İstanbul Asfalt Fabrikaları Sanayi ve Ticaret A.Ş. ("İsfalt A.Ş.") takes all necessary technical and legal measures in accordance with the Personal Data Protection Law No. 6698 ("PDPL") to process your personal data due to the activities we carry out. Detailed information regarding the processing of personal data, its transfer to third parties, the legal grounds for data collection, and the rights specified in the PDPL can be found in the following privacy notice.

1. Purposes of Processing Personal Data

   We process your personal data as the data controller or by the real/legal persons appointed by us under the following circumstances and conditions:

   1. To fulfill the services to be carried out within the scope of the duties and responsibilities of İstanbul Metropolitan Municipality ("IMM") under the Law No. 5216 and related legislation,
   2. For communication and collaboration between our company and IMM, ensuring coordination, conducting joint business areas, determining the needs of our employees, fulfilling the obligations related to the contract, ensuring occupational health and safety and business continuity, creating a joint database, facilitating the functionality of the joint database, providing communication and marketing convenience, and managing brand and reputation,
   3. To ensure the healthy delivery of products and services produced and offered by our company, IMM, and other subsidiaries of IMM, for the realization of our commercial/public and social purposes, to consumers, suppliers, business partners, and public institutions,
   4. To provide efficient and fast access to services for individuals residing in İstanbul and those present in our city for various reasons,
   5. For notifying changes in the legislation or policies that we have accepted and for making notifications related to the data subject,
   6. For fulfilling our legal obligations and contractual obligations,
   7. For taking the necessary precautions for occupational health and safety within the scope of our legal obligations, planning and conducting training processes, and enabling early intervention in health-related issues,
   8. For improving, developing, diversifying our services, and offering alternatives to real/legal persons with whom we have commercial relations,
   9. For fulfilling post-sale/service obligations,
   10. For conducting necessary quality and standard audits or fulfilling other obligations specified by laws and regulations,
   11. For complete performance of the contracts in which our company is a party and for the control of whether the counterparties fulfill their obligations completely in these contracts,
   12. For ensuring the legal security of real/legal persons who are in commercial relations with our company,
   13. For the management of our procurement and corporate correspondence,
   14. For determining and implementing our commercial business strategies,
   15. For the promotion and announcement of events such as meetings, seminars, training, and other social organizations organized/participated by our company, as well as for informing the public and promoting the event,
   16. For preparing various reports, research, and presentations, planning emergency management processes, following up on financial and accounting affairs, ensuring security within our company,
   17. For ensuring the security of our employees, guests, and our company's buildings through camera recording and other security measures and for controlling entries and exits,
   18. For the implementation of the disciplinary process in case of incidents at the workplace,
   19. For ensuring the efficient and effective use of vehicles and equipment delivered to our employees,
   20. For increasing the morale, motivation, performance level, and satisfaction of our employees, as well as their interactions with each other and our company,
   21. For providing internet access to our visitors at our company,
   22. For creating statistical data, recording visitor information, and ensuring feedback when our website is visited,
   23. For the detection of communication and determination of content when voice and call records are made with our call centers or company phones,
   24. For more efficient performance of personnel activities through ERP, PDKS, and other platforms.
2. Transfer of Personal Data

   Your processed personal data may be transferred for the purposes stated above and within the framework of the conditions specified in the Law on the Protection of Personal Data (KVKK), to the following recipients:

