Privacy Policy

Data Controller Uşaklıgil İnşaat Tel Örme Çit Sanayi ve Ticaret A.Ş (hereinafter referred to as the “Company”).

As the Company, we attach great importance to the processing of our customers’ and employees’ data in accordance with the law. With this Personal Data Protection and Processing Notice (“Notice”), we aim to comply with national and international legislation in force, primarily the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”).

To ensure the secure storage of our customers’ personal data and to prevent any unlawful access or leakage, we share customer data only at a minimum level with reliable business and solution partners, suppliers, and authorized persons/institutions, and we take security measures in compliance with the applicable legislation.

Our aim, pursuant to Article 10 of the KVKK and in line with your satisfaction, is to inform you in the most transparent manner regarding how your personal data is collected, the purposes of processing, the parties with whom it is shared, the legal reasons, and your rights.

Definitions

Explicit Consent: Consent that relates to a specific issue, is based on information, and is declared with free will.
Anonymization: Rendering personal data impossible to link with an identified or identifiable natural person, even when matched with other data.
Recipient Group: The category of natural or legal person to whom personal data is transferred by the data controller.
Data Subject (Concerned Person): The natural person whose personal data is processed.
KVKK (The Law): The Law on the Protection of Personal Data No. 6698.
Personal Data: Any information relating to an identified or identifiable natural person.
Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data registry system.
VERBIS: Data Controllers Registry Information System.

Data Categories and Processing by Person Group
A) Product or Service Buyers (Customers)

Data Category	Data Types	Processing Purposes (Summary)	Legal Basis
Identity	Name-Surname, DOB, Gender, TR ID No.	Finance, Communication, Legal Compliance, Sales Processes, Contract Management.	Contract execution, Legal obligation, Legitimate interest.
Contact	Email, Address, Phone No.	Finance, Communication, Logistics, After-sales support, Marketing.	Contract execution, Legal obligation, Legitimate interest.
Legal Action	Lawsuit files, notices, correspondence.	Legal follow-up, Risk management, Providing info to authorities.	Legal obligation, Establishment/protection of a right.
Customer Trans.	Invoices, Checks, Orders, Comments.	Supply chain, Accounting, Sales processes, Customer satisfaction.	Contract execution, Legal obligation, Legitimate interest.
Transaction Security	IP Address, Logs, User/Pass.	Information security, Auditing, Compliance.	Legal obligation, Legitimate interest.
Finance	Encrypted Credit Card info, IBAN, Risk info.	Accounting, Refunds, Sales, Risk management.	Contract execution, Legal obligation.
Physical Security	CCTV Recordings.	Security of premises, Prevention of crime.	Legal obligation, Legitimate interest.
Marketing	Shopping history, Cookies, Surveys.	CRM, Marketing analysis, Campaigns, Promotions.	Legitimate interest (or Explicit Consent where applicable).
Audio/Visual	Voice Recordings (Call center).	CRM, Quality assurance, Complaint management.	Legitimate interest.

Transfer of Data (Customers): Data may be transferred to subsidiaries, logistics companies (for delivery), banks (for payment), service providers (IT/Infrastructure), and authorized public institutions solely for the realization of the above purposes. Data is not transferred abroad pursuant to Article 9 of the Law.

B) Candidates (Job Applicants)

Data Category	Data Types	Processing Purposes (Summary)	Legal Basis
Identity	Name, TR ID, Marital Status, DOB, Signature.	Recruitment, HR Planning, Communication.	Contract (application), Legitimate interest.
Contact	Email, Address, Phone.	Recruitment, Communication.	Contract (application), Legitimate interest.
Personnel Info	Military status, References, CV, Work history.	Recruitment, HR Planning, Verification.	Contract, Legitimate interest, Explicit Consent (References).
Professional Exp.	Education, Diploma, Languages, Skills.	Assessment of suitability, HR Planning.	Contract, Legitimate interest.
Health	Disability status, Blood type, Health reports.	Assessment for specific roles, Occupational health.	Explicit Consent, Legal obligation.
Criminal Record	Criminal record / Archive record.	Assessment of suitability, Security.	Explicit Consent, Legal obligation.
Visual/Audio	Photographs (CV), Voice records.	Identification, Security.	Explicit Consent / Legitimate Interest.

