Group Riva shall be referred to as the “Company.” Your use of the Company website implies that you have read and accepted this Privacy Policy. This Privacy Policy is subject to change, just like the online medium itself. Links to other sites may be provided through the Company website. The Company is not responsible for the information on the sites accessed via these links. Personal information may also be used to contact the relevant user when deemed necessary. Despite all necessary precautions, the Company holds no responsibility if personal information is damaged or falls into the hands of third parties as a result of attack(s) on the Company’s web pages. The user(s) accept and declare that they will not hold the Company liable for such damages.
Third-Party Clarification Text and Explicit Consent Declaration Regarding the Protection of Personal Data The Company, in its capacity as the data controller, hereby informs you that your personal data obtained in the ways specified below:
-
Within the scope of our commercial relations or our business relationship with you;
-
Within the framework of the purpose requiring processing and in a connected, limited, and measured manner with this purpose;
-
By maintaining the accuracy and most up-to-date version of the personal data as reported to us;
-
Will be recorded, stored, preserved, reorganized, shared with institutions legally authorized to request such personal data, and transferred to third parties domestically or abroad under the conditions stipulated by the Law on the Protection of Personal Data No. 6698 (KVKK), and may be classified and processed in other ways listed in the KVKK.
Processed Personal Data
We may process personal data provided to us by employees regarding themselves. Examples of personal data that may be subject to processing include:
-
Identity Data: Name, surname, date of birth, country of birth, city of birth, gender, marital status, nationality, T.C. identity card details (TR ID No, serial no, wallet no, parents’ names, place of birth, province, district, neighborhood, volume no, family row no, row no, household no, page no, registration no, place of issue, reason for issue, date of issue, previous surname), and a copy of the identity card.
-
Contact Data: Phone number, full address information, e-mail address, internal communication information (extension number, corporate e-mail address).
-
Financial Data: Financial and salary details, payrolls, bonus entitlements, bonus amounts, file and debt information regarding execution proceedings, bank passbook, minimum living allowance information, private health insurance amount.
-
Education Data: Educational status, certificate and diploma information, foreign language skills, training and skills, CV, courses attended.
-
Visual and Audio Data: Photographs of the natural person, voice recordings, camera recordings.
We inform you that your identity, address, contact, visual, audio, and other personal data may be processed by the Company as the data controller or by data processors authorized by the Company by taking necessary security measures; for purposes of fulfilling the contract, ensuring security within the Company, Company administration, conduct of business, implementation of company policies, and meeting legislative requirements. This processing will be compliant with the general principles stated in KVKK Art. 4, primarily the principle of being preserved for the period stipulated in the legislation or required for the purpose for which they are processed; they may be obtained, recorded, stored securely in physical or electronic environments for the appropriate duration, maintained, changed, reorganized, disclosed in accordance with the legislation, transferred domestically or abroad, taken over, classified, processed, or the use of data may be prevented.
We inform you that these personal data may be transferred by the Company, strictly limited to the purposes mentioned above, to Company employees, officials, group companies (Company and/or business partners, shareholders), legally authorized public institutions and organizations, independent audit companies within the framework of legal obligations and limitations, and to business partners and service providers from whom the Company receives services or works with to carry out services and/or activities.
Your Rights
Pursuant to KVKK Art. 11, provided that you prove your identity to us in person, you may:
-
Learn whether we process personal data about you and request information if we do.
-
Learn the purpose of processing your personal data and whether they are used in accordance with that purpose.
-
Learn whether your personal data is transferred domestically or abroad and to whom.
-
Request the correction of incorrect or incomplete personal data and the notification of recipients to whom this data may have been transferred.
-
Request the destruction (deletion, destruction, or anonymization) of your personal data within the framework of the conditions stipulated in KVKK Article 7. However, we will evaluate your destruction request to determine which method is appropriate based on the specific circumstances. You can always request information from us regarding why we chose a particular destruction method.
-
Request that third parties to whom your personal data has been or may be transferred be informed of your destruction request.
-
Object to the results of personal data analysis created exclusively using an automated system if these results are against your interests.
-
Request compensation for damages if you incur a loss due to the unlawful processing of your personal data.
Your requests will be finalized free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, the fee in the tariff determined by the Personal Data Protection Board may be charged.
You may submit your application regarding the processing of your personal data by filling out the application form on the Company’s website or by following the conditions in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller:
-
In writing and signed
-
Via e-mail from your registered electronic mail (KEP) address
-
With a secure electronic signature or mobile signature
To facilitate your application, you can fill out the application form and send your request to us through any of the options mentioned above. Depending on the nature of your request and your application method, we may request additional verifications (such as sending a message to your registered phone or calling you) to determine whether the application belongs to you and thus protect your rights.
I accept and declare that the personal data I have shared with the Company is accurate and up-to-date; that I will notify the Company of any changes to this information; that I give my explicit consent to the processing of my relevant personal data, including special categories of personal data as defined in the KVKK, to be used and shared limited to the purpose of processing within the scope of the relevant process, and to be stored for the required period; and that I have been provided with the necessary clarification on this matter and that I have read and understood this text.
Last Updated: 01/04/2020