| CATEGORIES | PURPOSES | DURATIONS | PERSON GROUPS | FOREIGN COUNTRIES | SECURITY | RECIPIENTS |
| Identity |
Implementation of Emergency Management Processes Implementation of Information Security Processes Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Implementation of Employee Satisfaction and Commitment Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Implementation of Audit / Ethical Activities Implementation of Training Activities Management of Access Permissions Implementation of Activities in Compliance with Legislation Management of Finance and Accounting Operations Provision of Physical Space Security Implementation of Assignment Processes Monitoring and Execution of Legal Matters Implementation of Internal Audit / Investigation / Intelligence Activities Implementation of Communication Activities Planning of Human Resources Processes Implementation / Supervision of Work Activities Implementation of Occupational Health / Safety Activities Collection and Evaluation of Suggestions for Improvement of Work Processes Implementation of Business Continuity Activities Implementation of Logistics Activities Implementation of Goods / Services Procurement Processes Implementation of Post-Sales Support Services for Goods / Services Implementation of Sales Processes for Goods / Services Implementation of Goods / Services Production and Operations Processes Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Organisation and Event Management Implementation of Marketing Analysis Studies Implementation of Risk Management Processes Implementation of Storage and Archiving Activities Implementation of Contract Processes Implementation of Strategic Planning Activities Tracking of Requests / Complaints Ensuring the Safety of Moveable Goods and Resources Implementation of Supply Chain Management Processes Implementation of Salary Policy Implementation of Marketing Processes for Products / Services Ensuring the Security of Data Controller Operations Implementation of Talent / Career Development Activities Providing Information to Authorized Persons, Institutions, and Organizations Implementation of Management Activities Creation and Tracking of Visitor Records |
10 |
Employee Shareholder/Partner Intern Supplier Employee Supplier Representative Visitor |
Transferring |
1- Network security and application security are provided. 2- A closed system network is used for personal data transfers through the network. 3- Key management is applied. 4- Security measures related to the procurement, development, and maintenance of information technology systems are taken. 5- The security of personal data stored in the cloud is ensured. 6- Disciplinary regulations containing data security provisions for employees are in place. 7- Training and awareness activities on data security are periodically conducted for employees. 8- A rights matrix has been established for employees. 9- Access logs are kept regularly. 10- Corporate policies regarding access, information security, usage, storage, and destruction have been prepared and implemented. 11- Confidentiality agreements are signed. 12- Authorisations of employees who change roles or leave the company are revoked. 13- Up-to-date anti-virus systems are used. 14- Firewalls are used. 15- Signed contracts contain data security provisions. 16- Policies and procedures for personal data security have been established. 17- Issues regarding personal data security are reported promptly. 18- Monitoring of personal data security is performed. 19- Necessary security measures regarding access to physical environments containing personal data are taken. 20- The security of physical environments containing personal data against external risks (fire, flood, etc.) is ensured. 21- The security of environments containing personal data is provided. 22- Personal data is minimized as much as possible. 23- Personal data is backed up, and the security of backed-up personal data is ensured. 24- User account management and permission control systems are in place, and their monitoring is also conducted. 25- Periodic and/or random audits are conducted and monitored within the institution. 26- Log records are kept in a manner that does not allow user intervention. 27- Existing risks and threats have been identified. 28- Protocols and procedures for the security of sensitive personal data have been established and implemented. 29- Intrusion detection and prevention systems are used. 30- Penetration testing is conducted. 31- Cybersecurity measures have been taken and their implementation is continuously monitored. 32- Encryption is performed. 33- Sensitive personal data transferred on portable memory devices, CDs, DVDs is encrypted. 34- Awareness of service providers processing data regarding data security is ensured. 35- Data loss prevention software is used. |
1- Shareholders 2- Business Partners 3- Subsidiaries and affiliated companies 4- Suppliers 5- Authorized Public Institutions and Organizations |
| Communication |
Implementation of Emergency Management Processes Implementation of Information Security Processes Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Implementation of Employee Satisfaction and Commitment Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Implementation of Training Activities Management of Access Permissions Implementation of Activities in Compliance with Legislation Management of Finance and Accounting Operations Management of Company / Product / Services Loyalty Processes Provision of Physical Space Security Implementation of Assignment Processes Monitoring and Execution of Legal Matters Implementation of Communication Activities Planning of Human Resources Processes Implementation / Supervision of Work Activities Implementation of Occupational Health / Safety Activities Implementation of Business Continuity Activities Implementation of Logistics Activities Implementation of Goods / Services Procurement Processes Implementation of Post-Sales Support Services for Goods / Services Implementation of Sales Processes for Goods / Services Implementation of Goods / Services Production and Operations Processes Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Organisation and Event Management Implementation of Marketing Analysis Studies Implementation of Performance Evaluation Processes Implementation of Advertising / Campaign / Promotion Processes Implementation of Risk Management Processes Implementation of Storage and Archiving Activities Implementation of Contract Processes Implementation of Strategic Planning Activities Tracking of Requests / Complaints Ensuring the Safety of Moveable Goods and Resources Implementation of Supply Chain Management Processes Implementation of Salary Policy Implementation of Marketing Processes for Products / Services Ensuring the Security of Data Controller Operations Implementation of Investment Processes Providing Information to Authorized Persons, Institutions, and Organizations Implementation of Management Activities Creation and Tracking of Visitor Records |
10 |
