Our company, Tüdaş Gayrımenkul ve Enerji A.Ş (hereinafter referred to as “TÜDAŞ“), is the owner of Bolkan Center and the Data Controller within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as “KVKK”).
We emphasize that we prioritize the security of your personal data processed on the Bolkan Center’s website (bolkancenter.com.tr), owned by TÜDAŞ Gayrımenkul ve Enerji A.Ş., in our capacity as Data Controller. Through this Clarification Text prepared in accordance with the KVKK, we aim to inform you.
We should note that your personal data is collected in electronic and/or physical environments and processed based on one or more of the legal grounds specified in Articles 5 and 6 of the Law No. 6698, or with your explicit consent. This Clarification Text explains the purposes for which your data will be processed, to whom and for what purposes the processed data may be transferred, the method and legal basis for data collection, the rights of the relevant person, and our data destruction policy. Additionally, when necessary, explicit consent is obtained.
Collection, Processing, and Purposes of Processing Personal Data:
1.1. TÜDAŞ is the owner of the floors in the A-B-C blocks of Bolkan Center located in Şişli, as well as the shopping floors and parking area in the same building. It manages all administrative operations of the building.
1.2. In this context, the personal data of all visitors to the building, regardless of the reason for their visit, is requested and processed to ensure the security of Bolkan Center, where TÜDAŞ operates, and to fulfill its obligations under the relevant legislation.
Similarly, personal data of employees, managers, visitors to the companies located in the building, and users of the parking area, including parking subscribers, are requested and processed for the same reasons to provide services related to the entry and exit of their personnel and guests via the turnstile system.
1.3. These personal data are obtained through TÜDAŞ software programs and the personnel turnstile system, through the information shared by legal entities, through the Bolkan Center website (bolkancenter.com.tr), and through information obtained by reception personnel and security camera footage, such as license plate and identification details.
1.4. TÜDAŞ requests and processes the personal data of its employees to complete the necessary documents for the personnel file, as required by the Labor Law and the Occupational Health and Safety Law in effect, to facilitate their registration with the Social Security Institution (SGK). These personal data are obtained during the recruitment process, with the individual’s explicit consent, by manual delivery.
1.5. TÜDAŞ requests and processes personal data from individuals applying for jobs to communicate with them during the recruitment process for interview purposes and to determine whether the candidate’s qualifications and experience align with the open position. These personal data are obtained with the candidate’s explicit consent by filling out the application form, responding to questions asked during the interview, or through CV viewing methods offered by human resources software programs (such as Kariyer.net, LinkedIn) that provide job posting and candidate pool services.
1.6. TÜDAŞ requests and processes personal data from contractors and subcontractors, with whom it has signed contracts for services such as construction, mechanical works, renovation, infrastructure, maintenance, repair, security, and cleaning, to fulfill its obligations under the Occupational Health and Safety Law and related regulations, and to determine and monitor whether contractors and subcontractors are working under insurance coverage during the performance of their duties. These personal data are obtained from the documents included in the progress payment files within the scope of the signed contracts.
Principles of Processing Personal Data:
Personal data are processed in compliance with the personal data processing conditions specified in Articles 4, 5, and 6 of the KVKK and for the purposes stated in this document, limited to and in proportion to those purposes, with the following principles:
Principles of Transferring Personal Data:
TÜDAŞ may transfer personal data of data subjects to third parties and institutions within the scope of the personal data processing conditions specified in Articles 5 and 6 of the KVKK and limited to the purposes stated in this document, in compliance with Articles 8 and 9 of the KVKK. These third parties and institutions include:
Obligations Regarding the Protection of Personal Data:
TÜDAŞ takes the necessary technical and administrative measures to prevent the unlawful processing, unlawful access to, and ensure the preservation of the personal data it processes, and carries out or has carried out the necessary audits within this scope. In the event that processed personal data is unlawfully accessed by third parties, despite all technical and administrative measures being taken, TÜDAŞ will notify the relevant units as soon as possible.
Principles Regarding the Deletion or Destruction of Personal Data:
If the reasons for processing personal data cease to exist, TÜDAŞ will delete or destroy the personal data either directly or upon the request of the data subject.
Personal data will be deleted or destroyed at the end of the legal periods or the periods specified in the company’s internal policies in accordance with the “Regulation on the Deletion, Destruction, or Anonymization of Personal Data” specified in Article 7 of the KVKK.
After the deletion of personal data, the deleted data will not be accessible or usable in any way.
TÜDAŞ will determine the time intervals for periodic deletion. In any case, this period will not exceed two years. Personal data subjects may request the deletion or destruction of their personal data by applying to our company. In such cases, the data subject’s request will be concluded within 30 days at the latest after the conditions for processing personal data have ceased to exist, and the data subject will be informed. If the conditions for processing personal data have ceased to exist and the personal data in question has been transferred to third parties, our company will inform the third party. If the conditions for processing personal data have not completely ceased to exist, our company may reject the request, explaining the reason, and notify the data subject within 30 days at the latest.
Rights of the Personal Data Subject Under Article 11 of the KVKK:
During the acquisition of personal data, the data subjects have the right to learn whether their personal data is being processed, if so, what these data are, for what purpose the personal data will be processed, and whether they are being used in accordance with their purposes, as well as to whom the processed personal data is transferred. They can exercise these rights by sending a request form to the email address tudas@tudas.com.tr, or by sending a registered letter, notarized document, or hand-delivered petition to the address Merkez Mah. Abide-i Hürriyet Cad. No:211 Şişli/İstanbul.
Personal data subjects must include their identity documents that they have submitted to TÜDAŞ to verify their identity with their request forms or petitions.
Individuals who determine that their personal data has been processed incompletely or incorrectly can always request the correction of the collected personal data, the deletion or destruction of personal data under the conditions specified in Article 7 of the KVKK, and the notification of these actions to third parties to whom the personal data has been transferred.
In the following cases, there is no need for your explicit consent to process and transfer personal data:
This Clarification Text is published on the Bolkan Center website (bolkancenter.com.tr) owned by TÜDAŞ and is disclosed to the public.
Any updates or changes to this Clarification Text will be deemed effective upon publication on the Bolkan Center website.