One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş.

Clarification Text on the Processing of Personal Data

Company Employee Membership Form

 

As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. (“OneNewOne” or “Company”), the protection of your personal data obtained during the execution of our processes is one of our primary priorities. We attach great importance to ensuring the security of your personal data and its use/processing in accordance with the legislation.

This clarification text contains information on how we process your personal data in our capacity as a data controller through the membership activities carried out via our website https://company.onenewone.com/register (“Website”).

1. Which personal data we process, for which purposes, and on which legal grounds

Article 5 of the Law on the Protection of Personal Data (“Law”) regulates the legal grounds for processing personal data. Below, we have listed the purposes for which we process your personal data and the legal grounds we rely on within the scope of these purposes:

Processed Data	Data Processing Purposes	Legal Basis for Data Processing
·      Identity (name – surname) ·      Contact (phone number, e-mail address) ·      Corporate Information (Company name, Brand name) ·      Transaction Security (password, IP address, log records regarding user transactions)	•          Execution of membership, registration, activation, and user verification processes for our website, •          Execution of service purchase requests and contract processes directed to the Company, •          Execution of transactions related to your request and fulfillment of fee payments when you make a purchase request, •          Execution of transactions related to refund requests and fulfillment of fee refunds, •          Execution of the processes for goods and/or services provided to the Company.	Law Art. 5/2-(c) Personal data processing is necessary for the establishment or performance of a contract
·      Identity (name – surname) ·      Contact (phone number, e-mail address) ·      Corporate Information (Company name, Brand name) ·      Transaction Security (password, IP address, log records regarding user transactions) ·      Legal Action (information in correspondence with judicial authorities, information in the lawsuit file)	Fulfillment of our legal obligations in cases where authorized institutions or organizations make a request from our Company or where notification to these institutions is foreseen (for example, sharing your information in case a public institution makes a request regarding a transaction suspected of being unlawful).	Law Art. 5/2-(ç) Fulfillment of our legal obligations.
	Protection and exercise of our rights and the conduct of legal processes in the event of a possible legal dispute.	Law Art. 5/2-(e) Data processing is mandatory for the establishment, exercise, or protection of a right.
·      Identity (name – surname) ·      Contact (phone number, e-mail address) ·      Corporate Information (Company name, Brand name) ·      Transaction Security (password, IP address, log records regarding user transactions)	Performing login procedures if you log in to the website, Integrating open positions into the site and providing redirection by evaluating relevant individuals within the framework of their characteristics and qualifications for suitable positions, If a reference is provided for employee candidates, maintaining the information of the person providing the reference and sharing it with employer parties and authorized persons when necessary, Receiving and concluding your suggestions, requests, and complaints, Carrying out studies for customer satisfaction, Carrying out studies for the development and improvement of our products, services, and processes, Conducting communication activities with our suppliers, business partners, and customers, Reporting, auditing, and reviewing our business processes.	Law Art. 5/2(f) Data processing is mandatory for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.

 

1. With whom and for what purposes do we share your personal data?

Your personal data is shared with third parties in accordance with the rules regarding the transfer of personal data in the Law and relevant legislation. The parties with whom we share data and the purposes of sharing are as follows:

• Authorized Institutions and Organizations: Fulfillment of our legal obligations in cases where information or documents are requested from our Company or where notification to these institutions is foreseen.

 

• Suppliers and Business Partners: Receiving support from suppliers providing information technology infrastructure, products, and services to fulfill the purposes specified under the heading “Which personal data we process, for which purposes, and on which legal grounds” above (for example, receiving cloud computing services for storing data in the cloud).

 

Your personal data is transferred by OneNewOne in accordance with the rules stipulated in Articles 8 and 9 of the Law, limited to the purposes and parties stated above. In the event that your personal data is to be transferred abroad, OneNewOne acts in accordance with the rules stipulated in Article 9 of the Law and takes the necessary administrative and technical measures to ensure that your personal data is processed securely by third parties and in accordance with this Text.

1. How do we collect your personal data?

When you visit our website and perform transactions on the site, we collect your personal data through our sites using automatic and semi-automatic methods.

1. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data regulates the rights of data subjects. Pursuant to this article, you have the following rights:

• To learn whether your personal data is processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred at home or abroad,
• To request correction of your personal data if it is incomplete or incorrectly processed and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data in the event that the reasons requiring processing cease to exist despite having been processed in accordance with the Law and other relevant legal provisions, and to request notification of the transactions made within this scope and in case of incomplete or incorrect processing to the third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
• To demand compensation for damages in case you suffer damage due to unlawful processing of your personal data.

To submit your requests regarding your rights mentioned above to the Company, you may choose the following methods:

• You can send an e-mail to info@onenewone.com via your e-mail address registered in our systems,
• You may also choose other methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.