Yapı Merkezi Technical Assessment and Training Center (YM-TAT) is committed to protecting the privacy and security of an employee’s personal information.
This privacy notice describes how we collect and use an employee's personal information before and after working with Yapı Merkezi (YM).
It also applies to all job candidates who apply for a job in YM.
YM-TAT is a “data controller”. This means we are responsible for deciding how we hold and use our employees’ personal information.
We may update this notice any time, but if we do so, we will provide an updated copy published on this website.
One must read and retain this notice, together with any other privacy notice we may provide on specific occasions where we collect or process one’s personal information. This will create awareness of how and why we use such information.
The personal information held must be:1. Used lawfully, fairly and in a transparent way;
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
The following are the categories of personal information to be collected, stored and used:• Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses;
YM may also collect, store, and use the following “special categories” of more sensitive personal information:• Information about religious beliefs;
YM directly collects personal information about employees, workers and contractors through the application and recruitment process from candidates. We may sometimes collect additional information from third parties, including former employers. YM will collect additional personal information in the course of job-related activities throughout the period of an employee’s contract. Personal information may also be collected from the superiors, HR departments of the group companies or YM subcontractors.
Most commonly, personal information is used in the following circumstances, some of which are less likely to happen:1. Where YM is required to perform its contractual or legal obligations;
The categories of information listed above are required primarily to allow YM to perform its contractual as well as legal obligations. In some cases, YM may use the outlined personal information to pursue its legitimate interests or those of third parties, provided such interests do not override fundamental rights. The circumstances in which YM will process an employee’s personal information are listed below; these include purposes for which an employee’s personal information will be processed and the categories of data involved.
Egitimate Interest• To determine an employee’s recruitment/appointment.
Performance of the Employment Contract• To determine employment terms as agreed under an employment contract.
Compliance With Legal Obligations• To determine an employee’s legal eligibility to work in YM.
In addition to the above, an employee’s personal information may be used to provide a reference where requested. This is done entirely for the interest and benefit of the employee.
Please note that some of the above grounds for processing may overlap, and several grounds may justify YM’s use of your personal information. Furthermore, YM reserves the right to process an employee’s information in the circumstances other than those stipulated above, provided they are in accordance with the law.
Moreover, failure to provide certain information when requested may prevent YM from performing its contractual and legal obligations as provided under a particular employment contract, such as ensuring the health and safety of YM employees.
YM will only use an employee’s personal information for the purposes for which such information was collected unless YM reasonably finds the need to use it for another reason and that reason is compatible with the original purpose. An employee will be notified in an instance where their personal information is required for an unrelated purpose which will be explained to the employee clearly.
Please note that YM may process an employee’s personal information without their knowledge or consent, in compliance with the above rules, where legally required.
“Special categories” of sensitive personal information require higher levels of protection. YM will require further justification for collecting, storing, and using this type of personal information. YM has in place an appropriate policy document and safeguards, which it is required by law to maintain when processing such data. YM may process special categories of personal information in the following circumstances:1. In limited circumstances, with an employee’s explicit written consent;
Less commonly, YM may process this type of information where it is needed in relation to legal claims or where it is needed to protect an employee’s interests (or a third party’s interests), and an employee is not capable of giving consent, or where such information is already made known to the public. Furthermore, YM may also process such information about members or former members in the course of legitimate business activities with the appropriate safeguards.
YM will use an employee’s sensitive personal information in the following ways:• YM will use information relating to leaves of absence, which may include sickness absence or family-related leaves, to comply with employment and other laws;
YM shall not require an employee’s consent to use special categories of personal information in accordance with its written policy to carry out its legal obligations or exercise specific rights. In limited circumstances, YM may approach an employee for written consent to process certain susceptible data. Under such circumstances, YM will provide full details of the required information and the reason so the employee can carefully consider whether to consent. Please note that an employee is not under any contractual obligation to provide the sought consent.
YM may only use information relating to criminal convictions where legally prescribed by the law. This will usually be where such processing is necessary to carry out YM’s obligations, and such processing is in compliance with YM’s data protection policy.
Less commonly, YM may use information relating to criminal convictions where it is necessary for relation to legal claims, to protect an employee’s interests (or a third party’s interests), and the employee is not capable of giving consent or where the information is already made known to the public.
YM may also process such information about members or former members in the course of legitimate business activities with the appropriate safeguards.
YM will only collect information about criminal convictions if it is appropriate given the nature of the role and where it is legally permitted to do so.
YM may be required to share personal data with third parties, including third-party service providers and other entities in the group. The third parties with whom such information will be shared will be required to respect the data’s security and treat it in accordance with the law. Personal information may also be transferred outside Tanzania; under such circumstances, the personal information transferred will be afforded a similar degree of protection.
YM will only share an employee’s personal information with third parties where required by the law, where it is necessary to administer a working relationship with the employee or for the purpose of a legitimate interest.
Which third-party service providers process my personal information?
‘Third parties’ includes third-party service providers (including contractors and designated agents) and other entities within our group. Third-party service providers carry out payroll, pension administration, benefits provision and administration, IT services, and HR services.
YM will share personal data relating to your participation in any share plans operated by a group company with third-party administrators, nominees, registrars and trustees for the purposes of administering the share plans.
YM will share personal data regarding your participation in any pension arrangement operated by a group company with the trustees or scheme managers of the arrangement in connection with the administration of the arrangements.
How secure is my information with third-party service providers and other entities in our group?
All YM third-party service providers and other entities in the group are required to take appropriate security measures to protect your personal information in line with YM policies. YM does not allow its third-party service providers to use an employee’s personal data for their purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
When might you share my personal information with other entities in the group?
YM will share your personal information with other entities in our group as part of our regular reporting activities on company performance, in the context of a business reorganisation or group restructuring exercise, for system maintenance support and hosting of data. YM will share personal data relating to your participation in any share plans and pension arrangements operated by a group company with other entities in the group for the purposes of administering the share plans.
What about other third parties?
YM may share an employee’s personal information with other third parties, for example, in the context of the possible sale or restructuring of the business. In this situation, YM will, as far as possible, share anonymised data with the other parties before the transaction completes. Once the transaction is completed, YM will share an employee’s personal data with the other parties if and to the extent required under the terms of the transaction.
YM may also need to share an employee’s personal information with a regulator or otherwise be in compliance with the law. This may include making returns to HMRC, disclosures to stock exchange regulators and disclosures to shareholders such as directors’ remuneration reporting requirements.
YM has put in place measures to protect the security of your personal information, the details of which are available upon request.
Third parties will only process your personal information on YM instructions and where they have agreed to treat the information confidentially and keep it secure.
YM has put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered or disclosed. In addition, YM limits access to your personal information to those employees, agents, contractors and other third parties who have a business need to know, and they will only process your personal information on YM’s instructions and are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long will you use my information?
YM will only retain your personal information for as long as necessary to fulfil the purposes for which such information was collected, including the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, YM considers the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances, YM may anonymise an employee’s personal information so that it can no longer be associated with them, in which case YM may use such information without further notice to the employee. Once one is no longer an employee, worker or contractor of the company, YM will retain and securely destroy their personal information in accordance with applicable laws and regulations.
YM reserves the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Applying for a job through this website allows you to read, understand, and accept the general data collection and protection regulations.