This disclosure has been prepared by TÜMAŞ Türk Mühendislik Müşavirlik ve Müteahhitlik A.Ş. (“TÜMAŞ” or the “Company”) to inform you about the processing of your personal data within the scope of Law No. 6698 on the Protection of Personal Data (“PDPL”).
1. Data Controller
Pursuant to the PDPL, your personal data may be processed by TÜMAŞ A.Ş. as the data controller within the scope explained below.
Title: TÜMAŞ Türk Mühendislik Müşavirlik ve Müteahhitlik A.Ş.
Address: Tunus Caddesi No:43, 06680 Kavaklıdere / ANKARA, Turkey
Phone: +90 312 417 60 25
E-mail: tumas@tumas.com.tr
2. Personal Data Processed
The following categories of personal data may be processed in connection with our relationship with you:
- Identity Data: Name, surname, date of birth, national ID number (only when legally required).
- Contact Data: E-mail address, phone number, address, company information.
- Professional Data: CV, education, work experience, references (only if you apply for a job).
- Transaction Security Data: IP address, browser information, visit date/time data, log records.
- Marketing Data: Newsletter subscription preferences, cookie data.
3. Purposes of Processing
Your personal data is processed within the conditions stipulated in Articles 5 and 6 of the PDPL, for the following purposes:
- Evaluating and responding to your requests, inquiries and complaints.
- Conducting human resources processes and evaluating job applications.
- Administering newsletter subscriptions and corporate communication activities.
- Fulfilling legal obligations arising from the relevant legislation.
- Ensuring the security of the website and communication channels within the scope of the Company's legitimate interests.
- Statistical analysis and improvement of service quality.
4. Transfer of Personal Data
Your personal data is, as a rule, not transferred to third parties. However, transfers may be made within the scope of legal obligations to authorized public institutions, courts, and our attorneys for the conduct of legal proceedings. The Company does not transfer your personal data abroad. The hosting/infrastructure providers from which we receive services are based in Turkey.
5. Method and Legal Basis of Collection
Your personal data is collected through automated or partially automated means via the contact/job application/newsletter forms on our website, e-mails sent to us, telephone calls, physical correspondence, and cookies. The collection is based on the legal grounds set forth in Article 5/2 of the PDPL, namely being expressly stipulated by law, establishment or performance of a contract, fulfillment of a legal obligation, legitimate interest, or, where required, your explicit consent.
6. Your Rights under Article 11
Pursuant to Article 11 of the PDPL, you may apply to the data controller and exercise the following rights:
- Learn whether your personal data is processed.
- Request information about it if processed.
- Learn the purpose of processing and whether it is used for that purpose.
- Know the third parties to whom it is transferred domestically or abroad.
- Request rectification if processed incompletely or inaccurately.
- Request erasure or destruction within the conditions of Article 7.
- Request notification of rectification, erasure and destruction operations to third parties.
- Object to results that are unfavorable to you arising from analysis solely through automated systems.
- Claim compensation for damages arising from unlawful processing.
7. Application Method
You may convey your requests regarding the rights mentioned above through the contact form on our website, in writing together with documents proving your identity to Tunus Caddesi No:43, 06680 Kavaklıdere / ANKARA, Turkey, or via e-mail to tumas@tumas.com.tr. Your applications will be concluded within 30 days at the latest, pursuant to Article 13/2 of the PDPL.
8. Changes to this Disclosure
TÜMAŞ A.Ş. reserves the right to update this disclosure when deemed necessary. The current text is always accessible on our website.
Effective date: 12.05.2026