ono
Request Demo

Company Employee Membership Privacy Notice

One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş.

Privacy Notice on the Processing of Personal Data

Company Employee Membership Form

As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. (“OneNewOne” or the “Company”), protecting the personal data we obtain while carrying out our processes is one of our primary priorities. We attach great importance to keeping your personal data secure and to using/processing it in compliance with the applicable legislation.

This privacy notice sets out how we process your personal data, in our capacity as data controller, within the membership activity we carry out through our website https://company.onenewone.com/register (the “Website“).

  1. Which personal data do we process, for which purposes and on which legal grounds?

Article 5 of the Law on the Protection of Personal Data (the “Law“) governs the legal grounds for processing personal data. Below we set out the purposes for which we process your personal data and the legal grounds we rely on for those purposes:

Data Processed Purposes of Processing Legal Ground for Processing
Identity (first name – surname)
Contact (telephone number, e-mail address)
Corporate Information (company name, brand name)
Transaction Security (password, IP address, log records of user transactions)
  • Carrying out membership, registration, activation and user verification processes for our website,
  • Conducting the service purchase requests directed to the Company and the related contract processes,
  • Carrying out the transactions relating to your request and collecting the payments where you submit a purchase request,
  • Carrying out the transactions relating to refund requests and making the refunds,
  • Conducting the processes for the goods and/or services supplied to the Company.
Law art. 5/2-(c)
Processing of personal data being necessary for the establishment or performance of a contract
Identity (first name – surname)
Contact (telephone number, e-mail address)
Corporate Information (company name, brand name)
Transaction Security (password, IP address, log records of user transactions)
Legal Proceedings (information in correspondence with judicial authorities, information in the case file)
  • Fulfilling our legal obligations where authorised institutions or organisations make a request to our Company or where notification to such institutions is required (for example, sharing your information where a public authority makes a request concerning a transaction suspected of being unlawful).
Law art. 5/2-(ç)
Fulfilment of our legal obligations.
  • Protecting and exercising our rights and conducting legal proceedings in the event of a possible legal dispute.
Law art. 5/2-(e)
Processing being mandatory for the establishment, exercise or protection of a right.
Identity (first name – surname)
Contact (telephone number, e-mail address)
Corporate Information (company name, brand name)
Transaction Security (password, IP address, log records of user transactions)
  • Carrying out sign-in processes where you sign in to the website,
  • Integrating open positions into the site and directing data subjects to suitable positions by taking their characteristics and qualifications into account,
  • Retaining the information of the person acting as a reference where a reference is provided for candidate employees, and sharing it with employer parties and authorised persons where necessary,
  • Receiving and resolving your suggestions, requests and complaints,
  • Carrying out activities aimed at customer satisfaction,
  • Carrying out activities to develop and improve our products, services and processes,
  • Conducting communication activities with our suppliers, business partners and customers,
  • Reporting, auditing and reviewing our business processes.
Law art. 5/2-(f)
Processing being mandatory for our legitimate interests, provided that it does not harm the data subject’s fundamental rights and freedoms.
  1. With whom and for which purposes do we share your personal data?

Your personal data is shared with third parties in compliance with the rules on the transfer of personal data set out in the Law and the relevant legislation. The parties with whom we share data and the purposes of sharing are as follows:

  • Authorised Institutions and Organisations: Fulfilling our legal obligations where they request information or documents from our Company or where notification to such institutions is required.
  • Suppliers and Business Partners: Obtaining support from suppliers providing information technology infrastructure, products and services in order to fulfil the purposes set out under the heading “1. Which personal data do we process, for which purposes and on which legal grounds?” above (for example, obtaining cloud computing services to store data in a cloud environment).

Your personal data is transferred by OneNewOne in accordance with the rules set out in Articles 8 and 9 of the Law, limited to the purposes and parties stated above. Where your personal data is to be transferred abroad, OneNewOne acts in accordance with the rules set out in Article 9 of the Law and takes the administrative and technical measures necessary to ensure that your personal data is processed securely by third parties and in accordance with this Notice.

  1. Through which channels do we collect your personal data?

When you visit our website and carry out transactions on it, we collect your personal data through our sites by automated and partly automated means.

  1. How can you exercise your rights regarding your personal data?

Article 11 of the Law on the Protection of Personal Data governs the rights of data subjects. Under this article, you have the following rights:

  • To learn whether your personal data is being processed,
  • To request information if your personal data has been processed,
  • To learn the purpose of the processing of your personal data and whether it is used in accordance with that purpose,
  • To know the third parties in Türkiye or abroad to whom your personal data is transferred,
  • To request the rectification of your personal data if it has been processed incompletely or inaccurately, and to request that the action taken in this respect be notified to the third parties to whom your personal data has been transferred,
  • To request the erasure or destruction of your personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the Law and other applicable legislation, and to request that the actions taken in this respect — and, where your personal data has been processed incompletely or inaccurately, the actions taken in that respect — be notified to the third parties to whom your personal data has been transferred,
  • To object to an adverse result arising against you from the analysis of your processed data exclusively by automated systems,
  • To claim compensation for the damage in the event that you suffer damage due to the unlawful processing of your personal data.

You may use the following methods to submit your requests concerning the rights set out above to the Company: