Privacy and PDPL

Data Controller
In accordance with the Personal Data Protection Law No. 6698 (“Law”), your personal data is processed by Afacanpark Çocuk Oyun Grupları ve Merkezleri Ltd. Şti. (“Afacanpark” or “Company”) in the capacity of data controller.

Purposes of Processing Personal Data
Your personal data is processed for the following purposes:

• Managing emergency processes,
• Conducting information security processes,
• Handling application and selection processes for scholarship candidates,
• Managing recruitment and placement processes for candidates and interns,
• Conducting application processes for job candidates,
• Managing employee satisfaction and engagement processes,
• Fulfilling obligations arising from employment contracts and legislation,
• Administering benefits and fringe benefits for employees,
• Conducting audit/ethical activities,
• Providing training activities,
• Managing access authorizations,
• Ensuring compliance with legal regulations,
• Performing financial and accounting processes,
• Managing loyalty processes related to the company/products/services,
• Ensuring physical security of facilities,
• Managing assignment processes,
• Following up on and conducting legal affairs,
• Managing communication activities,
• Planning human resources processes,
• Conducting/monitoring business activities,
• Managing occupational health and safety activities,
• Receiving and evaluating suggestions for improving business processes,
• Ensuring business continuity,
• Conducting post-sales support services,
• Managing sales processes of goods/services,
• Managing procurement processes of goods/services,
• Conducting production and operational processes of goods/services,
• Managing customer relationship processes,
• Conducting activities related to customer satisfaction,
• Organizing and managing events,
• Conducting marketing analysis,
• Managing performance evaluation processes,
• Administering advertisement/campaign/promotion processes,
• Managing contract processes,
• Conducting sponsorship activities,
• Tracking requests/complaints,
• Ensuring the security of movable property and resources,
• Managing supply chain processes,
• Implementing wage policy,
• Conducting product/service/marketing processes,
• Handling work and residence permits for foreign personnel,
• Verifying compliance with competition terms,
• Managing investment processes,
• Conducting activities related to talent/career development,
• Providing information to authorized persons/institutions,
• Managing administrative activities,
• Creating and tracking visitor records.

Method and Legal Basis of Collecting Personal Data
Your personal data is collected via job application forms, personnel information forms, recruitment documents, various documents submitted to the company, emails sent to the company, invoices, online platforms, computers and servers, firewalls, Arvento, telephones, PDKS systems, entry-exit logs, incident detection/defense/disciplinary reports, legal/administrative procedures, lawsuits, health reports, security cameras, and other similar systems based on the following legal grounds:

• Explicitly stipulated in laws,
• Necessary for the performance or establishment of a contract,
• Mandatory for the fulfillment of the company’s legal obligations,
• Necessary for the establishment, exercise, or protection of a right,
• Personal data made public by the individual,
• Mandatory for the legitimate interests of the company, provided that it does not harm the fundamental rights and freedoms of the individual,
• Based on your explicit consent.

Transfer of Personal Data
Your personal data may be shared for purposes such as managing emergency processes, ensuring compliance with legislation, conducting business activities, and other purposes limited to fulfilling relevant objectives with:

• Real persons or private legal entities,
• Suppliers,
• Group/affiliated companies,
• Authorized public institutions and organizations,
• Business partners,
• Affiliates and subsidiaries,
• Client companies,
• Consultancy firms,
• İŞKUR, SGK, banks, insurance companies, factoring companies, related companies/agencies, event venues, trade fair organizations, accredited agencies, professional certification institutions, official government bodies, sworn financial advisors, Trade Registry Gazette, tax offices, independent audit firms, cargo companies, law enforcement agencies, hosting firms, judicial authorities in case of lawsuits, partnered law firms, ministries, TPE, Investa, and Sistem Global.

Rights of Personal Data Owners Under Article 11 of the Law
You may submit your requests and applications within the scope of Article 11, which regulates the rights of individuals under the Law.

You can submit your applications by:

• Filling out the application form available on our website and delivering it personally with a wet signature or sending it via Notary to our postal address,
• Sending it electronically via registered email (KEP), secure electronic signature, mobile signature, or your email address previously provided to the Company and registered in our system.

For more detailed information, you can review our company’s “Personal Data Protection and Processing Policy.”