04
Privacy and Data Protection

Personal Data Protection, Processing and Privacy Policy

Our corporate policy governs the lawful, fair, transparent and secure processing of personal data.

Purpose and Scope

This policy explains the principles followed by MFT Defence and Aerospace when processing personal data in its capacity as data controller. It applies to employees, candidates, customers, suppliers, visitors and other natural persons whose data is processed by the Company.

Processing Principles

  • Processing lawfully, fairly and transparently,
  • Keeping data accurate and up to date where necessary,
  • Collecting data for specified, explicit and legitimate purposes,
  • Limiting data to what is adequate, relevant and necessary,
  • Retaining data only for the period required by legislation or the processing purpose,
  • Protecting data with appropriate technical and organisational measures.

Purposes and Legal Grounds

Personal data may be processed to manage contracts, human resources, physical and information security, supplier and customer relations, legal compliance, finance, communications and operational continuity. Processing is based on applicable law, contractual necessity, legal obligations, legitimate interests or explicit consent where required.

Transfers and Data-Subject Rights

Data is transferred only where a valid legal ground exists and appropriate safeguards are applied. Data subjects may request information about processing, access and correction, deletion or destruction where conditions are met, information about transfers, and the exercise of other rights granted by applicable legislation.

Security and Governance

The Company implements access control, logging, backup, incident management, confidentiality commitments, supplier controls, training and periodic reviews. Requests are evaluated through the Company's published communication channels within statutory periods.

MFT DEFENCE AND AEROSPACE LIMITED COMPANY
Şahin Urun
General Manager