mahallesi 1448 Sokak Riverside 2 No 11 D No 9 Konyaaltı/Antalya, Turkey

Our company may request additional information from the applicant to verify their identity as a data subject and may ask questions to clarify the details of the application. Your requests will be evaluated and responded to as soon as possible, and no later than 30 days from the date the request reaches OCY Danışmanlık. Responses will be sent via postal or electronic mail, or by the method used for the request, where possible, either approving or explaining the reason for denial.