   1. Our business partners or Istanbul Metropolitan Municipality (IMM) and its Affiliated Companies, in order to fulfill our public services/commercial activities and ensure their continuity and coordination,
   2. IMM, Court of Accounts, Public Procurement Authority, Provincial Health Directorate, and authorized public institutions and organizations for the supervision of our activities of public service nature in accordance with relevant legislation; special integrator companies, independent audit firms, and accounting/tax consultancy firms within the scope of relevant contracts,
   3. Upon the requests of relevant public institutions and organizations and for the purposes of the requests, to legally authorized public institutions and judicial authorities,
   4. To IMM and IMM Affiliated Companies, suppliers, and solution partners, for the establishment of a common database, facilitating its functionality, ensuring ease of communication, brand, and reputation management purposes,
   5. To expert consultancy firms in various fields, such as financial, commercial, management, human resources, etc., for the improvement of our quality standards, cost reduction, and fulfilling legal obligations,
   6. To our suppliers for the preparation and implementation of strategies related to our public services and commercial activities,
   7. To individuals/legal entities and public institutions and organizations with whom we cooperate in order to carry out our company's business activities and public services,
   8. To banks, financial institutions, and business partners for the realization of banking and financial transactions,
   9. To our suppliers, business partners, IMM, and IMM Affiliated Companies, to provide services,
   10. To private and public legal entities to increase the visibility and brand value of the company, improve internet infrastructure, and maintain its currency,
   11. To IMM, IMM Affiliated Companies, and service providers operating in this field for the organization of events, conferences, celebrations, and similar social activities,
   12. To relevant meal and event organization companies for the provision of services such as meals, gifts, promotions, etc., to our employees,
   13. To hospitals and healthcare institutions for emergency medical interventions and fulfilling occupational health and safety obligations,
   14. To security companies for ensuring workplace security,
   15. To tourism companies, hotels, and event management companies for the execution of business processes and facilitation purposes,
   16. To our business partners and suppliers for the realization of advertising and promotional processes,
   17. To software companies and technology companies established domestically and abroad for the creation of databases of ERP, CRM, etc. operating systems, and computer programs, ensuring the functionality of the programs, and conducting maintenance and repair of the program,
   18. To solution partner companies providing repair, maintenance, and service services, our suppliers, and companies operating in this field,
   19. To institutions/organizations providing digital data services for security, technology, and cloud services, both domestically and internationally.
3. Method and Legal Basis for Collecting Personal Data

   We collect your personal data through various means, including application forms, customer support channels ("Beyaz Masa"), our website, various information forms, surveys, job application forms, employment contracts, social media applications, İstanbul Metropolitan Municipality (IMM), and other affiliated companies, as well as from our suppliers and business partners. These data may be obtained through written, oral, and digital communications, as well as call centers and other similar channels. The collection of data is based on your explicit consent or within the scope of other data processing conditions specified in the Law on the Protection of Personal Data (KVKK).

   The purpose of collecting this information is to facilitate our commercial and administrative activities, comply with the laws while providing services, carry out our company's public services, ensure the smooth functioning of our commercial operations, and fulfill our legal responsibilities with utmost accuracy and completeness.

4. Storage and Destruction of Personal Data

   To maintain data integrity, we retain personal data in accordance with the specific purpose of data processing, ensuring that the retention period aligns with the processing purpose. Your personal data will be kept until the purpose and/or reason for processing is no longer applicable, and it will be stored in accordance with the required retention periods set by the relevant legislation.

   Once the purpose and reason for processing your personal data have concluded, and the statutory retention periods to meet our legal obligations have expired, we will proceed with the secure and permanent destruction of the data. Any exceptions regarding personal data associated with public services will be handled in compliance with the applicable legal regulations, which may include anonymization or other appropriate measures.

5. Rights of the Data Subject

   In accordance with Article 11 of the Law on the Protection of Personal Data (KVKK), each data subject has the following rights:

   1. The right to know whether their personal data is being processed.
   2. The right to request information if their personal data has been processed.
   3. The right to learn the purpose of the processing of their personal data and whether it is being used in line with that purpose.
   4. The right to be informed of the third parties to whom their personal data is transferred, whether domestically or abroad.
   5. The right to request the correction of their personal data if it is incomplete or inaccurate and to have such correction notified to the third parties to whom the personal data has been transferred.
   6. The right to request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, in accordance with the KVKK and other related laws, and to have such deletion or destruction notified to the third parties to whom the personal data has been transferred.
   7. The right to object to the occurrence of a result against themselves as a result of the analysis of the processed data solely through automated systems.
   8. The right to request compensation for damages in case of suffering damages due to the unlawful processing of their personal data.
      
      The data subject can communicate their requests regarding these rights in writing to our company's address provided below, either by sending a notarized letter or by applying in person by presenting identification. The requests of the data subject will be evaluated and decided upon free of charge as soon as possible and, in any case, within thirty (30) days. If the evaluation and decision-making process incurs a cost, the fee specified by the Personal Data Protection Board tariff will be applied.
      For information about the cookies we use on our website, please refer to our cookie policy.
      Respectfully presented to the public.
6. Data Controller's Identity

   İSTANBUL ASFALT FABRİKALARI SANAYİ VE TİCARET A.Ş

   Mersis No: 481 003 0195
   İnternet Adresi: www.isfalt.istanbul
   Phone Number: (0216) 343 24 92
   Email Address: isfalt@hs01.kep.tr
   Address: Selimiye Mah. Atölyeler Sok. No:8/1 34668 Üsküdar/İstanbul

Data Controller's Application Form Download