Security Policy

BURAKHAN MARBLE MINING MARKETING INDUSTRY AND TRADE LIMITED COMPANY EMPLOYEE CONFIDENTIALITY COMMITMENT FOR THE PROTECTION OF PERSONAL DATA

I have read the following matters by signing this Personal Data Protection Employee Privacy Undertaking (“Undertaking”) in terms of the procedure and practice I will be subject to in accordance with the employment contract (“Employment Contract”) I have concluded with Burakhan Mermer Madencilik Pazarlama Sanayii Ve Ticaret Limited Şirketi (“Company”), which I have been working with the title _______ since ___, I hereby accept, declare and undertake that I understand and will act in accordance with these matters and that this Letter of Undertaking is issued as an annex to the Employment Contract and constitutes an integral part of the Employment Contract.

The words used in capital letters in this Letter of Undertaking shall have the meanings ascribed to them in the applicable international conventions, relevant laws and regulations, Personal Data Protection Board decisions, Personal Data Protection Authority guidelines, other regulatory and supervisory authority, court and other official authority decisions/instructions and all regulations in the field of protection of personal data that may enter into force in the future and any amendments to them (“KVK Regulations”), especially the Personal Data Protection Law No. 6698 (“KVKK”).

During my employment with the Company and indefinitely after the termination of the Employment Contract within the scope of my work with the Company:

  • I will process the Personal Data I process in accordance with the KVK Regulations and the policies and procedures for the protection of Personal Data (“KVK Policies and Procedures”), which may be amended by the Company from time to time and will be made available to my knowledge and access by e-mail and other methods,
  • I will act in accordance with the KVK Regulations and KVK Policies and Procedures to prevent the unlawful processing and access of the Personal Data I process, and I will implement all technical and administrative measures that the Company will convey to me in writing or verbally, and when necessary, I will give all kinds of written and verbal instructions to my colleagues above me in the hierarchical level to show the necessary care,
  • I will not use the Personal Data I process in any way to benefit myself or third parties,
  • I will not share the Personal Data I process with third parties outside the Company in violation of the conditions specified in the KVK Regulations and KVK Policies and Procedures, and I will not use, process and archive it in any way other than for the purposes regulated in KVK Policies and Procedures,
  • I will show due diligence in accordance with the KVK Regulations, KVK Policies and Procedures and other principles determined by the Company in the execution of any process in which the Personal Data I process must be shared with a third party in any format whatsoever, and I will immediately notify the relevant units within the Company of any suspicious sharing that may be considered outside the ordinary workflow and situations that may constitute a data breach,
  • I will immediately notify the relevant units of the Company of any Personal Data sharing request from any public institution and organization regarding the Personal Data I process, taking into account the time limit level imposed by the request,
  • I will act in accordance with the KVK Policies and Procedures regarding the security of the Personal Data I process,
  • I will be subject to an indefinite confidentiality obligation regarding the Personal Data I process,
  • I will make the necessary efforts to ensure that the Personal Data processing activities within my knowledge in the light of reasonable expectations regarding the Personal Data I process are carried out in accordance with the purposes set out in the KVK Regulations and KVK Policies and Procedures,
  • I am aware of my roles and responsibilities regarding Personal Data security determined by the Company regarding the Personal Data I process,
  • I will participate in all kinds of trainings, meetings, programs and similar awareness-raising organizations on the protection of Personal Data organized by the Company, unless I have an excuse to the contrary due to the work I undertake for the Company, and in cases where I cannot attend with an excuse, I will take the necessary action to compensate them,
  • That all e-mail, computers, internet, messaging services, in-office messaging services, telephones, tablets, mobile phones and other devices (“Information Systems”) allocated and used by the Company belong to the Company and that I will not use the Information Systems under any circumstances in violation of the KVK Regulations, KVK Policies and Procedures and the Company’s verbal or written instructions,
  • I will use the Information Systems only for the performance of the Employment Contract, I will not make any use or communication for personal and private purposes on the Information Systems, including but not limited to saving personal information or documents on the Information Systems, and otherwise the Company may access such personal information and documents within the scope of the Company’s supervision and audit obligation and legitimate requirements,
  • All my Personal Data related to all communication, actions and movements carried out through the Company’s Information Systems (e.g. all kinds of messages, calls, visited websites, calls, location information and other records created while using Information Systems) can regularly monitor, audit and follow up all my Personal Data (e.g. all kinds of messages, calls, visited websites, calls, location information and other records created while using Information Systems) depending on security, internal control, audit, internal audit, compliance with legislation, monitoring the fulfillment of legal or contractual obligations and other legitimate reasons, and in case of any legal dispute regarding this, such Personal Data can be used as evidence,

I accept, declare and undertake.

  • I hereby accept, declare and undertake that I will indemnify all direct and indirect damages incurred by the Company in case I act contrary to my obligations in this Letter of Undertaking.
  • I hereby accept, declare and undertake that upon the request of the Company, I will return all information and documents belonging to the Company that I have obtained during the performance of the Employment Contract to the Company in accordance with the Company’s instructions, and that I will immediately destroy the information and documents stored in physical or electronic media under the supervision of the Company.
  • This Letter of Undertaking shall be governed by and construed in accordance with Turkish Law. Denizli Central Courts and Enforcement Offices are authorized in disputes arising from this Letter of Commitment.

Employee

Name and Surname: : 
Identity Number / Employee Registration Number (if applicable):: 
Date:: 
Signature::