INVENTA PRIVACY POLICY

PREFACE

As İNVENTA PSİKOLOJİ, it is of great importance to protect the personal data.  We meticulously keep the information of anyone who has left us any personal data by contacting us in any way.  We took all required measures to ensure the protection of such classified information in the company.  You may proceed with us confidently knowing that all your personal data is kept in a safe environment with İNVENTA PSİKOLOJİ.

We will work at our best regarding your personal data, according to the Constitutional rights guaranteered by the Republic of Türkiye Constitution and its laws.  We hereby share the Privacy Policy of our company with you.

You can be sure that we will show utmost awareness to your suggestions for improvement, your applications, and possible complaints. .  You can contact us for all your doubts about your personal data. We will show the same sensitivity and utmost care in the protection of your personal data as in all our services.

Best regards,

İNVENTA PSİKOLOJİ

  1. Purpose

İNVENTA PSİKOLOJİ, (hereinafter referred to as İNVENTA ) until now, has kept all personal data with utmost secrecy due to the sensitivity of the job and never have shared this information with the third parties other than the intended purpose. Protection of the personal data is our fundamental policy.  Even before there was any legal regulation, our institution attached great importance to the privacy of personal data and adopted this as a working principle. As İNVENTA, we undertake to comply with all responsibilities brought by the Law on the Protection of Personal Data.

  1. Content and Alteration

This Policy, prepared by our institution, has been prepared in accordance with the Personal Data Protection Law No. 6698 (“PDPL”).  The law is in force with all its provisions as of today. The data obtained from you with your consent or due to other legal compliance conditions listed in the Law will be used to increase the quality of the services we provide andimprove our quality policy. Again, some of the data we have is depersonalized and anonymized. These data are used for statistical purposes and are not subject to the application of the Lawand our Policy.

İNVENTA Privacy Policy aims to protect the data obtained automatically of our customers, prospective customers, employees, customers and employees of companies working in solution partnership with us, or other persons, and includes regulations regarding these.

Our institution has the right to alter our policy, and Directive/Guideline in accordance with the Law, as long as this provides a better protection of the personal data.

  1. Basic Principles of the Processing of the Personal Data.
  2. Compliance with the law and good faith: İNVENTA questions the source of the data it collects or receives from other institutions and attaches importance to obtaining them in accordance with the law and within the framework of good faith.

 

  1. Being accurate and up-to-date when necessary: İNVENTA attaches importance to the fact that all data within the institution are accurate, not contain false information, and finally, if there is a change in personal data, they are updated if they are communicated to it.
  1. Processing for specific, explicit, and legitimate purposes: İNVENTA processes data only for the purposes it offers and for which it receives consent from individuals during the service. It does not process, use and make use of data other than for business purposes.

 

  1. Being relevant, limited and proportionate for the purpose for which they are processed: İNVENTA only uses the data for the purpose for which they are processed and to the extent required by the service.
  1. Being stored for the period laid down by relevant legislation or the period required for the purpose for which the personal data are processed.: INVENTA keeps the agreement related data, for a period of Legal Disputes and as long as Commercial and Tax Law requires. However, when these means are no longer in effect, İNVENTA either erases or anonymizes this data according to the Personal Data Erasure Directive.

We would like to emphasize that, whether İNVENTA has collected or processed the data on the basis of consent or in accordance with the law, these principles listed above still apply.

  1. Rights of the Data Subject Listed in Article 11 of the PDP Law

According to article 11 of the PDPL, you have the rights that listed below. In order to facilitate these rights, an application form has also been prepared for you by İNVENTA and presented to you on your website.

Persons whose personal data are processed, by applying to our contact announced on our website by İNVENTA, have rights listed below regarding their own data;

Learn whether their personal data is processed or not,

Request information, if personal data is processed,

Learn the purpose of processing personal data and whether they are used in accordance with its purpose,Learm about the third parties to whom personal data is transferred, in the country or abroad,Request correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

In the framework of the conditions stipulated in Article 7 of the PDP Law, although it has been processed in accordance with the provisions of the PDP Law and other relevant laws, in the event that the reasons requiring its processing cease to exist, to request the erasure or destruction of the personal data and to request the notification of the transaction made in this context to the third parties to whom the personal data has been transferred,

Object to the occurance of a result against the person him/herself by analyzing the processed data exclusively through automated systems,

If suffers due to the unlawful processing of the personal data, the person has the right to claim the compensation of this loss.  As İNVENTA, we respect these rights.

