Dear Visitor,
In today’s world, ensuring the lawful processing of personal data and maintaining information security are among our top priorities in company policies. In this regard, please read the Privacy and Personal Data Protection Policy below and feel free to contact us for more information at any time.
1. Purpose and Scope
The Privacy and Personal Data Protection Policy outlines the methods by which personal data is obtained, the legal grounds for obtaining such data, categories of data subjects and types of personal data involved, the purposes for which preHAUS Prefabrik Yapı San. Tic. Ltd. Şti. (preHAUS), acting as the data controller under Law No. 6698 on the Protection of Personal Data, processes personal data, the technical and administrative measures taken to ensure data security, data retention periods, whether profiling or segmentation is carried out, the rights of data subjects, and how these rights can be exercised.
2. Methods of Obtaining Personal Data and Legal Grounds
Your personal data is collected by the Company, in accordance with the general principles outlined in Article 4 of the Law:
– Verbally (e.g., call centers, face-to-face communication, phone calls)
– In writing (e.g., documents filled or provided by you, emails, notifications from judicial authorities)
– Visually (e.g., camera recordings)
– Electronically (e.g., through website and/or mobile app usage)
This is done by fulfilling the obligation to inform you and, where necessary, obtaining your explicit consent.
Personal data is processed based on legal grounds including explicit consent, provisions in laws, cases of physical impossibility, necessity for contract performance, fulfillment of legal obligations, publicly available data, establishment or protection of rights, and legitimate interests of the data controller.
Special categories of personal data are processed only with explicit consent, unless permitted by law. Health data is processed with consent, limited to fulfilling obligations from legal relations. Data related to sexual life is never processed by preHAUS.
3. Data Subjects and Categories of Personal Data
Within the scope of its operations, preHAUS processes personal data from the following categories:
– Students, Alumni: Identity, Contact, Personnel & Professional Info, Financial, Legal Process, Health, Visual & Audio Records, Other
– Job Applicants, Employees, Former Employees, Interns: Identity, Contact, Financial, Work Info, Legal Process, Special Categories (Health and Criminal Record), Benefits, Family & Relatives Info, Visual & Audio, Other
– Employee Relatives: Identity, Contact, Financial, Work Info
– Customers: Identity, Contact, Financial, Customer Transactions, Visual & Audio
– Business Partners: Identity, Contact, Legal Process
– Supplier & Client Company Employees: Identity, Contact
– Supplier & Client Authorized Signatories: Identity, Contact, Legal Process
– References: Identity, Contact, Resume / Professional Experience
– Visitors: Identity, Transaction Security, Physical Security
– Website Visitors: Transaction Security
4. Purposes of Processing Personal Data
preHAUS uses personal data for the following purposes:
– Compliance with legislation, legal processes, responding to authorities, archiving
– Handling requests/complaints, communication, promotion, customer relations
– Managing access rights, risk, and information security
– Emergency and physical security, resource safety
– Internal audits, ethical processes, business continuity
– Corporate governance, strategic planning, investment processes
– Event and social responsibility management
– Education, business operation, employee satisfaction, employment contracts, benefits, HR planning, occupational health & safety, performance evaluations, permits, salary policies, career development
– Process improvements, procurement, production, logistics
– Visitor registration tracking
5. Data Transfers and Purposes
In line with the above purposes, your data may be shared with third parties outside of preHAUS. All transfers comply with Articles 8 and 9 of the Law, and are secured through administrative and technical measures. Legal protocols are signed with third parties to ensure the protection of transferred data.
6. Security Measures for Personal Data
preHAUS applies technical and administrative measures to safeguard data confidentiality, integrity, and security:
– Anti-Virus: Installed on all systems and updated regularly
– Firewall: Protects servers and internet connections from threats
– User Roles & Permissions: Access is limited to role requirements
– Threat and Incident Management: All breaches are reported and addressed immediately
– Penetration Testing: Conducted periodically to fix vulnerabilities
– Staff Training: Awareness sessions and reminders on data security
– Online Protection: SSL is used on all data collection pages
– Physical Security: Physical records are locked and accessible only by authorized personnel
– Cookie Policy: Data processed through third-party cookies is deleted upon termination
– Breach Notification: In case of a breach, data subjects and the Authority are promptly informed
7. Data Retention Periods and Disposal
preHAUS stores data according to legal or operational requirements. Data is deleted, destroyed, or anonymized when retention periods expire.
– Customers: 10 years after end of relationship
– Job Applicants: 2 years from application
– Business Partners: 10 years after end of relationship
– Employees: Personnel info stored indefinitely; others for 10 years; CCTV for 6 months
– Special Categories: Health data 15 years; Criminal records 10 years
– Call Recordings: 3 years
– Visitors: 1 week
– Online Visitors: 2 years
– Finance and Accounting: 10 years
Data deletion, destruction, and anonymization follow the Regulation on the Deletion, Destruction, or Anonymization of Personal Data. preHAUS defines a periodic destruction cycle of 6 months.
8. Rights of Data Subjects and Use of These Rights
According to Article 11 of the Law, you have the right to:
– Learn if your data is being processed
– Request information on processing
– Learn the purpose of processing and whether it’s used appropriately
– Know third parties your data is shared with
– Request correction of incomplete/incorrect data
– Request deletion/destruction of data
– Request notification of rectification/deletion to third parties
– Object to profiling-based outcomes
– Claim damages due to unlawful processing
You can fill out the application form available at http://www.prehaus.com.tr/kvkk and submit it:
– In person at: Erenler OSB Mah. Atatürk Bulvarı. No:23 Merkez / Aksaray
– Via notary with wet signature
– To prehaus@hs01.kep.tr via secure e-signature or from your registered email
