Protection of Personal Data

Protection of Personal Data

This "Clarification Text" has been prepared to inform shareholders, references, suppliers, supplier employees/officials, and visitors about how we process their personal data.

As Vertra Çelik Endüstrisi Sanayi ve Ticaret Anonim Şirketi (hereinafter referred to as the "Company"), we aim to inform you about the processing of your personal data and your related rights in accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as "KVKK").

I. Data Controller

The Company operates at the headquarters located at Huzur Mahallesi Azerbaycan Caddesi B Blok No:4B/156 Sarıyer/ISTANBUL. We process your personal data, including financial, physical space security, visual and audio records, communication, identity, professional experience, personal, and health data as a data controller within the scope of KVKK.

II. Purpose for Processing Personal Data

Your personal data may be processed for the following purposes:

  • Managing emergency processes.
  • Selecting and placing employee candidates/trainees/students.
  • Processing applications of employee candidates.
  • Fulfilling obligations arising from employment contracts and legislation.
  • Managing fringe benefits and interests for employees.
  • Conducting audit/ethical activities.
  • Organizing training activities.
  • Ensuring compliance with legislation.
  • Handling financial and accounting matters.
  • Ensuring physical space security.
  • Managing assignment processes.
  • Overseeing legal affairs.
  • Conducting communication activities.
  • Planning human resources processes.
  • Executing and supervising business activities.
  • Conducting occupational health and safety activities.
  • Managing goods/service procurement processes.
  • Organizing events and managing logistics.
  • Evaluating performance.
  • Managing risks.
  • Storing and archiving records.
  • Executing contract processes.
  • Securing movable goods and resources.
  • Managing supply chain processes.
  • Ensuring the security of data controller operations.
  • Handling foreign personnel work and residence permit procedures.
  • Providing information to authorized persons, institutions, and organizations.
  • Managing organizational activities and visitor records.

III. Data Transfers

Your personal data may be shared with:

  • Authorized public institutions and organizations to fulfill legal obligations.
  • Our accounting office consultancy firm and suppliers for financial and accounting purposes, goods/service procurement processes, and communication activities.

IV. Methods and Legal Reasons for Collecting Personal Data

Your personal data are collected verbally, in writing, or electronically by automatic or non-automatic methods based on the legal reasons specified in Articles 5 and 6 of the KVKK, including explicit consent, fulfillment of legal obligations, legal stipulations, contract performance, and the legitimate interests of the data controller. This includes non-automatic methods such as phone calls, face-to-face communication, contract signing, and invoicing, as well as automatic methods like camera recording systems in common areas and email transmission.

Your Rights under Article 11 of KVKK

In accordance with Article 11 and paragraph 1 of Article 13 of KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, you may exercise your rights by:

a) Visiting our headquarters at "Huzur Mahallesi Azerbaycan Caddesi B Blok No:4B/156 Sarıyer/ISTANBUL" or our branch at "Sarımazı Mahallesi COSB 1002. Cadde No:1/6 Ceyhan/ADANA" in person.

b) Sending a written request to our headquarters address through a notary public or by registered mail with a return receipt to verify your identity and prevent misinformation.

c) Sending an email to "hsari@vertrasteel.com" from the email address you have notified to our Company and registered in our systems, or by other methods specified by the Board in the future.

Requests will be addressed free of charge within thirty days, depending on the nature of the request. However, if the request incurs additional costs, a fee determined by the Personal Data Protection Board as per the Communiqué on the Procedures and Principles of Application to the Data Controller may be applied.

-->