This notice has been prepared in accordance with the Personal Data Protection Law No. 6698 in order to inform employees about the purposes and scope of processing their personal data within FullTatil.

Data Controller

The data controller on behalf of FullTatil is Yavuz Abrak Turizm Sey. Hiz. Tic. Ltd. Şti.

Address: Kurtuluş Mh. Subaşı Sk. No:2 A Adapazarı / Sakarya

Phone: +90 264 273 88 88

E-mail: info@siouxglobal.com

Purposes and Legal Grounds for Processing Personal Data

Personal data of employees and job applicants may be processed for the following purposes:

• Carrying out recruitment, evaluation and selection processes,
• Implementing human resources policies and maintaining personnel records,
• Managing payroll, performance evaluation, leave and employee benefits,
• Organizing working conditions and ensuring compliance with legislation,
• Fulfilling occupational health and safety requirements,
• Complying with legal obligations and making mandatory notifications.

Such data are processed based on legal grounds set forth in the Law, such as performance of a contract, explicit consent where required, and compliance with legal obligations.

Categories of Personal Data Processed

Personal data processed may include identity information, contact details, education and professional background, bank and salary information, health and leave data, and performance and employment records. These data may be stored in electronic and/or physical environments.

Rights of Data Subjects

Pursuant to Article 11 of the Law, employees have the right to learn whether their personal data are processed, request information, learn the purpose of processing and third parties to whom data are transferred, request correction of inaccurate or incomplete data, request deletion or destruction of data, and object to processing activities. Requests may be submitted to the company in writing or by e-mail.

Transfer of Personal Data

Employees’ personal data may be transferred to authorized public institutions, payroll and human resources service providers, business partners and, where necessary, group companies, in accordance with the law and with appropriate security measures.

Data Security and Retention Periods

Personal data are protected against unauthorized access and unlawful processing through appropriate technical and administrative measures. Data are retained for the periods stipulated by legislation or as required for processing purposes.

Notification and Updates

This information notice is provided to employees or candidates through e-mail, onboarding processes or other appropriate communication channels and may be updated in line with legal or organizational changes.