EPPSO.ai - İlkelerimiz

CLARIFICATION TEXT ABOUT THE PROCESSING OF PERSONAL DATA AT EPPSO GAYRİMENKUL TEKNOLOJİLERİ ANONİM ŞİRKETİ

EPPSO Gayrimenkul Teknolojileri Anonim Şirketi (”EPPSO.ai”) is a company located at Suadiye Mahallesi Berna Sokak No: 6 Kat: 2 D:3 PO Box: 34740 Kadıköy, Istanbul, Turkey. This policy has been prepared in order to explain the data processing activities of EPPSO.ai within the scope of the relevant legislation and the rights granted to you for these activities.

EPPSO.ai carries out data collection and processing in accordance with the relevant legal regulations. We would therefore like to inform you in our capacity as Data Controller.

What Data Do We Collect?

Information you provide to us: We collect the data you provide to us when accessing our services. This data may include information such as your name, surname, address, and contact details. The processing of this information is necessary for the provision of the services we offer to you. To access our services, we only require your name, surname, email address, and mobile phone number for membership registration. Any personal data beyond this is determined within the framework of contractual relationships such as employment contracts, service contracts, or lease agreements between you and the Corporate Users associated with the service, depending on the type of service you wish to use. At this point, it should not be understood that EPSSO is involved in any way, nor that you have an obligation to share all the personal data listed below.

Website-based data: When you use our website, 'cookies' and similar systems collect data about the way you use our website. This data is collected in order to improve the services we offer to you and our website design.

Data collected from third parties:Information provided by other companies such as cargo companies, payment service providers, etc. that help us to perform our services is also processed.

The data being collected are summarized under the following headings:

Personal Data: Name, family name, photograph, date and place of birth, ID Number, e-mail address, telephone number, title, nationality, signature sample;

Online Data: The IP address of the computer or mobile device you are using while accessing our sites and services, your usage data collected by cookies while using our website;

Service Data: Information on payment, payment methods, the service purchased, the subject of the service, the product subject to the service and other information.

Data collected by EPPSO.ai:

