PERSONAL DATA PROTECTION INFORMATION TEXT FOR THE PERSON WHO PURCHASES PRODUCT OR SERVICE (CUSTOMER)
1. DATA CONTROLLER
| Data Controller Business Title | Çukurova Isı Anonim Şirketi | ||
| MERSİS/TCK No | 0264032441500023 | KEP Address | [email protected] |
| Web Address for Detailed Information | www.cukurovaisi.com | Phone/Fax | 02627513366 / 02627513388 |
| Relevant Person Application E-Mail Address | [email protected] | ||
2. PURPOSE AND SCOPE OF THE INFORMATION TEXT
a. The purpose of this Information Text on the Processing of Personal Data is to fulfill the information obligation imposed by Article 10 of the Law on the Protection of Personal Data No. 6698 (“LPPD”) regarding the use of personal data processed by our company.
b. According to Article 3 of the Law on the Protection of Personal Data No. 6698 (“LPPD”), personal data refers to any information that determines or makes identifiable the identity of a natural person (Name, Surname, TR ID Number, Camera Recording, Address, Salary, IP, Log, E-Mail, etc.).
c. The Data Controller, in accordance with the general principles set forth in Article 4 of the LPPD No. 6698, and based on one or more of the personal data processing conditions specified in Article 5,
d. According to Article 5 of the KVKK No. 6698, some of your data may be processed without your explicit consent, depending on the conditions of exceptional lawfulness, while some of your data may only be processed based on your “consent regarding a specific subject, based on information and expressed with free will”. You may withdraw your explicit consent, which you have given regarding the processing of your data processed with your explicit consent, at any time by applying to our business with the “Relevant Person Application Form” in accordance with Article 11 of the KVKK No. 6698 and the explanations under the heading “Your Rights” of this notification. If you withdraw your explicit consent, the relevant data will be destroyed if it is not being processed for other purposes. Otherwise, it will continue to be processed for the purposes and legal reasons for processing without your explicit consent.
3. PERSONAL DATA THAT MAY BE PROCESSED, DATA PROCESSING PURPOSES AND LEGAL REASONS
Personal data processed by our Data Controller and the purposes of processing them, legal reasons (explicit consent/exception legal compliance conditions) are listed below.
| Data Category That Can Be Processed | Identity |
| Personal Data That Can Be Processed | Name and Surname, TR Identity Number, Social Media Username (in case you contact us via social media) |
| Processing Purposes | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Monitoring and Execution of Legal Affairs, Execution of Communication Activities, Execution / Audit of Business Activities, Carrying out after-sales support services, carrying out contracts for the sale of goods/services, carrying out customer relations, management processes, managing performance evaluation processes, managing storage and archive activities, managing contract processes, monitoring requests/complaints, ensuring the security of data controller operations, providing information to authorized persons, institutions and organizations |
| Legal reasons for processing | Provided that it is clearly foreseen in the laws, directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, the processing of data is mandatory for the data controller to fulfill its legal obligation, the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person |
| Data that can be processed Category | Contact | ||
| Personal Data to be Processed | Telephone Number, E-Mail, Address | ||
| Purposes of Processing | Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Monitoring and Execution of Legal Affairs, Ensuring the Security of Data Controller Operations, Execution of Goods / Services Sales Contracts, Management of Storage and Archive Activities, Execution of Customer Relationship Management Processes, Execution of Goods / Services After-Sales Support Services, Execution / Audit of Business Activities, Execution of Business Continuity Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Product / Service | Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, the data controller is required to fulfill its legal obligation, the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person |
| Data Category That Can Be Processed | Legal Transaction | ||
| Personal Data That Can Be Processed | Agency Information, Company Information, Company-Institution Information / Title Information in the Company-Institution, Signature, Signature/Signature Declaration/Signature Circular, Delivery Time of Goods, Order Information, Contract Information, Request-Complaint-Suggestion-Expectation Information, Power of Attorney – Information and Documents Subject to Authorization Certificate, Tax Identification Number, | ||
| Processing Purposes | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Monitoring and Execution of Legal Affairs, Execution / Audit of Business Activities, Execution of Logistics Activities, Execution of Goods / Services Sales Contracts, Management of Risk Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Execution of Strategic Planning Activities, Ensuring the Security of Movable Goods and Resources, Execution of Wage Policy, Ensuring the Security of Data Controller Operations, Information to Authorized Persons, Institutions and Organizations | ||
| Legal Reasons for Processing | Provided that it is clearly stated in the laws, it is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract, it is mandatory for the data controller to fulfill its legal obligation, it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. | ||
| Data Category that Can Be Processed | Finance | ||
| Personal Data That Can Be Processed | Bank Account Information | ||
| Purposes of Processing | Execution of Activities in Accordance with the Legislation, Execution of Finance and Accounting Affairs, Monitoring and Execution of Legal Affairs, Execution / Audit of Business Activities, Execution of Goods / Services Sales Contracts, Management of Risk Management Processes, Storage and Archive Activities Management, Management of Contract Processes, Conducting Strategic Planning Activities, Conducting the Remuneration Policy, Ensuring the Security of Data Controller Operations, Conducting Investment Processes, Providing Information to Authorized Persons, Institutions and Organizations | ||
