MİMYAP CONSTRUCTION INDUSTRY CONSTRUCTION CONTRACTING MACHINERY STEEL INDUSTRY AND TRADE INC.

Information Text Regarding the Processing of Personal Data Within the Scope of Website Visitors, Contact, and Career Forms

As the data controller, MimYap Yapı Endüstri İnşaat Taahhüt Makine Çelik San. ve Tic. A.Ş. (“Company” or “MimYap”), we would like to inform you about the processing of your personal data obtained through your visit to our website at mimyap. com.tr (“Site”) and your use of the “Contact” and “Career” forms on the Site, we hereby inform you within the framework specified below, in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and secondary legislation.

The Company provides services primarily in the fields of steel construction design, manufacturing, and installation, industrial facilities, airports, bridges, infrastructure projects, and turnkey industrial facilities.

This Disclosure Statement applies to:

  • – Persons who only visit the Site,
  • – Persons who fill out the “Contact” form on the Site,
  • – Candidates who apply for a job through the “Career” form on the Site.

The Data Controller

1. Identity of the Data Controller

Data Controller: MimYap Yapı Endüstri İnşaat Taahhüt Makine Çelik San. ve Tic. A.Ş.
Address: Emirgazi Mahallesi No:1 Kahramankazan / Ankara – Turkey
Phone: +90 (312) 814 35 20 – Email: info@mimyap.com.tr

2. Personal Data Processed and Collection Methods

Your personal data is obtained through fully or partially automated means or non-automated means as part of a data recording system when you visit the Site, fill out forms on the Site, send us an email, or contact us by phone, and is processed in accordance with the fundamental principles set forth in the KVKK.

2.1. Data Processed in the Context of Site Visits and Cookies

The following personal data may be processed during your visit to the Site:

  • – Transaction Security Data: IP address, browser type, operating system information, date and time of visit, pages visited, session duration, referring URL, error logs, security logs,
  • – Usage Data: Site usage data collected through cookies and similar technologies.

Your personal data processed through cookies is explained in more detail in the Cookie Policy published on the Site; you can change your cookie preferences at any time through your browser settings and/or the tools provided on the Site.

2.2. Data Processed Through the Contact Form

The following personal data may be processed based on the information you provide to us via the “Contact” form on the Site:

  • – Identity Information: First name, last name,
  • – Contact Information: Phone number, email address,
  • – Work/Company Information (if applicable): Name of the institution/company you work for, your position,
  • – Message/Project Content: Your technical and commercial requests regarding your projects, your requests for quotes, your questions, complaints, and suggestions, as well as other information you choose to share in the free text field,
  • – Transaction Security Data: IP address, date and time of request, technical log records.

These data are processed for the purpose of receiving, evaluating, and finalizing your requests and applications regarding the Company’s services in the field of steel construction and related areas.

Important Note: It is recommended that you do not share your special category personal data (e.g., health information, union membership, political opinion, religious beliefs, etc.) that is not directly related to and necessary for the application process in the free text field of the contact form.

2.3. Data Processed Within the Scope of the Career Form

The following personal data may be processed in the context of the information you submit via the “Career” form on the website and the CV files you upload via the form:

  • – Identity Information: First name, last name,
  • – Contact Information: Email address, phone number,
  • – Message Content: Information you provide in the free text field (position you are applying for, your requests and expectations, etc.),
  • – Professional Information: Information in your CV regarding your education, professional experience, certifications, foreign language and other skills, references, professional memberships, and similar information,
  • – Visual/Audio Data: Your photo, if included in your CV, and images and other content linked to professional platforms (e.g., LinkedIn, etc.),
  • – Transaction Security Data: Application date, time information, technical log records.

The Company recommends that you do not share your special category personal data (health information, disability status, political views, union membership, religious beliefs, etc.) unless it is necessary for the recruitment process. Your special category personal data will not be processed except in cases where it is explicitly required by law and necessary for the relevant position.

2.4. Other Communication Channels

Your personal data may also be obtained when you send an email to the email addresses listed on the Site, contact us by phone, or, if necessary, through your application and interviews in a physical environment.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes in accordance with the general principles set forth in Article 4 of the KVKK and within the framework of the data processing conditions listed in Articles 5 and 6 of the KVKK.

3.1. Mandatory Processing Purposes Not Subject to Explicit Consent

Your personal data is primarily processed for the following purposes, without requiring your explicit consent, based on the data processing conditions specified in Articles 5/2 and 6 of the KVKK:

    • – Receiving, evaluating, and resolving your requests, questions, complaints, and suggestions submitted via the contact form,
    • – To evaluate your projects and technical/commercial requests, to make offers and to conduct pre-contract negotiations,
    • – To establish a contractual relationship with the Company and to carry out processes related to its performance,
    • – Planning and execution of customer/visitor request and complaint management processes,
    • – Receiving your job applications, evaluating your suitability for relevant positions, planning and executing interviews and recruitment processes,
    • – Executing the company’s human resources policies and processes,
    • – Ensuring site security, protecting information systems and IT infrastructure, detecting and preventing cyber attacks, misuse, and unauthorized access attempts,
    • – Fulfilling our obligations arising from relevant legislation, meeting the requests of authorized persons, institutions, and organizations,

– Preventing potential legal disputes and keeping necessary records to fulfill the burden of proof should such disputes arise,
– Protecting the Company’s rights and interests and following up on legal and administrative processes.
In this context, your personal data obtained through the contact form, in particular, will not be used for marketing, advertising, or automated profiling activities without your explicit consent.

3.2. Processing Purposes Subject to Your Explicit Consent Only

The data processing activities listed below are only carried out if you give your explicit consent:

      • – Sending you promotional, announcement, and marketing content related to the Company’s steel construction, industrial facilities, bridges, airports, and similar projects via email, SMS, phone call, or other electronic communication channels,
      • – Sending commercial electronic messages regarding projects, campaigns, events, and corporate news,
      • – Creating a profile based on your site usage information and communication/transaction history and presenting you with personalized content and offers,
      • – Storing your CV and other data related to your job application in the “candidate pool” for a longer period of time, not only for the position you applied for, but also for other suitable positions that may open in the future,
      • – Sharing your data in the candidate pool with the Company’s affiliates and/or business partners, if you give your explicit consent,

– When reference checks are required, sharing the necessary information with the references whose contact details you have provided in your CV and obtaining confirmation from them.
Not giving your explicit consent or withdrawing your consent at any time does not prevent you from visiting the Site, using the contact form, or benefiting from mandatory services and processes. With regard to processing based on explicit consent, the relevant activities will be discontinued if you withdraw your consent.

4. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following data processing conditions set out in Articles 5 and 6 of the KVKK:

        • – Explicitly stipulated by law (KVKK Article 5/2-a),
        • – It is directly related to the establishment or performance of a contract and the processing of your personal data is necessary (KVKK m.5/2-c),
        • – It is necessary for the data controller to fulfill its legal obligation (KVKK m.5/2-ç),
        • – It is necessary for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e),
        • – It is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f).

For optional activities such as marketing activities, sending commercial electronic communications, profiling, storing data in the candidate pool for a longer period, and transferring data to group companies/business partners for these purposes, your personal data is processed based on your explicit consent in accordance with KVKK Article 5/1.

In recruitment processes, your special category personal data is not processed except in cases required by law; special category data you voluntarily share in your application is processed only if the conditions set out in KVKK Article 6 are met and the necessary technical/administrative measures are taken.

In all cases, the Company acts in accordance with the general principles set forth in the KVKK (compliance with the law and rules of good faith, accuracy and timeliness, processing for specific, clear, and legitimate purposes, relevance, limitation, and proportionality to the purpose of processing, retention for the period required by the relevant legislation or necessary for the purpose of processing) in its data processing activities.

5. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups within the framework of Articles 8 and 9 of the KVKK and limited to the purposes specified above:

        • – The Company’s domestic affiliates, project partners, and business partners,
        • – Information technology infrastructure and service providers (companies providing hosting, email, backup, security, maintenance, and support services),
        • – Lawyers, independent auditors, and other professional advisors from whom we receive legal, financial, and similar advice,
        • – Reference persons whose contact details you have shared in your CV for the purpose of conducting reference checks, if necessary (only with your explicit consent),
        • – Public institutions and organizations authorized to request information and documents in accordance with relevant legislation, and judicial authorities.

The sharing of your data with group companies and/or business partners for marketing and profiling purposes will only take place with your explicit consent.

When transferring data abroad, your personal data will be transferred in accordance with Article 9 of the Personal Data Protection Law; to countries declared by the Personal Data Protection Board as having adequate protection, or, in cases where adequate protection is not available, in accordance with the undertakings approved by the Board and/or your explicit consent. All necessary technical and administrative measures are taken for data transfer abroad.

6. Method of Collection and Legal Basis of Personal Data

Your personal data is collected:

        • – When you fill out the “Contact” and “Career” forms on the Site,
        • – When you send an email to the email addresses listed on the Site,
        • – Contacting the Company via telephone or other communication channels,
        • – Cookies and similar technologies used on the website,
        • – Applications and interviews you make in physical environments, if necessary.

Your personal data is obtained in whole or in part by automated means or by non-automated means as part of a data recording system.
Your personal data collected is processed in accordance with the conditions set forth in the Personal Data Protection Law (KVKK) within the scope of the purposes and legal reasons specified in Articles 3 and 4 of this Disclosure Text.

7. Retention Periods

Your personal data is retained:

        • – For communication and offer requests, until the completion of the relevant process and thereafter for the general and specific limitation periods stipulated in the relevant legislation,
        • – If there is a contract concluded between you and the Company, for the limitation periods related to disputes that may arise from the contractual relationship,
        • – For recruitment processes, a reasonable period from the date your application is rejected if your application is unsuccessful; or, if you have also given your explicit consent to be included in the candidate pool, the period specified in this consent or as stipulated in the Company’s candidate pool policies,
        • – For transaction security records related to the Site and information systems, in accordance with information security obligations and the retention periods stipulated in relevant legislation.

and are deleted, destroyed, or anonymized in accordance with the KVKK, relevant secondary legislation, and the Company’s Personal Data Retention and Destruction Policy upon the expiration of these periods.

8. Your Rights and Application Methods under the KVKK

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data by applying to the Company:

        • – To learn whether your personal data has been processed,
        • – To request information about the processing of your personal data, if any,
        • – To learn the purpose of processing your personal data and whether they are used for their intended purpose,
        • – To know the third parties to whom your personal data have been transferred within or outside the country,
        • – To request the correction of your personal data if they have been processed incompletely or incorrectly,

– Requesting the deletion or destruction of your personal data within the framework of the conditions set forth in Article 7 of the KVKK,
– Requesting that the third parties to whom your personal data has been transferred be notified of the correction, deletion, or destruction,
– Object to a result being produced against you solely through the analysis of your processed data by automated systems,
– Request compensation for any damage you suffer due to the unlawful processing of your personal data.
The data subject is responsible for ensuring that the personal data provided to the Company is accurate and up-to-date. In this context, it is important that you update your information in case of any changes so that you can effectively exercise your rights and the Company can fulfill its obligations.

You may submit your requests in accordance with the Personal Data Protection Law and the Communiqué on the Procedures and Principles for Applying to the Data Controller;

          • – By sending a written and signed petition to the address “Emirgazi Mahallesi No:1 Kahramankazan / Ankara – Turkey”,
          • – Through other methods that allow us to verify your identity and any other application channels that may be announced by the Company in the future.

You may submit your requests to the Company.
Your requests will be processed as soon as possible and in any case within a maximum of thirty (30) days; our responses will be communicated to you in writing or electronically. If your request involves additional costs, the fee determined by the Personal Data Protection Board will apply.

9. Effective Date and Updates

This Information Notice enters into force on the date it is published on the Site.
The Company reserves the right to make changes to this notice at any time in accordance with changes in legislation and data processing activities. You can always access the current version of the notice on the Site.