I. USERS
i. Identity Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Name and Family name T.C. Identity No Photo Date of Birth Marital Status Nationality Identity Card / Identity Card Serial Number Identity Card image / Identity Card image Signature Driving License Type Driver's License Serial No. SRC Information Religious Knowledge Marital Status Blood Type	Sharing with Corporate Users and preferred Users, Execution and Supervision of Business Activities, Execution of Contract Processes, Execution of Communication Activities.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
ii. Contact Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cell Phone Number Workplace Telephone Number Email Address Residence Address Workplace Address Name, family name and proximity status of the relative to be notified in case of emergency Phone Number of Relative to Notify in Case of Emergency	Sharing with Corporate Users and preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints, Execution of Advertising/Campaign/Promotion Processes.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iii. Personal Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Military Service Position/Title Information Educational Background and Details Work History and Details Employer Company Information Employment Notification Work History Employer Company Information	Sharing with Corporate Users and preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iv. Professional Experience Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Diploma Information Vocational Education Information Course Information Seminar Information Certificate Information Computer Knowledge Occupational Health and Safety Training Certificates Technical Competence Certificate Competency Area of Specialization Information	Sharing with Corporate Users and preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
v. Marketing Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cookie Registrations	Execution of EPPSO.ai Product and Service Loyalty Processes, Execution of After-Service Support Services, Execution of Customer Relationship Management Processes, Execution of Customer Satisfaction Activities, Execution of Marketing Analysis Studies, Execution of Marketing Processes of Products and Services, Execution of Business Activities, Execution of Advertising/Campaign/Promotion Processes.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
vi. Legal Status Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Criminal Record Criminal Registry Record	Sharing with Preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
vii. Process Security Data
Processed Personal Data	Processing Purpose	Legal Basis and Justification
IP Address Information Website Login and Logout Information	Execution of Information Security Processes, Execution of Audit / Ethical Activities, Execution of Access Authorizations, Execution of Communication Activities, Execution and Supervision of Business Activities, Management of Customer Relationship Management Processes, Execution of Risk Management Processes, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
viii. Health Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Disability Information Disability Rate Disability Type Height Weight Information Smoking Information	Sharing with Preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
ix. Other Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Location/Location Information Building Entrance - Exit Information	Sharing with Preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
II. CORPORATE USERS (in addition to those related to Users above)
i. Identity Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Name Family name Trade Name Tax Identification Number Affiliated Tax Office Identity Number Date of Birth	Execution and Supervision of Business Activities, Execution of Contract Processes, Execution of Communication Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
ii. Contact Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cell Phone Number Workplace Telephone Number Email Address Fax Number Workplace Address Registered Electronic Mail (REM) Address	Sharing with Corporate Users and preferred Users, Execution of Activities in accordance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints, Execution of Advertising/Campaign/Promotion Processes.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iii. Finance and Accounting Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Bank Account Number Credit Card Information Invoice Information Registered Electronic Mail Address	Execution of fiscal, accounting and financial transactions, including sales-related invoicing activities, and risk management, Execution of Activities in accordance with the Legislation, Execution of Financial and Accounting Affairs, Execution and Supervision of Business Activities, Execution of Goods and Service Sales Processes, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iv. Marketing Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cookie Registrations Shopping History Information Obtained through Campaign Information	Execution of EPPSO.ai Product and Service Loyalty Processes, Execution of After-Service Support Services, Execution of Customer Relationship Management Processes, Execution of Customer Satisfaction Activities, Execution of Marketing Analysis Studies, Execution of Marketing Processes of Products and Services, Execution of Business Activities, Execution of Advertising/Campaign/Promotion Processes.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
v. Process Security Data
Processed Personal Data	Processing Purpose	Legal Basis and Justification
IP Address Information Website Login and Logout Information	Execution of Information Security Processes, Execution of Audit / Ethical Activities, Execution of Access Authorizations, Execution of Communication Activities, Execution and Supervision of Business Activities, Management of Customer Relationship Management Processes, Execution of Risk Management Processes, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
III. WWW.EPPSO.ai.AI VISITORS
i. Process Security Data
Processed Personal Data	Processing Purpose	Legal Basis and Justification
IP Address Information Website Login and Logout Information	Execution of Information Security Processes, Execution of Audit / Ethical Activities, Execution of Access Authorizations, Execution of Communication Activities, Execution and Supervision of Business Activities, Management of Customer Relationship Management Processes, Execution of Risk Management Processes, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
IV. EPSSO SERVICE PROVIDERS AND SUPPLIERS
i. Identity Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Name Family name Trade name Tax Identification Number Affiliated Tax Office Identity Number Date of Birth	Execution and Supervision of Business Activities, Execution of Contract Processes, Execution of Communication Activities.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
ii. Contact Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cell Phone Number Workplace Telephone Number Email Address Fax Number Workplace Address Registered Electronic Mail (REM) Address	Execution and Supervision of Business Activities, Execution of Contract Processes, Execution of Communication Activities, Execution of Activities in Compliance with the Legislation, Follow-up and Execution of Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Execution of Risk Management Processes, Follow-up of Requests/Complaints	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iii. Finance and Accounting Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Bank Account Number Credit Card Information Invoice Information KEP Address	Execution of fiscal, accounting and financial transactions, including sales-related invoicing activities, and risk management, Execution of Activities in accordance with the Legislation, Execution of Financial and Accounting Affairs, Execution and Supervision of Business Activities, Execution of Goods and Service Sales Processes, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Storage and Archive Activities.	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
V. EPPSO.ai EMPLOYEES
i. Identity Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Name and Family name Identity No Photo Date of Birth Marital Status Nationality Identity Card / Identity Card Serial Number Signature Driving License Type Driver's License Serial No. Religious Knowledge Marital Status Blood Type	Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Planning Human Resources Processes and Ensuring Business Continuity Execution of Communication Activities Execution of Business Continuity Ensuring Activities Conducting Training Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
ii. Contact Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Cell Phone Number Workplace Telephone Number Email Address Residence Address Workplace Address Name and Family name of the Relative to be Notified in Case of Emergency Telephone number of the relative to be notified in case of emergency (Name- Family name, degree of closeness, Telephone number)	Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Planning Human Resources Processes and Ensuring Business Continuity Execution of Business Continuity Ensuring Activities Conducting Training Activities Execution of Occupational Health / Safety Activities Execution of Communication Activities Execution of Business Continuity Ensuring Activities Conducting Training Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iii. Personal Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Military Service Position/Title Information Educational Background and Details Work History and Details Employer Company Information Employment Notification Permission Data	Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Planning Human Resources Processes and Ensuring Business Continuity Recruitment activities termination of employment contract due to military service or completion of leave procedures Planning Human Resources Processes Execution of Business Continuity Ensuring Activities Execution of Training Activities Conducting Training Activities Execution of Occupational Health / Safety Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
iv. Professional Experience Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Diploma Information Vocational Education Information Course Information Seminar Information Certificate Information Computer Knowledge Occupational Health and Safety Training Certificate Technical Competence Certificate Competency and Area of Specialization Information	Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Planning Human Resources Processes and Ensuring Business Continuity Recruitment activities termination of employment contract due to military service or completion of leave procedures Planning Human Resources Processes Execution of Business Continuity Ensuring Activities Execution of Training Activities Conducting Training Activities Execution of Occupational Health / Safety Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party
v. Financial Data
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Salary details payrolls premium entitlements premium amounts minimum subsistence allowance information private pension premium amount bank account information advance received information bonus information	Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees Execution of Finance and Accounting Affairs Execution of Activities in Compliance with the Legislation Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Planning Human Resources Processes Execution of Business Continuity Ensuring Activities Execution of Wage Policy Execution of Information Security Processes	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
vi. Legal Status Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Criminal Record Criminal Registry Record Employer-related records of legal proceedings of employees such as lawsuits, execution or mediation (such as sending a writ of attachment to the employee's salary from the execution file to which the employee is indebted)	Execution of Risk Management Processes Execution of Business Continuity Ensuring Activities Execution of Occupational Health / Safety Activities Execution/Supervision of Business Activities Planning Human Resources Processes Follow-up and Execution of Legal Affairs Execution of Assignment Processes Execution of Finance and Accounting Affairs Execution of Activities in Compliance with the Legislation Conducting Audit / Ethics Activities Employment Contract and Legislation for Employees Fulfillment of Obligations Execution of Information Security Processes Emergency management, communication with relevant persons in emergency situations	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public the establishment, exercise, or protection of a right.
vii. Process Security Data
Processed Personal Data	Processing Purpose	Legal Basis and Justification
IP Address Information Website Login and Logout Information E-mails sent from and received by business e-mail accounts with eppso.ai extension	Execution of Risk Management Processes Execution of Business Continuity Ensuring Activities Execution of Occupational Health / Safety Activities Execution/Supervision of Business Activities	processing is necessary to comply with a legal obligation the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller
viii. Health Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Blood Type Disability Information Disability Rate Disability Type Height Weight Information Smoking Information The requested reports to be provided by the workplace physician	Conditions for the processing of health data in accordance with the relevant legislation the explicit consent of the data subject. being expressly provided for by law. Execution of Assignment Processes relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public. the establishment, exercise, or protection of a right	Conditions for the processing of health data in accordance with the relevant legislation the explicit consent of the data subject. being expressly provided for by law. relating to personal data made public by the data subject and being in accordance with the data subject's intention to make it public. the establishment, exercise, or protection of a right.
ix. Other Information
Processed Personal Data	Processing Purpose	Legal Basis and Justification
Signature Vehicle license plate Body Knowledge Shoe Number Employee entry and exit registration information	Execution of Occupational Health / Safety Activities Execution/Supervision of Business Activities Planning Human Resources Processes Execution of Activities in Compliance with the Legislation Conducting Audit / Ethics Activities Execution of Employee Benefits and Benefits Processes Execution of Supply Chain Management Processes Ensuring Business Continuity Execution of Activities Execution / Supervision of Business Activities Execution of Audit / Ethics Activities Ensuring Physical Space Security Conducting Audit / Ethics Activities	the data subject's consent to the processing of personal data for one or more specific purposes the processing is necessary for the purposes of those interests, except where the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data outweigh the legitimate interests pursued by a controller or a third party

