Data protection

As Plasser Turkey Demiryolu Makineleri Sanayi Ve Ticaret Anonim Şirketi ("Plasser Turkey"), we care about the protection of your personal data and pay attention to the security of such data. In accordance with Law No. 6698 on the Protection of Personal Data (''LPPD Law''), we process your personal data and take the necessary technical and administrative measures for their protection. This text has been prepared by Plasser Turkey, acting in its capacity as data controller, in order inform you about the processing of personal data.

Data Controller Identity and Contact Information

PLASSER TURKEY RAILWAY MACHINERY INDUSTRY AND TRADE ANONİM ŞİRKETİ

Trade Registry No: 61303
MERSIS Central Registry No: 0069048698900001
Address: Ostim OSB Mahallesi 1220 Cad. No: 9 Yenimahalle/Ankara
E-Mail: plasser@hs01.kep.tr

The concept of personal data is defined as "‘any "information’ related to an identified or identifiable natural person" in accordance with the LPPD Law. Accordingly, data such as name, surname, email address, postal address, telephone number, etc. collected from you by Plasser Turkey may be processed as your personal data in accordance with the relevant legislation.

Your personal data may be processed by Plasser Turkey for the following purposes, in accordance with the LPPD Law, applicable legislation, and the Plasser Turkey Personal Data Protection Policy.

• Execution of management activities
• Provision of information to authorized persons, institutions, and organizations
• Ensuring the security of data controller operations
• Ensuring the security of movable property and resources
• Execution of sponsorship and donation activities
• Execution of storage and archive activities
• Execution of risk management activities
• Execution of goods/service procurement activities
• Execution of procurement activities
• Execution of business-continuity assurance activities
• Conducting internal audit/investigation/intelligence activities
• Execution of activities in accordance with the Turkish legislation
• Conducting audit/ethics activities
• Execution of information-security activities
• Execution of advertisement/campaign/promotion activities
• Execution of activities for customer satisfaction
• Execution of customer-relationship management activities
• Execution of communication activities
• Execution of access authorizations
• Execution of application activities for prospective employees
• Execution of prospective employee candidate/intern/student selection and placement activities
• Authentication
• Execution of goods/services procurement activities
• Execution of commitment activities to firms/products/services
• Execution of strategic planning activities
• Creating and tracking of visitor records
• Execution of marketing activities for products/services
• Follow-up of requests/complaints
• Execution of performance-evaluation activities
• Conducting marketing-analysis studies
• Execution of logistics activities
• Execution/Supervision of business activities
• Planning of HR activities
• Follow-up and execution of legal affairs
• Execution of finance and accounting affairs
• Execution of company-loyalty activities
• Execution of contract activities

Plasser Turkey may transfer your personal data in accordance with the relevant legislation and the decisions of the Personal Data Protection Law (LPPD). Regarding the transfer of personal data, Plasser Turkey shall ensure the transfer of personal data in accordance with the LPPD and the decisions of the LPPD.

Personal data and sensitive personal data cannot be transferred to other natural and legal persons without the consent of the data subject. However, in exceptional cases specified in Articles 5 and 6 of the LPPD, your personal data may be transferred by Plasser Turkey without the consent of the data subject.

Plasser Turkey may also transfer your personal data abroad in accordance with the relevant legislation and the decisions of the Personal Data Protection Law (LPPD). Except for the exceptional circumstances specified in the LPPD, the transfer of personal data abroad depends on the consent of the person concerned. When transferring your personal data abroad, Plasser Turkey takes all security measures stipulated in such legislation and such LPPD decisions. In addition, the countries where personal data can be transferred are determined by the Public Disclosure Platform ("PDP") Board, taking into account whether adequate protection is provided in the country.

Your personal data may be transferred domestically and abroad in line with the purposes of processing. Without prejudice to the cases stipulated in the LPPD, the transfer of your personal data is subject to the explicit consent of the person concerned. Your personal data may be shared with and transferred to our business partners, representatives, suppliers, auditors, legally authorized public institutions and organizations, private institutions and organizations, professional organizations and similar organizations, supervisory and regulatory authorities, natural persons or private-law legal entities authorized by the provisions of the legislation, and other persons and organizations within the framework of the conditions and purposes of transferring personal data specified in Articles 8 and 9 of the LPPD.

In case your personal data is transferred abroad, there must be adequate protection in that country in accordance with the decisions of the PDP Board. In addition, Plasser Turkey and the data controller in the relevant foreign country shall endeavour to undertake adequate protection in writing and approval of the Board is obtained.

Plasser Turkey may process personal data if the conditions for processing such data are met. Information and documents you have shared directly through HR activities; directly through our representatives, providers, and/or business partners; connection information recorded as required by the legislation when using our website and social media accounts; contact forms you have filled in electronically; other forms you have filled in at our workplace, at our office, and for our representatives; written or verbal communications you have made with Plasser Turkey through online channels; electronic mail you have sent to Plasser Turkey via the electronic mail system; the information and documents you have sent to Plasser Turkey via tools such as fax or letter; the information and documents you have sent to Plasser Turkey; the information and documents you have shared over the telephone or directly with Plasser Turkey, our business partners, and/or representatives; all kinds of contracts you have signed with Plasser Turkey, and any other personal data you have shared verbally, in writing, or electronically in any other way can be collected partially or completely by automatic or non-automatic methods.

