AES Innovation Research and Development Consulting Industry and Trade Ltd. Co. (the Company, AES Innovation) processes personal data for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed, within the framework of the methods, grounds, purposes and conditions specified below, primarily in accordance with the Turkish Constitution and the Law No. 6698 on the Protection of Personal Data (KVKK), which regulate and guarantee the protection of personal data, and demonstrates utmost care and attention in all administrative and technical measures required for their protection.1. Data Controller
As AES Innovation, acting as the data controller, we inform you that your personal data, which we obtain in the ways specified below depending on the situation, will be recorded, stored, maintained, reorganized, shared with institutions legally authorized to request this personal data, transferred to domestic or foreign third parties under the conditions stipulated by the KVKK (Personal Data Protection Law), classified, and processed in other ways listed in the KVKK, within the scope of our business relationship with you, in a limited and proportionate manner, and in accordance with the purposes requiring their processing, while maintaining the accuracy and up-to-date nature of the personal data as you have provided or as it has been provided to us.

2. Purposes of Processing Personal Data

Your personal data may be processed by the company for the purposes and legal grounds stated below, as well as similar purposes and reasons, but not limited to those listed below.
The fulfillment of the purpose necessary for the performance of the employment contract, in particular;
• Employee leave approval, viewing remaining leave, and managing leave arrangements.
• Processing employee terminations
• Ensuring payroll processing is carried out
• Making salary payments to employees

In order to fulfill the requirements under the Labor Law, the Occupational Health and Safety Law, the Social Security Law and related legislation, as well as other laws and regulations, in particular;

• Creation of personnel files
• Making notifications to the Social Security Institution (SGK), the Turkish Employment Agency (İŞKUR), police stations, and providing information on incentives and legal obligations.
• Ensuring the opening of mandatory individual retirement insurance accounts
• Opening a private/supplementary health insurance account and ensuring all notifications are submitted.
• Checking employee entry/exit records
• Incentive calculation
• Making payments related to wage garnishment deductions for employees in enforcement files.
• Making legal notifications of the workplace accident
• Implementing occupational health and safety procedures
• Complying with other information retention, reporting, and notification obligations stipulated by legislation, relevant regulatory bodies, and other authorities.
• Enforcement of court orders

Due to the requirements arising from the performance of customer contracts, in particular;

• Distinguishing between justified and unjustified customer complaints, increasing customer satisfaction, understanding customer needs, and improving customer-related processes.
• Customer service quality evaluation and employee training.
For the purpose of managing the company, conducting business, and implementing company policies, in particular;
• Monitoring and reporting on the performance/development of company employees.
• Proving and confirming the requirements of the assigned position, and ensuring the development and monitoring of qualifications.
• Making expense payments to employees
• Ensuring communication with employees
• Confirmation that the employee to whom a vehicle is assigned or who is allowed to use it is competent to drive and has not lost their driver's license for any reason.
• Providing a vehicle for the employee
• Providing business card printing services.
• Ensuring that packages arriving via cargo and courier services are forwarded to the relevant employee.
• Monitoring the use of company vehicles for employee safety and work efficiency.
• Arranging travel, visa procedures
• Creating an employee's work email address by entering employee data into Outlook.
• Recording the documents collected from employees during the job application and interview process.
• Sharing information and/or photos on company social media accounts regarding corporate events, meetings, etc., and providing celebratory communication.
• Planning training sessions, reporting on training activities, preparing training certificates, tracking employees who have participated in training sessions, and monitoring employee development progress as a result of the training they have received.
• Establishing contact with relevant individuals in emergency situations.
• Conducting a satisfaction survey analysis

Your personal data will be retained for the maximum period specified in the relevant legislation or necessary for the purpose for which it is processed, and in any case, for the duration of the statutory limitation periods.

3. Your Personal Data Processed

At AES Innovation, we may process personal data provided to us by our employees. The personal data that may be processed is as follows:

Identity Data; Name, surname, date of birth, country of birth, city of birth, gender, marital status, nationality, Turkish Republic Identity Card information (TRNC, serial number, wallet number, father's name, mother's name, place of birth, province, district, neighborhood, volume number, family sequence number, sequence number, household number, page number, registration number, place of issue, reason for issue, date of issue, previous surname), copy of identity card.
Contact Data; Phone number, full address, email address, internal company contact information (internal phone number, corporate email address)
Financial Data; Financial and salary details, payrolls, bonus entitlements, bonus amounts, file and debt information related to enforcement proceedings, bank account statements, minimum living allowance information, private/supplementary health insurance information/amounts, Automatic Enrollment System Individual Retirement System information/amounts.
Special Category Personal Data; Criminal record, disability status/description/percentage, religion, health data, blood type, private/supplementary health insurance policy, medical reports, pre-employment medical report, chest X-ray, hearing test, eye test, pre-employment and periodic medical examination forms signed by the workplace physician, pregnancy status, pregnancy report, health and maternity leave information, association/foundation memberships.
Education and Qualification Data; Educational background, certificates and diplomas, foreign language skills, CV, courses taken, audit logs, social security information, audit reports, letters of recommendation.
Audit Data; CV, audit report, signed audit documents.
Visual and Auditory Data; Photograph of a real person.