Why do we collect this data?

We see it as our duty to eliminate any question marks that may arise in the minds of our customers about why this data is collected.

First of all, let us make it clear that we collect your personal data only to the extent necessary for the realization of the service we provide to you.

The reason we collect your personal data is to fulfill the service we provide to you in a healthier way.

The data we collect and process is important for the accurate, fast and secure provision of our services.

Another reason stems from the content of the information and document sharing services we offer through our website. Thanks to the services we provide, your employers or the persons and institutions that your employers work for (such as senior employer, owner, security company, business center/mall/plaza management, etc.) can quickly forward documents such as residence certificate, criminal record, health report, certificate of mastery/expertise to both your employers and the persons and institutions that your employers work for.

Your personal data, such as name and address, is necessary for the smooth execution of your payment transactions and customer services to be provided to you. The information you provide to us is used to verify that your payment instruments are not used improperly and to resolve any problems that may arise quickly.

The data we collect on our website is necessary to improve the services we offer you and, if necessary, to provide you with new services and products.

As you use our website, cookies transmit your usage style to us. In this way, we design our website according to you.

Service data is necessary for your and EPPSO.ai's security. Payment information and instruments are required to confirm that credit cards and other payment instruments have not been used improperly. This is used to ensure the financial security of both you and EPPSO.ai.

It should be noted that all our data collection and processing activities are carried out within the limits permitted by the relevant legal regulations.

How Do We Collect Your Data?

The data we collect is mostly provided by you. However, information about online behavior is collected through Cookies and other systems. Again, we may also collect data as a result of the provision of data to us by our business partners from whom we receive support for the realization of our services.

When Do We Collect Your Data?

Your personal data is collected when you use our products and services or when you visit our website.

Where Do We Keep Your Data?

As EPPSO.ai, we work with a data storage service provider headquartered in Türkiye for data storage services. This data storage service provider is subject to the legislation provisions of the Republic of Türkiye and keeps your data in accordance with the relevant legal regulations.

The servers containing your personal data are protected by the most up-to-date security systems provided by the relevant company. Digitally encrypted servers are also equipped with password management and threat detection hardware to prevent unauthorized access.

The storage of your data is also carried out within the limits stipulated by the relevant legislation. Your data will be stored only for as long as necessary for the provision of our services, after which time your data will be anonymized or destroyed.

Do We Transfer Your Personal Data Abroad?

As EPPSO.ai, in order to carry out the services and activities we offer and to fulfill the commitments we have made to the Users who receive our services, in accordance with legal provisions;

If there is an adequacy decision issued by the Board regarding the country to which personal data will be transferred, the sectors within that country, or international organizations, then one of the processing conditions stipulated in Articles of the Law must be met, and within this scope,
If there is no adequacy decision, provided that one of the processing conditions stipulated in Articles of the law is met, and provided that the relevant persons can exercise their rights and have access to effective legal remedies in the country to which the transfer will be made; if one of the appropriate safeguards specified in the Law is provided by the parties,
If there is no adequacy decision and no appropriate safeguards can be provided, if the exceptional transfer cases stipulated in the Law exist (e.g., the explicit consent of the relevant person, transfer from public registers), in this case, provided that it is incidental,the relevant person's information may be shared with Corporate Users abroad by taking the necessary technical and administrative measures.

Sharing Your Personal Data

Your personal data may only be shared with third parties to the extent necessary for the provision of our services or where we are obliged by law to share data.

Your personal data may be shared with third parties in order to provide our services, for example, your employer or third parties or institutions where you have authorized the submission of your documents.

Your online usage data may be shared with our business partners from whom we receive support to improve your site experience.

Data about the services you receive may be shared with relevant institutions and organizations if necessary.

Marketing and Advertising

As EPPSO.ai, we would like to inform you about our services and products to the extent you allow.

If you do not wish to make use of this service, it is possible to request that you do not receive any e-mails or messages. Even if you have previously consented to these communications, it is possible to opt-out at any time.

Your Rights

As EPPSO.ai, we would like to make sure that you are informed about the rights you have with regard to the protection of your personal data. Your fundamental rights are as follows:

Right of Access:You have the right to request what personal data we have collected about you. This data will be compiled by us and transmitted to you. Depending on the mode of transmission and your requests, the fee for this service will be borne by you.

Right of Correction: If you think that there is any inaccuracy or incompleteness in the personal data collected about you, you can contact us for the correction of this data and the elimination of deficiencies.

Right to Erase: You can request that the personal data we hold belonging to you be deleted and destroyed. In order to fulfill this right, the use and processing of such data is not essential for Eppso.

Right to Restriction: Under certain circumstances, you can request that we restrict the use and processing of your data. In this case, your data may be saved, but may not be used for any purpose.

Right to Portability: You have the right to request your data in digital or physical formats. You may use this data in any way you see fit and even transfer it to another data controller.

You may reach EPPSO.ai for the exercise of these rights through the following way:

Phone :+09 216 803 56 64

Mail : [email protected]

Adres :Suadiye Mahallesi Berna Sokak No:6 Kat: 2 D:3 PO Box: 34740 Kadıköy, Istanbul, Turkey

Within 30 days from the date you send us your request for the exercise of these rights, we will return to you within 30 days from the date you submit your request to us that your request has been fulfilled or, if it cannot be fulfilled, why it cannot be fulfilled. If your request is denied, the response is deemed insufficient, or no response is provided within the specified timeframe, you have the right to file a complaint within thirty days of receiving the response and, in any case, within sixty days of the application date.

Cookie Policy

EPPSO.ai uses cookies in order to improve service quality. These cookies are used for the following purposes:

Remembering your login to the site,
Understanding how you use the site,
Compilation of your product and service preferences,
Identifying customized services and products based on your previous usage,

Our Website may use several different types of cookies. These are:

Function, i.e. your usage data for the site. For example, remembering your site language and country preferences falls into this category.
Advertising, that is, cookies that enable the processing of your behavioral usage data to provide advertising services and to agree with business partners providing advertising services fall into this category.

Policy Changes

EPPSO.ai regularly updates its privacy policy and the related information text in order to better ensure the protection of personal data. These changes are uploaded to our sites as they are implemented. This policy was last updated on 05/09/2025

Contact

For your questions and requests, you may contact us through:

Telephone :(+90) 216 803 56 64

E-mail :[email protected]

Mail : Suadiye Mahallesi Berna Sokak No:6 Kat: 2 D:3 PO Box: 34740 Kadıköy, Istanbul, Turkey