Your personal data may be processed and shared within the scope of the personal data processing conditions and purposes listed in Articles 5 and 6 of the LPPD in line with the above-mentioned purposes. These data processing conditions include:

For your personal data

1. Explicit consent of the data subject.
2. Explicitly stipulated in the Turkish Penal Code (TPC), Tax Procedure Law (TPL), Turkish Commercial Code (TCC), Social Insurance and General Health Insurance Law (SIGHIL), Labor Law
3. It is necessary for the protection of the life or physical integrity of the person who is unable to disclose their consent due to actual impossibility or whose consent is not legally valid.
4. Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.
5. It is mandatory for the data controller to fulfil its legal obligation.
6. It has been publicized by the person concerned.
7. Data processing is mandatory for the establishment, exercise, or protection of a right.
8. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

For your sensitive personal data

1. Explicit consent of the person concerned
2. Personal data other than health and sexual life may be processed without the explicit consent of the data subject in cases stipulated by law. Personal data relating to health and sexual life may only be processed without the explicit consent of the data subject by persons under the obligation of confidentiality or authorized institutions and organizations for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services, and financing.

In the processing of special categories of personal data, it is also necessary to take adequate measures determined by the PDP Board. Plasser Turkey shall take the measures determined by the PDP Board without delay.

Plasser Turkey is obliged to respond to the applications of data subjects in accordance with the LPPD. Data subjects whose personal data are processed by us can exercise their rights specified in the LPPD by applying to us with the information and documents that confirm their identities.

Within the scope of the LPPD, data subjects have the following rights:

• To learn whether personal data is being processed
• To request information if personal data has been processed
• To learn the purpose of processing of such personal data and whether they are used in accordance with their purpose
• To know the third parties to whom personal data are transferred domestically or abroad
• To request correction of personal data in case of incomplete or incorrect processing
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7
• To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred
• To object to the emergence of a result to the detriment of the person by analysing the processed data exclusively through automated systems
• To demand compensation for damage due to unlawful processing of personal data.

As a data owner, you may apply to us by one of the methods determined by the Personal Data Protection Board or by filling out the application form available here together with the necessary information to confirm your identity, sending it to plasser@hs01.kep.tr, or you can send a signed copy of this form personally or through a notary public or by registered letter with a return receipt requested to the following address: "Ostim Osb Mahallesi 1220 Cad. No: 9 Yenimahalle/Ankara". In case a request is made by a third party on behalf of the personal data owner, you must also submit a power of attorney issued through a notary public on behalf of such owner.

If the data subject submits their request to Plasser Turkey, Plasser Turkey shall finalize such request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the transaction requested by the personal data subject requires an additional cost, the fee in the tariff determined by the LPPD Board may be charged. Plasser Turkey may reject the application of the applicant by explaining the reason.

Pursuant to Article 14 of the LPPD, the personal data owner has the right to file a complaint to the Personal Data Protection Board within thirty days from the date such data owner (data subject?) receives the answer and in any case within sixty days from the date of application in cases where such data owner/subject’s application is rejected, the answer given is insufficient, or the application is not answered in due time.

In the cases listed below, the data subjects/owners whose personal data are processed cannot assert their rights described in Article 9 against Plasser Turkey, as such rights are excluded from the scope of the LPPD in accordance with Article 28/1 thereof:

• Processing of personal data for purposes such as research, planning, and statistics by anonymizing them with official statistics,
• Processing of personal data for artistic, historical, literary, or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defence, national security, public security, public order, economic security, privacy of private life, or personal rights, or does not constitute a crime,
• Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations entrusted and authorized by law to ensure national defence, national security, public safety, public order, or economic security,
• Processing of personal data by judicial authorities or enforcement authorities in relation to investigation, prosecution, judgement, or execution proceedings.

However, data subjects/owners may not assert their rights other than the right to claim compensation for damages from the rights described in Article 9 against Plasser Turkey in accordance with Article 28/2 of the LPPD in the following cases:

• Processing of personal data is necessary for the prevention of crime or criminal investigations,
• Processing of personal data made public by the personal data subject/owner themself,
• Processing of personal data is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the public institutions and organisations and professional organisations in the nature of public institutions, which are authorized by law,
• Processing of personal data is necessary for the protection of the economic and financial interests of the Government in relation to budgetary and fiscal matters.

Your personal data processed for the purposes specified in this Document will continue to be anonymized and used by us when the purpose requiring processing according to the relevant provisions of the LPPD has been fulfilled, and when the periods determined by the laws according to Article 138 of the Turkish Penal Code expire.

Plasser Turkey may amend this at any time. These amendments shall take effect immediately upon the posting of the newly amended on the website www.plasserturkiye.com.tr.

All requests related to LPPD can be forwarded to the following address: plasser@hs01.kep.tr

You can access the application form by clicking this link:

Related Application form