| Data Categories | Legal Basis | Purposes of Processing |
| Identity (e.g., name, surname, trade name) | - Pursuant to Art. 5/2(a) of the LPPD, in cases where processing is expressly permitted by law
- Pursuant to Art. 5/2(c) of the LPPD, provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- Pursuant to Art. 5/2(ç) of the LPPD, it is mandatory for the data controller to fulfil its legal obligation
- Pursuant to Art. 5/2(e) of the LPPD, data processing is mandatory for the establishment, exercise or protection of a right
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Information Security Processes
- Conducting Audit / Ethics Activities
- Managing Access Authorizations
- Conducting Activities in Compliance with Legislation
- Conducting Finance and Accounting Activities
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting Communication Activities
- Conducting / Monitoring Business Activities
- Conducting Business Continuity Activities
- Conducting Goods / Services Procurement Processes
- Conducting Retention and Archiving Activities
- Conducting Contract Management Processes
- Managing Supply Chain Processes
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorized Persons, Institutions, and Organizations
- Conducting Management Activities
|
| Contact (e.g., address, phone number, email) | - Pursuant to Art. 5/2(a) of the LPPD, in cases where processing is expressly permitted by law
- Pursuant to Art. 5/2(c) of the LPPD, provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- Pursuant to Art. 5/2(ç) of the LPPD, it is mandatory for the data controller to fulfil its legal obligation
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Information Security Processes
- Conducting Audit / Ethics Activities
- Conducting Access Authorization Management
- Conducting Activities in Compliance with Legislation
- Conducting Finance and Accounting Activities
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting Communication Activities
- Conducting / Monitoring Business Activities
- Conducting Business Continuity Activities
- Conducting Goods / Services Procurement Processes
- Conducting Retention and Archiving Activities
- Conducting Contract Management Processes
- Conducting Supply Chain Management Processes
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorized Persons, Institutions, and Organizations
- Conducting Management Activities
|
| Transaction Security (e.g., log records when accessing the supplier evaluation system) | - Pursuant to Art. 5/2(c) of the LPPD, provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Information Security Processes
- Conducting Audit / Ethics Activities
- Conducting Access Authorization Management
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting Communication Activities
- Conducting / Monitoring Business Activities
- Conducting Business Continuity Activities
- Conducting Goods / Services Procurement Processes
- Conducting Supply Chain Management Processes
- Ensuring the Security of Data Controller Operations
|
| Finance (e.g., commercial/financial data of sole proprietorships) | - Pursuant to Art. 5/2(a) of the LPPD, in cases where processing is expressly permitted by law
- Pursuant to Art. 5/2(c) of the LPPD, provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- Pursuant to Art. 5/2(ç) of the LPPD, it is mandatory for the data controller to fulfil its legal obligation
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Information Security Processes
- Conducting Audit / Ethics Activities
- Conducting Activities in Compliance with Legislation
- Conducting Finance and Accounting Activities
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting Communication Activities
- Conducting / Monitoring Business Activities
- Conducting Business Continuity Activities
- Conducting Goods / Services Procurement Processes
- Conducting Retention and Archiving Activities
- Conducting Supply Chain Management Processes
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorized Persons, Institutions, and Organizations
|
| Professional Experience (e.g., certifications, areas of expertise depending on the nature of the work) | - Pursuant to Art. 5/2(c) of the LPPD, provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Audit / Ethics Activities
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting Communication Activities
- Conducting Goods / Services Procurement Processes
- Conducting Supply Chain Management
|
| Legal Transaction (just in case of a dispute) | - Pursuant to Art. 5/2(ç) of the LPPD, it is mandatory for the data controller to fulfil its legal obligation
- Pursuant to Art. 5/2(e) of the LPPD, data processing is mandatory for the establishment, exercise or protection of a right
- Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller
| - Conducting Audit / Ethics Activities
- Conducting Internal Audit / Investigation / Intelligence Activities
- Conducting / Monitoring Business Activities
- Conducting Retention and Archiving Activities
- Providing Information to Authorized Persons, Institutions, and Organizations
|
