Entrance

KVKK policy T.R. According to Article 20 of the Constitution, everyone has the right to request the protection of their personal data. Regarding the protection of personal data, which is a Constitutional right, Volta Motor San ve Tic. as Data Controller. With this personal data protection policy created by A.Ş. (“Volta”); The process of securely protecting the processed personal data of natural persons such as company employees, job applicants, interns, suppliers, supplier employees, subcontractors, subcontractor employees, customers, third parties and visitors will be managed. All necessary administrative and technical measures have been taken by Volta to protect personal data processed in accordance with the Personal Data Protection Law No. 6698 and secondary legislation.

Aim

Volta’s main purpose in implementing this KVKK policy is to ensure that the administrative and technical measures taken within the scope of personal data processing and data protection activities carried out in accordance with the law, and the automatic or any other protection of the above-mentioned natural persons, especially the company employees, with whom it has legal and commercial relations. To ensure the security of personal data processed by non-automatic means, provided that it is part of the data recording system.

Scope

KVKK policy; At Volta, primarily employees, customers, subcontractors, subcontractor employees, suppliers, supplier employees, job applicants, interns, third parties, customers and visitors, automatic or non-automatic, provided that it is part of any data recording system, It relates to all personal data processed through various means.

Personal Data
Processing Purpose of the Data Controller

In this context, Volta processes personal data for the following purposes:

– Carrying out corporate sustainability activities,
– Management of relations with suppliers and subcontractors,
– Carrying out personnel recruitment processes,
– Conducting internal audit and legal procedures,
– Carrying out corporate management and communication activities,
– Request and complaint management,
– Providing information arising from the legislation to authorized persons or organizations,
– Creating and tracking visitor records,

If the processing activity carried out for the above-mentioned purposes does not meet any of the conditions stipulated within the scope of Law No. 6698, Volta obtains explicit consent from the data owners regarding the relevant processing process.

Personal Data
Principles of Processing

Volta Tekstil San. and Tic. A.Ş. carries out studies within the scope of the basic principles adopted in the processing of personal data within the scope of this Policy and listed below:

Processing personal data in accordance with the law and the rules of honesty,
Keeping personal data accurate and updated when necessary,
Processing personal data for specific, clear and legitimate purposes,
Limited and measured processing of personal data in connection with the purpose for which they are processed,
Storing personal data for the period stipulated in the relevant legislation or required for the purpose for which they are processed,
Enlightening and informing personal data owners,
Establishing the necessary system for personal data owners to exercise their rights,
Taking necessary precautions to preserve personal data,
Acting in accordance with the relevant legislation and the Personal Data Protection Board regulations in transferring personal data to third parties in line with the requirements of the purpose of processing,
Showing necessary sensitivity to the processing and protection of special personal data.

Personal Data
Terms of Processing

Volta processes personal data under the following conditions within the scope of KVKK policy:

If the processing of personal data is clearly provided for by law,
If the processing of personal data is directly related to and necessary for the establishment or performance of a contract,
If it is mandatory for Volta to fulfill its legal obligation, If personal data has been made public by the data owner,
If the processing of personal data is necessary to establish, exercise or protect the rights of the data owner or third parties,
In case it is necessary to process personal data for the legitimate interests of Volta, provided that it does not harm the fundamental rights and freedoms of the data owner,
Personal data is processed if personal data processing is necessary to protect the life or physical integrity of the personal data owner or someone else and if the personal data owner is unable to express his or her consent due to actual or legal invalidity.

Ensuring the Security of Personal Data

Volta takes all necessary technical and administrative measures, according to current technological possibilities and applications, to ensure that personal data is processed in accordance with the law. In this context;

The system established within the scope of personal data processing activities carried out within the company by IT experts appointed by Volta to ensure that personal data is processed in accordance with the law is audited by the Information Technology Department and the technical measures taken are periodically reported to the company's senior management in accordance with the internal audit mechanism.

Employees' knowledge and awareness levels are increased and trained regarding personal data protection law and the legal processing of personal data.

By analyzing the business processes carried out by all units operating within Volta, personal data was defined, data processors were identified, job descriptions were made, and a data processor agreement was signed with each of them.

Personal data processing activities carried out by all units of Volta; It has been determined in accordance with the personal data processing conditions required by Law No. 6698.

Records that impose the obligation not to process, disclose, use or share personal data contrary to the law are included in the documents revealing the legal relationship between Volta and its employees, interns, prospective employees, subcontractors and suppliers, and the awareness of employees and other people in this regard is increased and inspections are carried out.

Volta takes technical measures in line with developments in technology, and the measures taken are periodically updated and renewed.

Access authorizations to Personal Data are limited, authorization matrices are created and authorizations are reviewed regularly.

Software and hardware including virus protection systems and firewalls are installed.

Regular security scans are carried out to detect security vulnerabilities in applications where personal data is collected.