Transfer of Data (Candidates): Shared with subsidiaries, business partners (recruitment platforms), and authorized institutions if legally required. Data is not transferred abroad.

C) Business Partner Officials and Employees

Data Category	Data Types	Processing Purposes	Legal Basis
Identity / Contact	Name, ID, Email, Phone, Business Card info.	Communication, Contract management, Commercial strategy.	Contract execution, Legal obligation, Legitimate interest.
Financial / Trans.	IBAN, Billing info, Request details.	Accounting, Risk management, Supply chain.	Contract execution, Legal obligation.
Legal Action	Correspondence, Lawsuits.	Legal follow-up, Dispute resolution.	Legal obligation, Establishment of a right.

D) Suppliers, Supplier Officials, and Employees

Data Category	Data Types	Processing Purposes	Legal Basis
Identity / Contact	Name, ID, Signature Circular, Email, Phone.	Procurement, Accounting, Compliance, Contract management.	Contract execution, Legal obligation, Legitimate interest.
Financial	Invoices, Bank Accounts, Current Accounts.	Accounting, Payments, Auditing.	Contract execution, Legal obligation.
Transaction Security	IP, Logs, User credentials (if using systems).	Information security, Auditing.	Legal obligation.

E) Visitors

Data Category	Data Types	Processing Purposes	Legal Basis
Identity	Name, ID No., Company represented.	Physical Security, Visitor logs.	Legitimate interest.
Physical Security	CCTV Recordings.	Security of premises, Crime prevention.	Legal obligation, Legitimate interest.
Vehicle Info	License Plate.	Security, Parking management.	Legitimate interest.
Connection	IP/MAC Address (if using Guest Wi-Fi).	Log management (Law 5651).	Legal obligation.

Principles of Processing Personal Data

We act in accordance with the following principles when processing your data:

Compliance with the law and rules of integrity.
Accuracy and being up to date.
Processing for specific, explicit, and legitimate purposes.
Being connected, limited, and measured concerning the purpose of processing.
Retention for the period stipulated in the relevant legislation or required for the purpose.
Use of Cookies and Digital Environments

We use technologies such as cookies, pixels, and gifs to improve your experience. For detailed information, please review our Cookie Policy at https://www.usakligiltelcit.com.tr.

Data obtained during your use of digital environments is processed to operate the site, improve user experience, track usage patterns, and ensure security.

Retention and Destruction of Personal Data

Our Company has established a Retention and Destruction Policy. If a period is determined for the storage of data in the KVKK or relevant laws, the data is stored for at least this period. If the purpose of processing ceases and there is no other legal basis, data is deleted, destroyed, or anonymized in accordance with our policy.

Rights of the Data Subject (Article 11)

As a data subject, you have the right to:

Learn whether your personal data is processed.
Request information if your personal data has been processed.
Learn the purpose of processing and whether it is used appropriately.
Know the third parties to whom data is transferred domestically or abroad.
Request correction of incomplete or incorrectly processed data.
Request the deletion or destruction of personal data within the framework of the conditions stipulated in the legislation.
Request notification of the correction, deletion, or destruction processes to third parties.
Object to a result against you arising from the analysis of data exclusively via automated systems.
Demand compensation for damages in case you suffer damage due to unlawful processing.

Application and Contact

You may submit your requests regarding your rights to us via the Data Subject Application Form:

By Post: Send a wet-signed copy via registered mail to:
- Address: Eyüp Sultan Mah. Osmangazi Caddesi No:146 Sancaktepe / İstanbul
By Email: Send to info@usakligiltelcit.com using a secure electronic signature (KEP) or from an email address previously registered in our system.
In Person: Apply personally with documents verifying your identity.

Your application will be answered within 30 days.

Data Security

We take reasonable technical and administrative measures to prevent unauthorized access, accidental data loss, and deliberate deletion. These measures include: