Personal data is processed by EY Turkey in accordance with The Law on the Protection of Personal Date numbered 6698, its secondary regulations and miscellaneous legislation regarding protection of personal data in scope of this clarification text. 

Personal data means all types of information which may define your identity define or make it definable in accordance with the Law on the Protection of Personal Data. Your personal data, processed by companies within EY Turkey network as controllers, and processing purposes, recipient groups, collection method, legal backgrounds of your personal data and your rights with respect to such personal data and the contact information in terms of using your rights are below.

A- OUR ONLINE VISITORS 

A.I. WHICH PERSONAL DATA IS PROCESSED?

The following personal data can be processed in case you visit our website:

  • Identity Information (credentials): Name, Surname, 
  • Contact Information: Address information, e-mail address, phone number, information regarding your employer company, title of the company
  • Process Security Information: IP address information, username and password, log information, internet access log information, traffic information,

A.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

Your personal data can be processed with the following purposes in accordance with the related legislation in case you visit our website:

  • Planning and execution of corporate communication activities,
  • Planning, controlling and execution of information security processes,
  • Conducting sponsorship activities,
  • Planning and execution of event and training activities,
  • Execution of the entrepreneur of the year program,
  • Conducting entrepreneurial women winning program,
  • Conducting the tax marathon competition,
  • Managing code of ethics,
  • Establishment and management of former employee network,
  • Announcement of circulars or bulletins,
  • Management of marketing and sales activities,
  • Analysing and reporting studies,
  • Managing our relations with our customers, suppliers and business partners,
  • Evaluating and responding to suggestions, requests and complaints submitted to our company and performing improvement activities in accordance with notifications.
  • Development and diversification of our company's business processes,
  • Execution of our quality and standard examinations,
  • Monitoring finance and accounting affairs,
  • Contract management, establishment of legal transactions and follow-up of legal processes,
  • If you are an employee candidate, evaluation of the application if a job application is made through our website,
  • Conducting communication activities,
  • Fulfilling the obligations arising from the Law No. 5651,
  • Maintenance of your information that must be kept in accordance with the relevant legislation; copying, back-up to prevent information loss; Ensuring the control of the consistency of your information, taking the necessary technical and administrative measures for the security of our networks and your information,
  • Fulfilling the legal obligations required or obliged by legal regulations with regulatory and supervisory institutions, carrying out legal follow-ups and legal processes.

A.III. TRANSFER OF YOUR PERSONAL DATA 

Your personal data shall be transferred to official bodies and institutions, our related domestic and foreign suppliers and companies within the Global EY network to the extent purposes included under A.II title of this Clarification Text in scope of the provisions of Law on the Protection of Personal Data regarding transferring of personal data. 

A.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND COLLECTION METHOD

Your personal data is processed through automatic or manual processes based on the following compliance with laws reasons and listed under the provisions of article 5, 8 and 9 of the Law on the Protection of Personal Data in the abovementioned framework over electronic environments during your visit of our website and through the declaration of you or third parties and/or cookies. 

  • Having explicit consent,
  • Clearly anticipated under the Laws,
  • Personal data regarding parties of the contract is required to be processed provided that they are directly related to conclude and execute such contract,
  • It is obligatory to fulfil legal obligations,
  • It is made publicly available by the related individual,
  • It is obligatory to process data in order to grant, use or protect a right,
  • It is obligatory to process data for the legitimate interests of the controller provided not causing any harm on fundamental rights and freedom of the data subject.

B- OUR PHYSICAL (ON-SITE) VISITORS 

B.I. WHICH PERSONAL DATA IS PROCESSED? 

In scope of your visit to premises of EY Turkey, information regarding name/surname, National ID, telephone number, e-mail address, entry-exit registration information of visitor, camera records and in case you have a wi-fi internet access, information with respect to IP address and logging data are processed. 

B.II. PROCESSING PURPOSES OF PERSONAL DATA 

Your personal data can be processed with the following purposes in accordance with related legislation in case you visit premises of EY Turkey:

  • Monitoring with camera records in order to ensure security regarding visitors within the building of or company,
  • Receiving visitor information during issuance of the gate entrance report,
  • Providing guest wi-fi network.

B.III. TRANSFERRING OF PROCESSED PERSONAL DATA

Your personal data shall be transferred to official bodies and institutions, courts, law enforcement officers, related service provider firms and our business partners to the extent purposes included under B.II title of this Clarification Text in scope of the provisions of Law on the Protection of Personal Data regarding transferring of personal data. 

B.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND COLLECTION METHOD 

Your personal data is collected, kept and processed based on the following compliance with laws reasons and listed under the provisions of article 5 and 8 of the Law on the Protection of Personal Data in the abovementioned framework from you with physical, written, verbal or CCTV camera during your visit of our premises of our company which is within the network of EY Turkey.

  • Clearly anticipated under the Laws,
  • Personal data regarding parties of the contract is required to be processed provided that they are directly related to conclude and execute such contract and to fulfil obligations of contracts concluded and render the requested product and services,
  • It is obligatory to fulfil legal obligations,
  • It is made publicly available by the related individual (data subject?),
  • It is obligatory to process data in order to grant, use or protect a right,
  • It is obligatory to process data for the legitimate interests of the controller provided not causing any harm on fundamental rights and freedom of the data subject.

C- OUR POTENTIAL CLIENT/SUPPLIERS/BUSINESS PARTNERS

C.I. WHICH PERSONAL DATA IS PROCESSED? 

Following personal data is processed within the framework of your relation with EY Turkey:

  • Identity Information: Name/surname, date and place of birth.
  • Contact Information: Address information, e-mail address, phone number, social media.

C.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA 

Your personal data can be processed with the following purposes in accordance with the related legislation in scope of your relationship with EY Turkey:

  • Conducting communication activities,
  • Conducting the offer process for services and products,
  • Fulfilling promotional and marketing activities,
  • Fulfilling the legal obligations arising from the legislation,
  • Carrying out custody and archive activities,
  • Execution of legal, litigation and administrative affairs.

C.III. TRANSFER OF PERSONAL DATA 

Your personal data shall be transferred to domestic judicial authorities or law enforcement officers to the extent required by purposes included under C.II title of this Clarification Text or requested by such authorities in accordance with related legislation in scope of the provisions of Law on the Protection of Personal Data regarding transferring of personal data.

C.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND COLLECTION METHOD

Your personal data is processed through automatic or manual processes based on the following compliance with laws reasons and listed under the provisions of article 5 and 8 of the Law on the Protection of Personal Data in the abovementioned framework directly from you or supplier firms or business partners and from legal authorities via internet, telephone, email and physical, written, verbal and electronic environments in scope of your relation with EY Turkey.

  • processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfilment of that contract,
  • the data concerned is made available to the public by the data subject himself,
  • it is mandatory for the legitimate interests of the controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

D- OUR CLIENTS 

D.I. WHICH PERSONAL DATA IS PROCESSED? 

Following personal data is processed within the framework of your relation with EY Turkey; 

  • Identity Information: Name/surname, national ID card, National ID, nationality, marital status, date and place of birth.
  • Contact Information: Address information, e-mail address, mobile phone number, 
  • Your Financial Information: Bank and account information, balance sheet information, invoice and debt information, collection risk information, financial performance information, credit and risk information, assets information,
  • Your Visual Record Data: Photo information,
  • Your Customer Transaction Data: Order and request information, promissory note and cheque information,
  • Your Professional Experience Data: CV,
  • Your Risk Management Data: Information processed to manage commercial / technical / administrative risks,
  • Your Legal Transaction Data: Data in the lawsuit file,

D.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

Your personal data can be processed with the following purposes in accordance with the related legislation in scope of your relationship with EY Turkey:

  • Execution of service sales processes,
  • Carrying out after-sales support services,
  • Submission of service offers,
  • Execution of contract processes,
  • Conducting communication activities
  • Providing advisory services,
  • Sending e-mail or gift for celebration and congratulation within the scope of customer relations management
  • Carrying out organization and event management activities,
  • Carrying out travel and accommodation processes,
  • Determining the target audience for customers and carrying out marketing activities,
  • Execution of finance and accounting processes,
  • Payroll / Budget reporting process,
  • Execution of the current card opening form process,
  • Execution of legal processes,
  • Management of anti-money laundering (AML) processes,
  • Giving information to authorized persons, institutions and organizations.

D.III. TRANSFERRING OF PROCESSED PERSONAL DATA

Your personal data shall be transferred to official bodies and institutions, our related domestic and foreign suppliers and our business partners to the extent purposes included under D.II title of this Clarification Text in scope of the provisions of Law on the Protection of Personal Data regarding transferring of personal data domestically and overseas. 

D.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND COLLECTION METHOD

Your personal data is processed based on the following compliance with laws reasons and listed under the provisions of article 5, 8 and 9 of the Law on the Protection of Personal Data in the abovementioned framework directly from you or supplier firms or business partners and from legal authorities via internet, telephone, email and physical, written, verbal and electronic environments in scope of establishment of your legal relation with EY Turkey.

  • Having explicit consent, 
  • it is clearly provided for by the legislation such as Tax Procedure Law, Turkish Code of Obligations, Turkish Code of Commerce which are applicable for our company, 
  • Personal data regarding parties of the contract is required to be processed provided that they are directly related to conclude and execute such contract,
  • It is obligatory to fulfil legal obligations,
  • It is made publicly available by the related individual (data subject?),
  • It is obligatory to process data in order to grant, use or protect a right,
  • It is obligatory to process data for the legitimate interests of the controller provided not causing any harm on fundamental rights and freedom of the data subject.

E- SUPPLIER/ BUSINESS PARTNER OFFICERS

E.I. WHICH PERSONAL DATA IS PROCESSED? 

Following personal data is processed within the framework of your relation with EY Turkey; 

  • Identity Information: Name/surname, mother/father name, national ID card, driving license information, passport number, tax identification number, signature, National ID, nationality, marital status, date and place of birth.
  • Contact Information: Address information, e-mail address, mobile phone number, 
  • Your Financial Information: Bank account and card information, invoice and debt information,
  • Your Legal Transaction Data: Information in correspondence with judicial authorities, Data in the lawsuit file,
  • Your Professional Experience Data: CV,

E.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

Your personal data can be processed with the following purposes in accordance with the related legislation in scope of your relationship with EY Turkey:

  • Carrying out the procurement processes of goods and services,
  • Conducting communication activities,
  • Execution of contract processes,
  • Conducting audit activities,
  • Opening / changing and checking the current account,
  • Fulfilling the legal obligations arising from the legislation,
  • Execution of legal, litigation and administrative affairs,
  • Conducting accounting processes,
  • Giving information to authorized persons, institutions and organizations.

E.III. TRANSFER OF PERSONAL DATA 

Your personal data shall be transferred to official bodies and institutions, our related domestic and foreign suppliers and our business partners to the extent purposes included under E.II title of this Clarification Text in scope of the provisions of Law on the Protection of Personal Data regarding transferring of personal data domestically and overseas. 

E.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND COLLECTION METHOD

Your personal data is collected from you, our business partners and legal authorities during the establishment of your legal relation with EY Turkey and maintenance of such relation via website, contracts, electronic mail verbally, in written and in electronic environment. In this context, your personal data collected is automatically or manually processed based on the following compliance with laws reasons and listed under the provisions of article 5, 8 and 9 of the Law on the Protection of Personal Data in the abovementioned framework.

  • it is clearly provided for by the legislation such as Tax Procedure Law, Turkish Code of Obligations, Turkish Code of Commerce which are applicable for our company, 
  • Personal data regarding parties of the contract is required to be processed provided that they are directly related to conclude and execute such contract,
  • It is obligatory to fulfil legal obligations,
  • It is made publicly available by the related individual (data subject?),
  • It is obligatory to process data in order to grant, use or protect a right,
  • It is obligatory to process data for the legitimate interests of the controller provided not causing any harm on fundamental rights and freedom of the data subject.

F. YOUR RIGHTS IN TERMS OF PROTECTING YOUR PERSONAL DATA

You have the following rights through applying to the companies which are within the body of EY Turkey network via the methods included under “Contact” section of this Clarification Text:

  • to learn whether your personal data is processed or not,
  • to request information if your personal data is processed,
  • to learn the purpose of your data processing and whether this data is used for intended purposes,
  • to be informed about the third parties to whom your personal data is transferred domestically or abroad,
  • to request the rectification of the incomplete or inaccurate data, if any,
  • to request the erasure or destruction of your personal data under the conditions laid down in Law on Protection of Personal Data,
  • to request notification of the operations carried out in compliance with abovementioned rectification, erasure and destruction to third parties to whom your personal data has been transferred,
  • to object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavourable consequence for you,
  • to request compensation for the damage arising from the unlawful processing of your personal data.

CONTACT INFORMATION FOR YOUR RIGHTS AND REQUESTS

You may deliver by hand or via notary public your questions and requests regarding your personal data through making identity determination to the addresses of our following companies which are within the network of EY Turkey accompanied with the petition issued in line with the requirements mentioned in the Communique on Principles and Procedures for Application to Data Controller. Moreover, you may also submit such questions and requests to registered electronic mail addresses of our companies, which are within the network of EY Turkey, through using secured electronic signature and mobile signature or electronic mail addresses, which have been previously notified to our Companies and verified, of your Company.

Our Application Channels and Addresses

  • Kuzey Yeminli Mali Müşavirlik ve Bağımsız Denetim ve Anonim Şirketi

Direct Application and Notary/Post Channel: Maslak Mahallesi Eski Büyükdere Caddesi No:27 Sarıyer 34485 İstanbul

Registered e-mail address: kuzeyymm@hs02.kep.tr

  • Güney Bağımsız Denetim ve Serbest Muhasebeci Mali Müşavirlik Anonim Şirketi

Direct Application and Notary/Post Channel: Maslak Mahallesi Eski Büyükdere Caddesi No: 27 Sarıyer 34485 İstanbul

Registered e-mail address: guneysmm@hs02.kep.tr

  • Ernst Young Kurumsal Finansman Danışmanlık Anonim Şirketi

Direct Application and Notary/Post Channel: Maslak Mahallesi Eski Büyükdere Caddesi No: 27 Sarıyer 34485 İstanbul

Registered e-mail address: eykf@hs02.kep.tr

  • BEY Serbest Muhasebeci Mali Müşavirlik Anonim Şirketi

Direct Application and Notary/Post Channel: Maslak Mahallesi Eski Büyükdere Caddesi No: 27 Sarıyer 34485 İstanbul

Registered e-mail address: beysmm@hs02.kep.tr

H. ON THE CLARIFICATION TEXT

This Clarification Text shall be valid as of the date on which it is published by EY Turkey. EY Turkey may make amendments on this Clarification Text at any time, when required. Such amendments, which shall be made by EY Turkey, shall be valid upon the publication of Clarification Text on www.vergidegundem.com website address.