  1. Minimum Saving Policy/Tightness Policy

The data reaching INVENTA is processed into the system, as necessary under our Minimum Saving Policy or Tightness Policy.  For this reason, the data that we collect is determined based on the objective.  The unnecessary data is not collected. In the same way, the data that reach our institution is transferred to the information system.  The excess information is not recorded in our system; is either deleted or become anonymous. This data may be used for statistics.

  1. The erasure of Personal Data

Personal data is erased, destroyed or anonymized by our institution, automatically or upon the request of the data subject, when the periods required by law to be kept, the completion of judicial processes or other requirements are eliminated.

  1. Accuracy and Being up to date

As a rule, the data within İNVENTA is processed as declared by the data subject. İNVENTA is not obliged to investigate the accuracy of the data declared by customers or persons contacting İNVENTA, and this is not done legally and due to our working principles. The declared data is considered correct.  The principle of accuracy and being up to date of personal data has also been adopted by İNVENTA. It updates the personal data that our institution has processed from the official documents it receives or upon the request of the data subject. It takes the necessary measures for this.

  1. Confidentiality and Data Security

Personal data is confidential and İNVENTA respects this confiedentiality. Personal data can only be accessed by the authorized personnel in the institution. Required technical and organizational measures are taken so that the personal data collected by İNVENTA does not fall into the hands of unouthorised persons and japordise the rights of the data subject.  In this framework, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the Privacy Policy is respected within the organization. The companies with whom we share personal data in accordance with the law are also requested to protect the data.

  1. The Purposes of Processing Data

The Processing of Personal Data of İNVENTA will be carried out in line with the purposes specified in the Privacy Notice.

  1. Data of Customer, Prospective Customer and the Business and Solution Partners.
  2. Collection and Processing of Data for Contractual Relationship

 If a contractual relationship is established with customers and prospective customers, the collected personal data can be used without the customer’s consent. However, this use takes place in accordance with the purpose of the agreement. The data is used to the extent of better execution of the agreement and the requirements of the service and updated when necessary by contacting the customers.

  1. Data Concerning Business and Solution Partners

İNVENTA adopts the principle of acting in accordance with the law when sharing data with both business and solution partners. Data is shared with business and solution partners with the commitment of data confidentiality and only as much as the service requires, and these parties are requested to take measures to ensure data security. However, we would like to point out once again that these are not related to your sensitive data, but are information and personal data limited to issues such as acceptance, parking or entering our office.

  1. Data Processing for Advertising Purposes

In accordance with the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, e-mails for advertising purposes can only be sent to persons with their prior approval. The explicit consent of the person to whom the advertisement is sent is essential.Again, İNVENTA complies with the details of the “consent” determined in accordance with the same legislation. The consent to be obtained must cover all commercial electronic messages sent to the electronic communication addresses of the recipients to promote your company’s services, market, promote its business or increase its recognition with content such as congratulations and wishes. This consent can be obtained in writing, in the physical environment or by any electronic means of communication. The important thing is that the buyer has a positive declaration of will that he/she accepts the sending of commercial electronic messages, his/her name and surname and electronic communication address. Such commercial messages will never come to you unless you accept them.

  1. Data Transactions Made Due to the Legal Obligation of the Company or Explicitly Established in the Law

The personal data may be processed without obtaining further approval for the purpose of expressly stating the processing in the relevant legislation or fulfilling a legal obligation determined by the legislation. The type and scope of the data processing must be necessary for legally permitted data processing and must comply with relevant legal provisions.

  1. Data Processing of the Company

The personal data can be processed within the legal purposes, under the service provided.  However, the data can not be used for the illegal services in any way.

  1. Processing of the Special Categories ofData

İNVENTA takes all the adequate precautions determined separately by the Board in the processing of special categories of personal data. Special categories of personal data are processed in our institution in accordance with the “Policy on the Protection and Processing of Special Categories of Personal Data”.

  1. Data Processed Through Automated Systems

INVENTA acts in accordance with the Law, regarding the data processed through automatic systems. The information obtained from these data cannot be used against the data subject without the explicit consent of such person. However, İNVENTA can make decisions about the data subjects with the data in its own system.

  1. User Information and the Internet

In case of collection, processing and use of personal data on the websites and other systems or applications of İNVENTA, the relevant persons are informed about the privacy policy and, if necessary, about the cookies.

Data subjects are informed about our applications on the websites. Personal data will be processed in accordance with the law.

  1. Data Belonging to Our Employees
  2. Processing of the Data for the Employment Relation

The personal data of our employees can be processed without the consent of our employees if the data is required for business relations or health insurance. On the other hand, İNVENTA ensures of the confidentiality and protection of the data of its employees.

