GDPR

3RED TURİZM TAŞIMACILIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ CLARIFICATION TEXT

1. INTRODUCTION
As 3RED TURİZM TAŞIMACILIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“Data Controller” or “Company”), we have prepared this disclosure text in order to inform you, our visitors, customers, potential service recipients, job candidates, employees, business partners, platform users and other third parties, including real persons, about the personal data we process within the scope of our activities carried out for the purposes of our company in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the relevant legislation.
Your personal data specified below are, under all circumstances; We hereby inform you that we will process the personal data you share in accordance with the law and the rules of honesty, by preserving its accuracy and up-to-date form, for specific, clear and lawful purposes, in a way that is related to the purpose of processing, limited and proportionate, and for the period stipulated in the relevant legislation or necessary for the purpose of processing.

1.1. Definitions
In this disclosure text;

Personal Data: Any information related to an identified or identifiable natural person (name-surname, address, T.R. ID number, number, phone number, e-mail),
Personal Data Protection Law (“KVKK”): Personal Data Protection Law No. 6698, which entered into force upon publication in the Official Gazette on April 7, 2016,
Company: 3RED TURİZM TAŞIMACİLİK SANAYİ VE TİCARET LİMİTED ŞİRKETİ,
Data Controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1.2. Identity of the Data Controller
Data Controller: 3RED TURİZM TRANSPORTATION INDUSTRY AND TRADE LIMITED COMPANY
Address: GEBİZLİ MAHALLESİ TERMESSOS BLV. PLAZA GLK BUSINESS CENTER SİT. NO: 42 /2/102 MURATPAŞA/ANTALYA
Phone: +90 242 322 11 12
E-mail: red@3red.com.tr

2. COLLECTED PERSONAL DATA AND OUR PURPOSE OF PROCESSING PERSONAL DATA

2.1. What Data Are Collected?
We collect the following data within the scope of our company activities:

Credentials
Contact Information
Process Security Information
Professional Experience Information
Feature Information
Customer Transaction Datari
Risk Management Information
Financial Information
Location Information
Physical Space Security
Visual and Audio Recordings
Legal Action Information
Marketing Information
Special Personal Data (includes health information data)

Data Category: Identity Information

Description: Data related to the identification of the person.
Collected from? Employee, candidate, customer, potential service recipient, supplier employee, supplier representative, shareholder/partner, visitors.
Content: Name, surname, gender, Turkish Republic identity number, SGK registration number, nationality, marital status, date of birth, place of birth, passport number, driver's license number, vehicle registration information, ID photocopy, passport photocopy, driver's license photocopy.
Purpose of collection:
- Execution of employee satisfaction and engagement processes
- Human resources planning
- Execution of access rights
- Employment contract obligations
- Ensuring business continuity
- Audit, legal follow-up, archiving, marketing, customer relations processes
- Providing information to public institutions
Legal reason:
- Legal obligations
- Contract relations
- Legitimate interests
Collection method:
- Printed forms
- Electronic media
- On-premise systems

Data Category: Contact Information

Description: Personal data that enables communication with the person.
Who collects it from? Employee, job candidate, customer, potential service recipient, supplier employee, supplier representative, shareholders/partners, visitors.
Content: E-mail address, residential address, business address, mobile phone number, landline and fax number, etc.
Purpose of collection:
- Access permissions and emergency management
- Planning information security and human resources processes
- Customer satisfaction activities
- Goods/service sales, after-sales support
- Marketing and promotion processes
Legal reason:
- Obligations in the relevant legislation
- Contractual relations
Collection method:
- Printed forms and internal electronic systems

Data Category: Transaction Security Data

Description: Data that ensures technical, administrative, legal and commercial security while the company conducts its activities.
Who collects it? Employees, customers, potential service recipients, suppliers, visitors.
Content: IP addresses, site login/logout data, password and passphrase information.
Purpose of collection:
- Information security
- System access control
- Ensuring operational security
Legal reason:
- Legislation
- Contract relationship
Collection method:
- Electronic devices and systems

Data Category: Professional Experience Data

Description: Personal data regarding the professional experience of the relevant person.
Who collects it from? Employee, candidate, shareholder/partner.
Content: Diploma, course, certificate, transcript, education information.
Purpose of collection:
- Recruitment processes
- Career planning
- Training and performance evaluation
Legal reason:
- Legislative obligations
- Contractual relations
Collection method:
- Print forms and digital resources

Data Category: Personnel Data

Description: Information necessary for the maintenance of the working relationship.
Collected from? Employee, candidate, shareholder/partner.
Content: Position information, SGK entry/exit documents, health reports, criminal record, military status, leave information, photo, blood type, etc.
Purpose of collection:
- Employment contract and social security processes
- Fee policies
- Occupational health/safety
- Following up legal processes
Legal reason:
- Labor and social security legislation
- Service agreements
Collection method:
- Physical documents and digital systems

Data Category: Customer Transaction Data

Description: Personal data related to transactions with customers.
Who collects it? Customer, potential service recipient, visitor.
Content: Call center records, invoice/note/cheque, order and request information.
Purpose of collection:
- Executing service processes
- Financial transactions
- Ensuring customer satisfaction
Legal reason:
- Legislation
- Service agreements
Collection method:
- By electronic and physical means