Aim

The purpose of this Privacy and Personal Data Protection Policy is the Law No. 6698 on the Protection of Personal Data within the scope of the services provided by Doublecheck Consulting Organization Bilişim Sanayi ve Ticaret Anonim Şirketi (“DOUBLECHECK”) through its website www.doublecheck.com.tr. (“KVKK”) and the personal data processing activity carried out in accordance with the relevant legislation and the methods adopted for the protection of personal data. In this context, it is aimed to enlighten the persons whose personal data is processed, especially our users, employees, employee candidates, employees, shareholders and officials of the suppliers and institutions we cooperate with, and third parties.

Principles to be Applied on the Processing of Personal Data

All personal data processed by DOUBLECHECK is processed in accordance with the regulations stipulated in the KVKK. In this context, personal data:

It will be processed in accordance with the law and honesty.

It will be ensured that personal data are accurate and up-to-date when necessary.

It will be processed for specific, explicit and legitimate purposes.

They will be used and disclosed in connection with the legal purpose for which they are processed, in a limited and measured way.

They will be kept for the period required by the relevant legislation or for the purpose for which they are processed.

Purpose of Processing Personal Data

DOUBLECHECK undertakes to process personal data in accordance with the principles set forth in Article 4 of the KVKK, the personal data processing conditions specified in Articles 5 and 6 of the KVKK and for the following purposes:

a) For users and our business partners;

Fulfillment of all kinds of service delivery aimed to be provided by us,

Fulfillment of additional services (audit, consultancy, etc.) for the fulfillment of these activities,

Providing and presenting various rewards, discounts and advantages to users,

Making all kinds of physical and electronic communication and sending other communication messages to users for advertising, sales, marketing, survey and similar purposes.

Improving and developing the services offered, determining and implementing commercial and business strategies

Management and follow-up of customer requests and complaints

Planning information security processes, creating and managing information technology infrastructure

Follow-up and execution of legal processes and communication processes with official institutions,

b) For employees;

Job, social security, tax etc. the exercise of the rights arising from the legislation and the fulfillment of the obligations,

Resolution of disputes arising from labor law,

Making corporate planning,

Ensuring order, control, security, management and harmony in the workplace,

Execution of the recruitment process

Follow-up and execution of legal processes and communication processes with official institutions,

Personal Data Collection Methods

Personal data can be collected by DOUBLECHECK verbally, in writing or electronically by automatic or non-automatic methods and similar means. These processes are carried out in line with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK and the legal reasons specified in this Policy. In cases where the explicit consent of the persons concerned is required, their explicit consent is obtained by reading and approving the Clarification Text and the Explicit Consent Text by the relevant persons. In this context, DOUBLECHECK, personal data;

By providing information by the relevant persons for the purpose of creating a membership and benefiting from the services while using the website,

By obtaining personal data regarding real persons and legal persons' shareholders, members of the board of directors, representatives, signatories and employees during the execution of commercial transactions, negotiations and contracts for the purpose of continuing its commercial activities,

By obtaining general and special quality personal data obtained during the interviews with the employee candidates in order to meet the employment needs,

By signing the employment contract with the employee and obtaining general and special personal data during the performance of the employment contract,

In addition, by obtaining personal data through notifications from administrative and judicial authorities and other communication channels,

collects.

Personal Data Processing and Transfer Permission

The domestic processing of personal data by DOUBLECHECK and its transfer to third natural and legal persons is possible with the express consent of the data owner. KVKK art. 5, personal data if there is no express consent;

If it is expressly provided for by law,

When it is necessary for the protection of the life or bodily integrity of the person himself or someone else, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,

Provided that it is directly related to the establishment or performance of a contract, the processing of the personal data of the contracting party is required,

If it is necessary for DOUBLECHECK to fulfill its legal obligations,

personal and data is made public by the data subject,

When necessary for the establishment, exercise or protection of a right,

It can be processed if necessary for DOUBLECHECK's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the person concerned.

Biometric and genetic data of individuals regarding their race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership to associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are of special nature. is personal data. The processing and transfer of sensitive personal data by DOUBLECHECK is possible with the express consent of the persons concerned. If there is no express consent;

Personal data that are not related to health and sexual life may be processed without seeking the explicit consent of the person concerned, in cases stipulated by the laws.

Personal data related to health and sexual life can only be processed without the explicit consent of the person concerned, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services, by persons who are under the obligation of confidentiality or by authorized institutions and organizations.

The processing of personal data abroad and its transfer to third natural and legal persons is possible with the express consent of the data owner. In cases where there is no explicit consent, personal data transfer, KVKK art. 5/2 and art. It takes place in the presence of one of the conditions in the provisions of 6/3 and the following conditions.

In case of adequate protection as determined and announced by the Personal Data Protection Board,

In the absence of adequate protection, in case the data controllers in Turkey and the relevant foreign country undertake in writing to provide adequate protection and the Board has permission.

Personal data can also be transferred abroad, with the permission of the Board, only after obtaining the opinion of the relevant public institution or organization, in cases where the interests of the country or the person concerned will be seriously harmed, without prejudice to the provisions of international conventions.

Observing the Rights of the Data Owner

Data owners can use the following rights regarding themselves by applying to DOUBLECHECK:

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with the purpose,

Learning the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing,

Requesting the deletion or destruction of personal data within the framework of Article 7 of the KVKK,

Requesting notification of correction, deletion and destruction processes to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed personal data exclusively through automated systems, and

To request the compensation of the damage in case of loss due to unlawful processing of personal data.

In order to exercise the above-mentioned rights, data owners can send their requests to DOUBLECHECK's e-mail address info@doublecheck.com.tr or to the e-mail address "Mustafa Kemal Mahallesi Dumlupınar Bulvarı Tepe Prime A block no 266 mezzanine flat no 18/ANKARA".

In the applications of data owners; name, surname and, if the application is written, signature, for citizens of the Republic of Turkey, T.C. ID number, nationality for foreigners, passport number or if any, identification number, e-mail address, telephone and fax number, and the subject of the request.

Precautions for Accurate and Up-to-Date Storage, Security and Protection of Personal Data

DOUBLECHECK takes the necessary administrative and technical measures in line with the Personal Data Security Guide published by the Personal Data Protection Authority (“Authority”) in order to keep personal data accurate and up-to-date, to store them in safe environments and to prevent their loss, alteration or unlawful use.

Employees will not disclose the personal data they have learned to others in violation of the provisions of KVKK and will not use them for purposes other than processing. This obligation will continue after they leave office.

In case the processed personal data is obtained by others unlawfully, DOUBLECHECK will notify the relevant person and the Board as soon as possible so that necessary measures can be taken.

Deletion, Destruction or Anonymization of Personal Data

Personal data processed for the purposes specified in this Policy, when the purpose for which they are processed ceases to exist, when the periods determined by the laws expire, or when the storage periods required by the processing purpose expire, in accordance with the principles and methods in the Guide for Deletion, Destruction or Anonymization of Personal Data published by the Institution. will continue to be anonymized.

Protection of Personal Data Changes to be Made in the Original Policy

DOUBLECHECK may make changes to this Policy to the extent required by its activities or when required by law. These amendments become valid with the publication of the amended Policy text on the website. In addition, users, business partners and employees are notified via e-mail about the changes to be made.