Candidate Employee Employee Shareholder/Partner Potential Product or Service Recipient Intern Supplier Employee Supplier Representative Person Receiving Products or Services Visitor |
Transferring | ||
| Location |
Implementation of Emergency Management Processes Implementation of Information Security Processes Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Implementation of Employee Satisfaction and Commitment Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Implementation of Training Activities Management of Access Permissions Implementation of Activities in Compliance with Legislation Management of Finance and Accounting Operations Provision of Physical Space Security Implementation of Assignment Processes Implementation of Communication Activities Planning of Human Resources Processes Implementation / Supervision of Work Activities Implementation of Occupational Health / Safety Activities Implementation of Business Continuity Activities Implementation of Logistics Activities Implementation of Goods / Services Procurement Processes Implementation of Post-Sales Support Services for Goods / Services Implementation of Sales Processes for Goods / Services Implementation of Goods / Services Production and Operations Processes Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Organisation and Event Management Implementation of Storage and Archiving Activities Implementation of Contract Processes Ensuring the Safety of Moveable Goods and Resources Implementation of Salary Policy Implementation of Marketing Processes for Products / Services Ensuring the Security of Data Controller Operations Implementation of Investment Processes Providing Information to Authorized Persons, Institutions, and Organizations Implementation of Management Activities Creation and Tracking of Visitor Records |
10 |
Candidate Employee Employee Shareholder/Partner Potential Product or Service Recipient Intern Supplier Employee Supplier Representative Person Receiving Products or Services Visitor |
Transferring | ||
| Personnel |
Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Planning of Human Resources Processes Implementation of Storage and Archiving Activities Implementation of Salary Policy |
10 |
Employee Intern Supplier Employee |
Not Transferred | ||
| Legal Process | Monitoring and Execution of Legal Matters | 10 |
Employee Shareholder/Partner Intern Supplier Representative Person Receiving Products or Services |
Not Transferred | ||
| Customer Process |
Implementation of Information Security Processes Implementation of Employee Satisfaction and Commitment Processes Management of Access Permissions Management of Finance and Accounting Operations Monitoring and Execution of Legal Matters Implementation of Communication Activities Implementation of Occupational Health / Safety Activities Implementation of Logistics Activities Implementation of Post-Sales Support Services for Goods / Services Implementation of Sales Processes for Goods / Services Implementation of Goods / Services Production and Operations Processes Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Implementation of Marketing Analysis Studies Implementation of Advertising / Campaign / Promotion Processes Implementation of Storage and Archiving Activities Implementation of Contract Processes Tracking of Requests / Complaints Implementation of Marketing Processes for Products / Services Ensuring the Security of Data Controller Operations Creation and Tracking of Visitor Records |
10 |
Employee Shareholder/Partner Person Receiving Products or Services |
Transferring | ||
| Physical Space Security |
Implementation of Emergency Management Processes Implementation of Information Security Processes Implementation of Storage and Archiving Activities Creation and Tracking of Visitor Records |
10 |
Candidate Employee Employee Shareholder/Partner Potential Product or Service Recipient Intern Supplier Employee Supplier Representative Person Receiving Products or Services Visitor |
Not Transferred | ||
| Process Security |
Implementation of Emergency Management Processes Implementation of Information Security Processes Management of Access Permissions Management of Finance and Accounting Operations Provision of Physical Space Security Implementation of Communication Activities Planning of Human Resources Processes Implementation / Supervision of Work Activities Implementation of Logistics Activities Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Implementation of Contract Processes Tracking of Requests / Complaints |
10 |
Employee Intern Supplier Employee Person Receiving Products or Services |
Not Transferred | ||
| Professional Experience |
Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Implementation of Employee Satisfaction and Commitment Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Implementation of Training Activities Planning of Human Resources Processes Implementation of Performance Evaluation Processes Implementation of Talent / Career Development Activities |
10 |
Candidate Employee Employee Intern Supplier Employee |
Not Transferred | ||
| Marketing |
Implementation of Information Security Processes Management of Access Permissions Implementation of Sales Processes for Goods / Services Implementation of Marketing Analysis Studies Implementation of Advertising / Campaign / Promotion Processes |
10 |
Employee Supplier Employee |
Not Transferred | ||
| Visual and Auditory Records |
Implementation of Information Security Processes Implementation of Audit / Ethical Activities Management of Access Permissions Planning of Human Resources Processes Implementation / Supervision of Work Activities Implementation of Occupational Health / Safety Activities Implementation of Business Continuity Activities Implementation of Logistics Activities Implementation of Customer Relationship Management Processes Implementation of Activities for Customer Satisfaction Implementation of Advertising / Campaign / Promotion Processes Implementation of Storage and Archiving Activities Tracking of Requests / Complaints Ensuring the Security of Data Controller Operations |
10 |
Candidate Employee Employee Shareholder/Partner Potential Product or Service Recipient Intern Supplier Employee Supplier Representative Person Receiving Products or Services Visitor |
Not Transferred | ||
| Health Information |
Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Implementation of Employee Satisfaction and Commitment Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Implementation of Training Activities Planning of Human Resources Processes Implementation of Occupational Health / Safety Activities |
10 |
Employee Intern Supplier Employee |
Not Transferred | ||
| Criminal Conviction and Security Measures |
Implementation of Candidate / Intern / Student Selection and Placement Processes Implementation of Candidate Application Processes Fulfillment of Law and Obligations Derived from Legislation for Employees Implementation of Employee Benefits and Interests Processes Monitoring and Execution of Legal Matters |
10 |
Employee Supplier Employee |
Not Transferred |
SEÇİLDİ
PACKED
POMPALANDI
SEÇİLDİ
PACKED
Send
COLLECT
PACKAGE
SEND
COLLECT
PACKAGE
Send
SEÇİLDİ
PACKED
POMPALANDI