Employer; Pursuant to the Law on the Protection of Personal Data No. 6698, the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system has the title of data controller and has responsibilities under the law.
a. Obligation of Disclosure
It is obliged to protect the personal data of the personnel who are party to this contract and is obliged to inform about which personal data is processed for what purpose, how it is stored and the rights of the personnel in this regard. The disclosure text prepared by the employer within the scope of the law on the protection of personal data is included in the annex of this contract (Annex-1 Disclosure Text).
b. Explicit Consent
The employer, as stated in Article 5/2 of the Law No. 6698 (if it is clearly stipulated in the laws, it is compulsory for the protection of the life or bodily integrity of himself or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid, directly with the establishment or performance of a contract. Provided that it is relevant, it is necessary to process the personal data of the parties to the contract, it is necessary for the data controller to fulfill its legal obligations, it has been made public by the data subject himself, the data processing is mandatory for the establishment, use or protection of a right, harming the fundamental rights and freedoms of the data subject. data processing is mandatory for the legitimate interests of the data controller, provided that the data controller does not provide any of the reasons.) In the absence of any of the reasons, the personal data of the personnel can only be processed by obtaining the explicit consent of the personnel.
c. Obligations of the parties under the law
In order to prevent the unlawful processing of personal data and illegal access to personal data and to ensure the preservation of personal data, the parties are obliged to take all necessary technical and administrative measures to ensure the appropriate level of security, and to avoid acts that prevent each other from fulfilling their obligations under the aforementioned legislation. and is responsible for taking these measures.
The parties also agree, declare and undertake not to use each other on behalf of themselves or a third party to create, control, update, change a database, record or directory and to access the personal information of other members and download them to another system.