Employee Performance and Development Data; Education and skills, information on which training was received and when, email, signed attendance form, customer audit quality assessment form, performance evaluation and target achievement status, activity/planning information.
Family and Relative Data; Marriage certificate, spouse and children's names, surnames, Turkish Republic Identity Numbers, gender, date of birth, occupation, telephone numbers; names, surnames and telephone numbers of close relatives.
Study Data; Registration number, position name, department and unit, title, last employment date, employment start and end dates, social security registration/retirement, social security number, tax office number, flexible hours status, travel status, Bağ-Kur registration date, Bağ-Kur registration number, accounting code, number of working days, projects worked on, total monthly working hours information, severance pay base date, additional days for severance pay.
Permission Data; Leave seniority base date, additional leave seniority days, leave group, departure/return date, day, reason for leave, address/phone number where leave will be held.
Other; Military service deferment, vehicle license plate, copy of vehicle registration certificate, vehicle mileage information, vehicle location, copy of driver's license, traffic fine inquiry result, intern status, employee internet access logs, entry and exit logs, entry-exit records, employee daily activity data.

4. Transfer of Personal Data

For your security and to enable our Company to fulfill its legal obligations, your personal data may be shared with relevant institutions or organizations, including but not limited to public legal entities such as the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Agriculture, the Ministry of Trade, the Ministry of Labor and Social Security, and the Turkish Employment Agency (İŞ-KUR), as well as standard holders, accreditation bodies, and other control bodies, to the extent permitted and required by the Labor Law, the Occupational Health and Safety Law, the Social Security and General Health Insurance Law, the Law on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications, the Turkish Commercial Code, the Law No. 6698 on the Protection of Personal Data, the Identity Reporting Law, and other relevant legislation. Furthermore, your personal data may be shared with;

The fulfillment of the purpose necessary for the performance of the employment contract, in particular;
• We can share the data with the accounting office to facilitate payroll processing and data updating.

In order to fulfill the requirements under the Labor Law, the Occupational Health and Safety Law, the Social Security Law and related legislation, as well as other laws and legislation, in particular;

• We can share the information regarding the identification and calculation of incentives with the consulting firms we work with.
• We may share your health data with the occupational health physician so that they can provide treatment and conduct health checks.

In order to ensure security within the company, in particular;

• We can transfer the control of entry and exit points to the workplace building management for workplace security purposes.

In order to ensure qualification, in particular;

• We can share your resumes.
• We can share reference letters you received from your previous employers.
• We can share the audit logs for the audits you attended both before and during your time at AES Innovation.
• We can share your complete historical social security service records upon request.
• We can share certificates from trainings you previously attended, including those at AES Innovation, as well as audit reports from audits you conducted.

In order to fulfill our legal obligations, in particular;

• In order to exercise our right to defense, we can share our information with our lawyers and, provided it is in accordance with the law and procedure, with relevant institutions within the scope of our obligation to comply with legal requests such as court orders or requests for evidence.

For the purpose of managing the company, conducting business, and implementing company policies, in particular;

• We may transfer your personal data to companies we are affiliated with or partner with in order to ensure our internal operations.
• Necessary personal data may be transferred to companies we work with for purposes such as transportation, travel, visa processing, vehicle provision, and business card printing.

In business and transactions conducted with foreign countries;

• With your consent, your personal data may be shared with third parties abroad for purposes such as communication during international travel and education, organizing travel, and sending mass emails.

5. Method and Legal Basis for Collecting Personal Data

As an employer, we collect your personal data in order to fulfill our legal obligations, to perform the employment contract between us, for reasons stipulated by law, and for the legitimate interests of the Company. This data may be directly requested from you, requested in advance through our platform or the platforms where we publish job advertisements during your job application, or included in your resume or other texts related to your application that you choose to share with us during your application. We collect this data through your physical or electronic transmission to us and by you recording information accessible to multiple people on Company computer programs, applications, and servers, or on the internet.

In accordance with the Company's legitimate interest in monitoring business operations, we collect data on your entry and exit times and your fuel usage via tracking devices installed in Company vehicles, for the purpose of ensuring workplace security and fulfilling our legal obligations.

We collect your health data physically to fulfill our legal obligations and as required by law, and your personal data physically or electronically to ensure workplace safety.

We collect this information through legal documents and notifications sent to us in order to fulfill our legal obligations.

6. Rights Regarding the Protection of Personal Data

In accordance with Article 11 of the KVKK (Law on Protection of Personal Data), your personal/special categories of personal data;
a. To find out if it has been processed or not.
b. Request information if it has been processed.
c. To ascertain the purpose of processing and whether it is being used for its intended purpose.
d. Knowing the third parties to whom it is transferred, domestically or internationally.
e. Requesting correction if it is incomplete/incorrect.
f. Requesting deletion/destruction within the framework of the conditions stipulated in Article 7 of the KVKK (Personal Data Protection Law).
g. Requesting that the third parties to whom it is transferred be notified of the transactions carried out in accordance with paragraphs (d) and (e) above.
h. You have the right to object to an unfavorable outcome resulting solely from analysis by automated systems.
i. If you have suffered damages as a result of the unlawful commission of this act, you request compensation for those damages.

You have the right to request it.

7. Method of Applying to the Company

As a data subject, you can submit your requests regarding your rights mentioned above to AES Innovation by personally submitting a written request to the address below, via a notary public, using a registered email address, or through other methods determined by the Personal Data Protection Board.

Data Controller: AES Innovation R&D Consulting Industry and Trade Ltd. Co.

Address: Yenişehir Mah. Ulubatlı Sok. KKÜ Teknopark 1st R&D Building No:30/24 Yahşihan / KIRIKKALE

Mersis No.: 0008146562700001