GDPR / KVKK Privacy Notice

Last Updated: January 2025

As Vira Joint Occupational Health and Safety Unit ("Vira OSGB" or "Company"), we attach great importance to the security and confidentiality of your personal data. This privacy notice has been prepared within the scope of Law No. 6698 on Protection of Personal Data ("KVKK") and related legislation.

1Identity and Contact Information of Data Controller

Title Vira Joint Occupational Health and Safety Unit
Address İhsaniye, Giriş Sk. No:12/1, 28000 Bulancak/Giresun
Email kvkk@viraosgb.com.tr
KEP (Registered Email) viraosgb@hs01.kep.tr

2Categories of Personal Data Processed

Within the scope of our activities, personal data in the following categories may be processed:

Identity Data Name, surname, national ID number, date of birth, gender
Contact Data Phone number, e-mail address, address information
Professional Data Workplace information, occupation, job description, industry
Health Data Periodic examination results, health reports (only within JOHS service scope)
Legal Data Contracts, offer forms, correspondence
Digital Data IP address, cookie data, website usage information

3Purposes of Personal Data Processing

Your personal data is processed for the following purposes:

  • Provision of JOHS services (occupational medicine, safety expertise, health surveillance, etc.)
  • Fulfillment of legal obligations under Occupational Health and Safety Law No. 6331
  • Legal notifications and records to the Ministry of Labour and the ISG-KATIP system
  • Contract processes and establishment of business relations
  • Contact form and request/complaint management
  • Provision of training and consulting services
  • Invoice and accounting operations
  • Website security and improvement of user experience
  • Providing information to authorized bodies within legal obligations

4Legal Basis for Data Processing

Your personal data is processed based on the following legal bases under Articles 5 and 6 of KVKK:

Performance of Contract (Art. 5/2-c)

For the establishment and performance of JOHS service contracts.

Legal Obligation (Art. 5/2-ç)

Obligations arising from Law No. 6331, SSI legislation and other legal regulations.

Legitimate Interest (Art. 5/2-f)

Protection of our company's legitimate interests, business development and improving service quality.

Explicit Consent (Art. 5/1)

Where the above legal bases are not applicable and for sensitive personal data (health data).

5Transfer of Personal Data

Your personal data may be transferred to the following parties within the framework of Articles 8 and 9 of KVKK:

  • Ministry of Labour and Social Security: ISG-KATIP system notifications and legal reports
  • Social Security Institution (SGK): Work accident and occupational disease notifications
  • Ministry of Health: Mandatory health notifications and records
  • Authorized courts and enforcement offices: Within legal necessity in legal proceedings
  • Business partners and suppliers: Within service provision, with confidentiality commitment
  • Cloud service providers: Domestic/foreign data storage (within KVKK Art. 9 guarantees)

6Methods of Collecting Personal Data

Your personal data is collected through the following channels:

  • Contact, quote and job application forms on our website
  • E-mail, phone and written communication channels
  • JOHS service contracts and attached documents
  • Direct declaration during workplace examinations and health screenings
  • Transactions conducted through the ISG-KATIP system
  • Cookies and website analytics tools

7Retention Periods of Personal Data

Your personal data is stored for the period stipulated in relevant legislation or required by the purpose of processing; after this period expires, it is deleted, destroyed or anonymized.

Data Category Retention Period Legal Basis
Health and examination records 15 years OSH Legislation
Contracts and commercial documents 10 years TCC Art. 82
Accounting and invoice records 10 years Tax Procedural Law
Job application forms 2 years Labour Law
Contact form data 3 years Legitimate interest
Website log records 2 years Law No. 5651
Cookie data Per cookie policy Cookie Policy

8Rights of Data Subject (KVKK Art. 11)

Pursuant to Article 11 of KVKK, you have the following rights:

Right to Know Learn whether your personal data is being processed
Right to Access Request information about processing if processed
Right to Purpose Learn the purpose and whether it is used accordingly
Right to Transfer Learn third parties to whom data is transferred domestically/abroad
Right to Rectify Request correction of incomplete/incorrect data
Right to Erasure Request deletion/destruction within KVKK Art. 7 conditions
Right to Notify Request notification of rectification/erasure to third parties
Right to Object Object to results arising against you through automated systems
Right to Redress Request compensation for damages caused by unlawful processing

9Application Method

You can apply through the following channels to exercise your rights under KVKK:

E-mail Application Send to kvkk@viraosgb.com.tr along with information verifying your identity.
KEP Application You can send from your registered e-mail address to viraosgb@hs01.kep.tr.
Written Application You can apply in person to our company address with a document proving your identity, or send via notary.

Your applications will be answered free of charge within 30 days. If the transaction requires an additional cost, a fee may be requested according to the tariff determined by the Personal Data Protection Board.