KVKK Disclosure Notice

Under the KVKK, your personal data may be processed by UKASIS Certification as the data controller within the scope described below.

• Title: UKASIS Certification and Inspection Services
• Address: Ataşehir, Barbaros Mah. No:12, 34746 Istanbul / Turkey
• Email: info@ukasis.com · Phone: 0850 000 00 00

The Data Controller Representative and, if applicable, the contact person will be announced in the Data Controllers Registry Information System (VERBIS) once the legal infrastructure is completed.

Within the scope of our activities, your personal data in the following categories may be processed depending on the nature of our relationship with you:

• Identity information: name, surname, Turkish ID number, date of birth (for personnel certification applications).
• Contact information: email address, phone number, address, institution/company information.
• Customer/application information: certification request, scope, exam and evaluation records, certificate number.
• Transaction security information: IP address, cookie records, site browsing and session data.
• Financial information: invoice and payment details (within the scope of a contractual relationship).
• Professional experience information: CV, education and certificate history (within the scope of personnel certification).

Special categories of personal data you submit to us are processed only where your explicit consent exists or where expressly provided for by law.

Your personal data is processed for the following purposes based on the conditions set out in Articles 5 and 6 of the KVKK:

• Providing certification, inspection, and training services, and establishing and performing the contract.
• Carrying out application, exam, evaluation, and certificate processes, and enabling certificate validity checks.
• Fulfilling obligations arising from accreditation (TÜRKAK) and relevant standards.
• Meeting legal obligations and retention/reporting requirements arising from legislation.
• Responding to contact requests and sending information notices and announcements.
• Ensuring information security and operating our website.

Your personal data may be transferred to the following parties, limited to the purposes above and in accordance with the conditions in Articles 8 and 9 of the KVKK:

• Accreditation bodies: TÜRKAK and relevant national/international recognition bodies (within the scope of audits).
• Authorized public institutions and organizations: courts, administrative authorities, and regulatory bodies upon request and as required by legislation.
• Business partners and suppliers: auditors, consultants, and infrastructure providers from whom support is received to provide the service.
• Service providers: solution partners providing hosting, email, and IT infrastructure.

Transfers abroad are carried out only where the conditions stipulated in the KVKK are met and, where necessary, your explicit consent is obtained.

Your personal data is collected through forms and application channels on our website, email, telephone, contracts, and physical and electronic media, by automated and non-automated methods.

Legal grounds relied upon

• Being directly related to the establishment or performance of a contract (Art. 5/2-c).
• Compliance with the data controller’s legal obligation (Art. 5/2-ç).
• Being necessary for the establishment, exercise, or protection of a right (Art. 5/2-e).
• Legitimate interest, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f).
• Obtaining your explicit consent where the above conditions are not met (Art. 5/1).

Under Article 11 of the KVKK, you have the following rights regarding yourself by applying to the data controller:

1. To learn whether your personal data is being processed.
2. To request information if it has been processed.
3. To learn the purpose of processing and whether it is used in line with that purpose.
4. To know the third parties to whom it is transferred domestically or abroad.
5. To request correction if it has been processed incompletely or incorrectly.
6. To request deletion or destruction within the framework of the conditions in Article 7 of the KVKK.
7. To request notification of correction, deletion, and destruction operations to third parties to whom it has been transferred.
8. To object to a result against you arising from analysis exclusively by automated systems.
9. To claim compensation for damages if you suffer loss due to unlawful processing.

You may submit your requests under Article 11 of the KVKK through the channels below, together with information verifying your identity. Your applications will be concluded free of charge within no later than 30 days, depending on the nature of the request; if the process requires an additional cost, the fee in the tariff set by the Board may be charged.

For detailed information on data processing activities carried out through cookies, you can review the Cookie Policy, and for general principles, the Privacy Policy.