1. Data Controller and Introduction

As MTS Yazılım Teknolojileri ("MTS Software"), we place great importance on protecting the security of our employees' data while using the Employee Portal (lisi_employee_portal) mobile and web applications we developed to digitalize our corporate processes. This policy has been prepared in accordance with the requirements of the KVKK (Turkish Personal Data Protection Law) and GDPR (General Data Protection Regulation).

2. Personal Data Collected

The categories of data processed by our systems and stored in our databases while using the application are as follows:

• Identity and Session Information: Mobile phone number (processed for secure login and identity verification, confirmed directly via OTP SMS infrastructure).
• Personal Information: Name, surname, title/role, date of birth, and company work anniversary (used for greeting cards in the Celebrations module).
• Preference Data: Monthly meal preference survey results submitted through the Cafeteria Management System module.
• Notification Data: Device tokens required for Firebase Cloud Messaging (FCM) to function, and notification deletion (soft delete) records.
• Visual Data: Profile picture updates or document images attached to HR forms (uploaded from camera or gallery with user consent).

3. Purposes of Data Processing

Collected personal data is processed only for the following legal and operational purposes:

• Ensuring secure application login (Remember Me/auto-login and OTP SMS verification).
• Reporting monthly meal preferences to reduce cafeteria waste.
• Publishing greetings, celebrations, and corporate announcements to strengthen internal communication.
• Notifying employees of important internal announcements via push notifications.

4. Data Transfer and Third Parties

Your data is never transferred to third parties, sold, or used for commercial purposes, except for infrastructure providers essential to the application's operation (Google Firebase FCM for push notifications, official SMS Gateway networks for OTP SMS verification). All your data is securely hosted in our local database.

5. Data Security and Retention Period

Your personal data is stored and protected with TLS/SSL encryption layers in our databases for the duration of your employment contract or as permitted by legal retention periods. Your data is deleted or anonymized upon termination of the employment relationship.

6. Employee Rights

Our employees always have the right to request correction or deletion of their personal data, or information about which data is being processed, either through the profile tab in the application or via the HR department. Contact: info@mtssoft.com