  1. Processing Due to the Legal Obligations

INVENTA can process the personal data of its employees without obtaining consent for the purpose of expressly stating the processing in the relevant legislation or fulfilling a legal obligation determined by the legislation. This issue is limited to the obligations arising from the law.

  1. Processing for the Benefits of Employess

İNVENTA may process personal data without obtaining consent for transactions that benefit company employees, such as private health insurances. For disputes arising from business relations, İNVENTA may also process employee data.d. Processing of Special Categories of Data

According to the law, data related to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, membership to associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are considered special categories of personal data.

In the processing of special categories of personal data, İNVENTA takes adequate measures, determined separately by the Board, in addition to the consent of the data subject. Special categories of personal data can be processed without the consent of the person, but only in relation to the cases permitted by the Law and in a limited manner.

  1. Data Processing Through Automated Systems

Employees’ data processed in relation to automated systems can be used for internal promotions and performance evaluations. Our employees have the right to object to a result against them, and they do so by following internal procedures. The objections of the employees are also evaluated within the company.f. Telecommunication and Internet

The computer, telephone, e-mail, and other applications allocated to the employees within the company are allocated to the employee only for business purposes. The employee cannot use any of these means allocated to her/him by the company for his private purposes and communication. The company can control and audit all data on these vehicles. The employee undertakes that he/she will not keep any other data or information other than work on the computer, phones or other devices allocated to him/her from the moment he/she starts to work.

  1. Transfer of Personal Data Domestically or Abroad

Personal data may be shared with the controlling shareholder and business and solution partners only if necessary for the service to be seen by İNVENTA.

İNVENTA will be able to transfer personal data to İNVENTA’s suppliers on a limited basis to provide our Company with the services that are outsourced by our Company from the supplier and necessary to carry out the commercial activities of our Company.

İNVENTA has the authority to transfer personal data within the scope of the conditions determined by the Board, in accordance with the other conditions in the Law and subject to the approval of the person, within the country and abroad.

  1. The Rights of the Data Subject

İNVENTA accepts that within the scope of the Law, the data subject has the right to recall his/her consent before the data is processed, and determine the fate of the data after the data is processed.

You have  the following rights regarding personal data by applying to our contact, announced by İNVENTA on our website:

  1. a) Learn whether your personal data is processed or not,
  2. b) Request information, if personal data is processed,
  3. c) Learn the purpose of processing personal data and whether they are used in accordance with its purpose,
  4. d) Learn about the third parties to whom personal data is transferred, in the country or abroad,
  5. e) Request correction of personal data in case of incomplete or incorrect processing
  6. f) Request the erasure or destruction of the personal data, according to the conditions foreseen in article 7.
  7. g) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
  8. h) Object to the occurrence of a result against the person him/herself by analyzing the processed data exclusively through automated systems,
  9. i) Request compensation if the personal data is processed unlawfully and the person suffers a loss because of this.

On the other hand,

Individuals do not have any rights regarding the anonymized data within the company. İNVENTA may share personal data with relevant institutions and organizations for the purpose of exercising the legal powers of a judicial duty or state authority in accordance with the business and contractual relationship.

Personal data subjects will be able to submit their requests regarding the above-mentioned rights to the Company by filling in the application form, which you can obtain from the official website of the Company. Your applications will be answered as soon as possible depending on the nature of your application or within 30 days at the latest after it reaches our company. In addition, only the part of your application that is related to you will be answered, and an application about your spouse, relative or friend will not be accepted.

İNVENTA may request other relevant information and documents from the applicants.

  1. Principle of Confidentiality

Whether it is our employees or others, their data is kept confidential in INVENTA.  Nobody can use, copy, print, transfer the data, to others or use them other than the business at hand, without compliying with the agreement or the law.

  1. Process Security

All necessary technical and organizational measures are taken by İNVENTA in order to protect the collected data and avoid unouthorised persons to obtain them, so that our customers and prospective customers will not be harmed. Within this framework, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the Privacy Policy is complied with within the company. Safety measures are constantly being renewed and improved.

  1. Audit

İNVENTA carries out the necessary internal and external audits on the protection of personal data.

  1. Notification of breaches

When İNVENTA is notified of any breach of personal data, it immediately takes action to remedy the breach. It minimizes the harm of the concerned and compensates the damage. When personal data is obtained by unauthorized persons, it immediately notifies the Personal Data Protection Board.

With the notification of breach, you can apply according to the procedures specified in our corporate website.