Work Force Internatıonal Eğitim ve Danışmanlık Limited Şirketi – Policy on Processing, Collection, Storage, Information and Confidentiality of Personal Data and Other Policies
Information Notice
1. Terms and Definitions:
1. Personal Data: Any information relating to an identified or identifiable natural person (e.g., name, surname, date of birth, TR ID number, phone number, e-mail address, IP address, etc.).
2. Data Controller: The natural or legal person who determines the purposes and means of processing and is responsible for establishing/operating the data recording system.
3. Data Processor: The natural or legal person who processes personal data on behalf of the controller based on its authorization.
4. Explicit Consent: Consent given freely on the basis of clear information for a specific matter.
5. Anonymization: Processing personal data so that the data subject cannot be identified, even by matching with other data.
6. Processing of Personal Data: Any operation performed on data such as collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification, or blocking use.
7. Special Categories of Personal Data: Data concerning race, ethnic origin, political opinion, philosophical belief, religion/sect/other beliefs, clothing, association/foundation/union membership, health, sexual life, criminal convictions and security measures, as well as biometric/genetic data.
8. Data Breach: Unlawful processing, access, or loss of personal data resulting in unauthorized disclosure, alteration, or destruction.
9. Processing Inventory: Inventory kept by controllers describing processing activities, purposes, categories, recipient groups, data subject groups, and methods used.
10. Authority: The Turkish Personal Data Protection Authority (KVKK).
11. Data Subject: The individual whose personal data are processed (“relevant person”).
12. Third Party: Natural/legal persons to whom personal data may be transferred (excluding the controller and processor).
13. Data Recording System: A structured system where personal data are processed according to specific criteria.
2. Data Management & Identity of the Controller Under Law No. 6698 (KVKK), Work Force Internatıonal Eğitim ve Danışmanlık Limited Şirketi (“Work Force”) acts as Data Controller. Work Force undertakes to protect the confidentiality of customer information and prevent unauthorized disclosure.
All staff are obliged to use information only within legal limits and for duty-related purposes, and to comply with laws on privacy and personal data protection. Detailed information is available on our website; policies are carefully prepared and regularly updated.
3. Processing, Cross-Border Transfers and Purposes
In principle, prior information and explicit consent are required under KVKK. Exceptions include:
● Public interest / official requests
● Legal obligations
● Emergencies (e.g., protection of life)
● Contractual necessity
● Legal obligations of the controller
● Data made public by the data subject
● Establishment, exercise, or defense of legal claims
● Legitimate interests of the controller without prejudice to fundamental rights/freedoms.
Outside the exceptions, explicit consent is essential.
Work Force processes personal data—within KVKK—for the following purposes:
1) Legal & Regulatory Compliance: Compliance with local/international regulations and group KYC/risk policies (incl. AML). For cross-border transfers, products/clouds of Amazon/Microsoft may be used under standard contractual clauses; audits, ethics, receivables, creditworthiness, internal audits/investigations, risk management, security and administrative processes.
2) Overseas Employment Support: Communication between candidates and companies and preparation/sharing of required information and documents.
3) Human Resources Management: HR policy implementation, staffing, occupational health and safety obligations.
4) Operational Efficiency & Communication: Internal communications/processes; evaluations re customers/partners; risk analyses and compliance monitoring; transaction security (e.g., transmitting/processing data of persons to work abroad), document handling, job-matching/placement processes.
5) Customer Relations & Marketing: Personalization of products/services, effective marketing strategies, activities for customer satisfaction; information security and after-sales support.
6) Strategy & Business Development: Defining/implementing corporate strategies; market/sector analyses.
7) Financial & Administrative Management: Coordination of finance, communications, market research; system/application management, procurement, legal affairs.
8) Corporate Reputation & Relationship Management: Partnerships/suppliers, CSR projects, protecting/developing corporate image.
9) Contract & Process Management: Processing contract-party data, receiving/evaluating improvement suggestions, communication activities.
10) Physical & Information Security: Securing premises, information security processes, legal follow-up.
4. Transfer of Personal Data
Data are processed lawfully, for specified legitimate purposes, accurately and up-to-date, and retained as necessary. Transfers are carried out in accordance with Articles 8–9 KVKK with appropriate technical/organizational safeguards, including to recipients in Turkey and abroad (on secure servers/IT with adequate safeguards and, where applicable, standard contractual clauses).
5. Collection, Method, and Legal Basis
Data are collected under the İŞKUR Law (No. 4904), Labor Law (No. 4857), and related regulations through contracts/forms/documents—via your consent/e-signature, written/digital applications to sales teams, etc. Channels:
● Headquarters
● Online forms/document uploads
● Physical mail
● Customer interviews
● Phone records and other oral/written/electronic means.
Collection may be fully/partly automated or manual within a recording system. Data may also be obtained from our affiliates, program partners, third-party providers, public authorities, domestic/foreign banks, exchanges, depositories, and other third parties. Processing supports service quality and legally required capital-/labor-market processes (incl. SPK, BİST, TSPB, TCMB, MASAK, GİB, YTM, Takasbank, MKK, KVKK, İŞKUR, SGK, etc.).
Special categories of data are processed only with legal basis, contractual safeguards, and high standards of protection/confidentiality.
Biometrics & Identity Verification:
For security/identity verification, ID/passport scanning, facial recognition, fingerprint scanning, and liveness checks may be used (including short videos/photos).
We ensure transparency, obtain explicit consent before initiation, and protect biometric data with strong security; data are used solely for identity verification.
Contact: For questions, use the contact details provided in this text.
6. Rights of the Data Subject (Art. 11 KVKK)
● Learn whether data are processed
● Request information about processed data
● Learn purposes and whether processing is compatible with those purposes
● Learn recipients in Turkey/abroad
● Request rectification of incomplete/incorrect data and notification to recipients
● Request deletion/destruction when reasons lapse and notification to recipients
● Object to decisions based solely on automated processing
● Claim compensation for damages due to unlawful processing.
Applications must first be made to the controller (no direct complaint to the Authority under Art. 14 KVKK).
Application to:
● Controller: Work Force Internatıonal Eğitim ve Danışmanlık Limited Şirketi
● Address: Cevizli Mah. Zuhal Cad. Ritim İstanbul A1 Blok No:46 A İç Kapı No: 369 Maltepe/İSTANBUL
● E-mail: info@workforceinternationaldanismanlik.com
Required in applications: name/surname (and signature if written), TR ID (for Turkish citizens) or nationality/passport/ID no. (for foreigners), address for notification, e-mail/phone/fax (if any), and subject matter; attach relevant info/documents. Requests are concluded within 30 days; fees may apply per KVKK tariff.
Privacy Rights (Policy)
Data subjects have the right to access and rectify personal data; request deletion under conditions; and object to processing.
Privacy Policy (Summary)
1. Introduction: Work Force attaches utmost importance to protecting personal data of customers, employees, and other data subjects.
2. Controller/Processor: In line with KVKK, Work Force ensures lawful processing and effective process management.
3. Methods & Purposes of Collection: physical forms, call centers, website/mobile apps, e-mails, digital platforms; purposes include service improvement, legal compliance, HR/operations, and information security.
4. Domestic & Cross-border Transfers: Conducted in line with KVKK with standard clauses/binding rules where applicable; technical/organizational measures are applied.
5. Rights under Art. 11 KVKK (see above). Contact details as stated above.
6. Data Security: Measures include encryption, authorization systems, up-to-date anti-virus; employees receive privacy trainings.