Employees are informed that the personal data acquired by them as a requirement of the job cannot be disclosed to anyone else contrary to the provisions of Law No. 6698 and cannot be used for purposes other than the purpose of processing, and that this obligation will continue after they leave office, and the necessary commitments are taken from them in this regard.

Volta has a business relationship with its subcontractors and suppliers (confidentiality agreement); Provisions are added stating that the necessary security measures will be taken and these measures will be ensured in their own organizations.

Backup programs are used in accordance with the law to ensure that personal data is stored safely.

Access to data storage areas containing personal data is logged and inappropriate access or access attempts are instantly communicated to the relevant parties.

Data Owner's Rights
and Application Process

The rights that Volta has in accordance with Article 11 of Law No. 6698 regarding the personal data shared with the company within the scope of the purposes specified in this Policy and the processing methods of personal data are listed below:

Learning whether personal data is processed,
Requesting information if personal data has been processed,
Learning the purpose of processing personal data and whether the data is used for its intended purpose,
Knowing third parties to whom personal data is transferred domestically or abroad,
Requesting correction of personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Law No. 6698,
Objecting to the emergence of a result against the individual by analyzing the processed data exclusively through automatic systems,
In case of damage caused due to illegal processing of personal data, it has the right to demand compensation for the damage.

To exercise the rights listed above, you can contact our company using the “Application Form” on our website http:/www.volta.com.tr and the methods specified in this form. Volta will finalize the requests of the personal data owner in accordance with the application above, free of charge, within thirty days at the latest, depending on the nature of the request.

Storage Periods and Destruction Method of Data

KVKK policy Volta stores personal data for the periods stipulated in the relevant laws, legislation and “Personal Data Storage and Destruction Policy”. If a period is not stipulated in the legislation regarding how long personal data will be stored, the data is stored and subsequently deleted, destroyed or anonymized in accordance with the activities and practices carried out by Volta and the practices required by the commercial life of the company. However, although the purpose of processing personal data has ended; The data may be stored to serve as evidence in possible legal disputes, to assert the relevant right based on personal data, or to establish a defense. Even in such cases, stored personal data cannot be accessed for other purposes; data is accessed only for use in relevant legal disputes. In any case, at the end of the said period, personal data is processed using one or more of the technical methods specified in the “Personal Data Storage and Destruction Policy” that are most suitable for the company’s business processes and activities. Records kept regarding camera monitoring are deleted every 30 days.

Person Group whose Data is Processed
and Data Categories

The data of the persons listed below are processed by Volta within the scope of this Policy. These are natural persons such as company employees, job applicants, interns, suppliers, supplier employees, subcontractors, subcontractor employees, third parties and visitors. Volta, according to the Labor Law No. 4857, persons who work under an employment contract and whose personal data are obtained through their employment relations; It processes identity, communication, location, family and proximity, criminal record, visual, education, finance, personnel, health and biometric data. Within the scope of Law No. 4857, real persons employed by subcontractors who work in a part of the main work or in auxiliary works and employees employed by suppliers with whom a supplier agreement has been signed for the purpose of service provision; identity, contact, criminal record, visual, financial, personal and health information of subcontractors and suppliers; identity, contact, visual, signature and financial information of real persons doing internship within the scope of Vocational Education Law No. 3308; The identity, contact, criminal record, visual, financial, personal and health information of employee candidates who have applied for a job by any means or who have made their CV and related information available for review by our company; identity, contact, education and location information of third parties such as family members, relatives and former employees who are not covered by this Policy; real persons who are visitors who have entered the physical premises owned by the company for various purposes; It processes identity and visual information.

Transfer of Personal Data

Volta may transfer the personal data of data owners managed by this Policy to the following categories of persons in accordance with Articles 8 and 9 of Law No. 6698:

– To Volta’s senior officials,

– To the authorities of Volta,

– Legally authorized persons, institutions and organizations, Legally authorized private legal persons,

Volta does not transfer the personal data it processes abroad within the scope of this policy. The relevant legal regulations in force regarding the processing and protection of personal data are primarily applied. In case of incompatibility between the current legislation and the Policy, Volta accepts that the applicable legislation will apply. This Policy may be amended or updated in line with new legal regulations and company policy. The new policy text, reflecting all these changes and updates, is announced to the relevant people on the website. www.volta.com.tr website uses cookies that aim to track the site usage habits of online visitors.

Camera
Monitoring Activities in Buildings and Facilities

Volta camera monitoring activities, the Law on Private Security Services and related legislation, Law No. 6698 and “Volta Motor San ve Tic. Inc. It is carried out in accordance with the personal data processing conditions listed in the Camera Monitoring Policy. Camera monitoring activity is carried out to ensure the security of the company and the health and safety of other people. Data owners are informed regarding camera monitoring activities carried out by Volta in accordance with Article 10 of Law No. 6698. Camera recordings are not shared with anyone other than authorized persons, institutions or organizations.

Force

Volta Motor San. and Tic. This Policy, which will be implemented by A.Ş., will enter into force on 9 August 2019.

KVKK Policy

VOLTA DEALERSHIP APPLICATION FORM