Purpose
The primary purpose of this Policy is to provide explanations on the systems adopted for the protection of personal data processed as a result of personal data processing activities carried out legally by DATASAFE ARCHIVING SERVICES INC., and to ensure transparency by informing all individuals whose personal data are processed by our company.
Scope
This Policy covers all personal data processed automatically or non-automatically as part of any data recording system of our company's employees, actual or potential customers, these customers' representatives, agents, partners or attorney, guardian, trustee or guarantors, supplier/subcontractor employees, employee family members, employee or intern candidates, third-party company employees, representatives or partners, visitors, campaign/contest participants, press members, official institution/organization representatives and other third parties.
- Our company adopts the following fundamental principles in the processing of personal data:
- Processing in accordance with the law and the rule of honesty
- Ensuring personal data are accurate and up-to-date when necessary
- Processing for specific, clear and legitimate purposes
- Being relevant, limited and measured with the purposes they are processed
- Retention for the period prescribed by legislation or necessary for the purpose for which they are processed
Conditions for the Processing of Personal Data, and its Transfer to Third Parties and Abroad
Explicit consent of the data subject is one of the legal bases that enables the lawful processing of personal data. Besides explicit consent, personal data can be processed if any of the other conditions listed below exist. The basis for the personal data processing activity can be only one of the conditions mentioned below, or more than one of these conditions.
- Clearly Stipulated by Laws
- Physical Impossibility of Obtaining the Explicit Consent of the Data Subject
- Directly Related to the Establishment or Performance of a Contract
- Fulfillment of Legal Obligations by Our Company
- Publicizing of Personal Data
- Necessity of Processing Data for the Establishment or Protection of a Right
- Data Processing Based on Legitimate Interest
Purpose of Processing Personal Data
Your personal data is processed by our company for the following purposes:
Ensuring the planning and execution of our company's human resources policies and processes
Ensuring the legal, technical and commercial-business security of our company and relevant persons who are in a business relationship with our company
Planning and executing the necessary activities to customize products and services offered by our company according to the preferences, usage habits and needs of relevant persons and to recommend and promote them to relevant persons
Conducting the necessary studies by our business units to make relevant persons benefit from the products and services offered by our company and executing the relevant business processes
Conducting the necessary studies by our business units for the realization of commercial and/or operational activities conducted by our company and executing the relevant business processes
Planning and/or executing the commercial and/or business strategies of our company�
Conditions for Processing Special Categories of Personal Data, and its Transfer to Third Parties and Abroad
A portion of the personal data is regulated separately as "special categories of personal data" and is subject to special protection. Due to the risk of victimization or discrimination when processed unlawfully, special importance is attributed to these data.
In the absence of explicit consent from the data subject:
Special categories of personal data other than the data subject's health and sexual life, can be processed in cases stipulated by laws,
Special categories of personal data relating to the data subject's health and sexual life can only be processed for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and its financing, by persons or authorized institutions and organizations under the obligation of confidentiality, and with adequate measures determined by the Personal Data Protection Board.
Purposes for Transferring Personal Data to Third Parties to Whom it is Transferred
Personal data can be transferred to the following categories of persons:
Legally Authorized Institutions,
Our Shareholders,
Our Business Partners,
Suppliers,
Official and Private Institutions with Whom Reference Sharing is Made.
The scope of the persons mentioned above to whom the data is transferred and the purposes of data transfer are indicated in the table below.