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, it is necessary for the data controller to fulfill its legal obligation, and provided that it does not harm the fundamental rights and freedoms of the relevant person, it is mandatory for the legitimate interests of the data controller. | ||
| Data Category That Can Be Processed | Customer Transaction | ||
| Personal Data That Can Be Processed | Order Information, Transaction No, Request-Complaint-Suggestion-Expectation Information | ||
| Purposes of Processing | Information Execution of Security Processes, Execution of Access Authorizations, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Follow-up and Execution of Legal Affairs, Execution of Communication Activities, Receiving and Evaluating Suggestions for the Improvement of Business Processes, Execution of After-Sales Support Services for Goods/Services, Execution of Goods/Services Sales Contracts, Execution of Goods/Services, Production and Operation Services, Execution of Customer Relationship Management Processes, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Management of Contract Processes, Follow-up of Requests/Complaints, Execution of Marketing Processes of Products/Services, Ensuring the Security of Data Controller Operations, Execution of Investment Processes, Providing Information to Authorized Persons, Institutions and Organizations | ||
| Legal Reasons for Processing | Directly related to the establishment or execution of a contract Provided that the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligations, and it does not harm the fundamental rights and freedoms of the relevant person,Data processing is mandatory for the legitimate interests of the company | ||
| Data Category to be Processed | Professional Experience | ||
| Personal Data to be Processed | Profession, Band/Department Information if Personnel (Blue Collar), Personnel Office – Branch-Directorate Information (White Collar), Personnel’s Duty/Job | ||
| Purposes of Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Monitoring and Execution of Legal Affairs, Execution / Supervision of Business Activities, Execution of Goods / Services Sales Contracts, Management of Risk Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Execution of Strategic Planning Activities, Ensuring the Security of Data Controller Operations, Information to Authorized Persons, Institutions and Organizations | ||
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligations. |
| Data Category That Can Be Processed | Transaction Security |
| Personal Data That Can Be Processed | Commercial Electronic Message and Permission Information |
| Purposes of Processing | Execution of Information Security Processes, Execution of Access Authorizations, Execution of Activities in Accordance with the Legislation, Monitoring and Execution of Legal Affairs, Execution / Audit of Business Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Data – Ensuring the Security of the Operations of the Responsible, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Explicitly prescribed by law |
| Data Categories that Can Be Processed | Identity – Communication – Marketing – Visual and Audio Recordings |
| Personal Data that Can Be Processed | – Identity: Name and Surname, Identity / Passport Information-Number (For participation in activities such as travel, holiday, meal, for sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on the website, social media and other environments) – Communication: Phone Number, E-Mail (For participation in activities such as travel, holiday, meal, for sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on the website, social media and other environments) – Communication: Phone Number, E-Mail (For participation in activities such as travel, holiday, meal, for sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on the website, social media and other environments) and to be used in sharing in other environments) – Audiovisual Recording: Photograph, Video and Personal Data Declared/Shared in These Records (To be used in sharing in other environments such as websites, social media, catalogues and so on) – Marketing: Survey Information (To be able to conduct surveys) |
| Processing Purposes | Conducting Loyalty Processes to Company/Product/Services, Conducting Communication Activities, Conducting Business Continuity Activities, Conducting Activities for Customer Satisfaction, Organization and Event Management, Managing Marketing Analysis Studies, Managing Performance Evaluation Processes, Managing Advertising/Campaign/Promotion Processes, Conducting Strategic Planning Activities, Following Up Requests/Complaints, Conducting Marketing Processes of Products/Services |
| Processing Legal Reasons | It can be processed with your explicit consent. |
4. PERSONAL DATA COLLECTION METHOD
a. Your personal data will be collected verbally, in writing or through electronic media; during your communication with us through the communication form or other channels on our website, physical areas and other areas and subsequently your purchase of products/services from us, during the activities carried out for the provision of products/services to you (invoice, delivery note, contract etc.), during our activities for customer satisfaction and advertising/marketing purposes (sending commercial electronic messages, participation in celebrations, trips etc. events, photo and video shootings, surveys) during your sharing of your requests-complaints and suggestions with us, depending on the nature of the service or activity and the channel through which you communicate with us, all information and documents provided by you or obtained through private/public institutions and organizations and other third parties may be collected automatically/partially automatically or non-automatically provided that they are part of any data recording system.
b. The Data Controller may collect the personal data of third parties (your spouse, if you invite them to the events we organize for customer satisfaction and advertising/marketing purposes) to our business.i In case you notify/send us such information, these persons must be informed separately by you, the data controller, and our data controller, in accordance with Article 6 of the Communiqué on the Procedures and Principles to be Applied in Fulfilling the Information Obligation. In order for these third parties to be informed by our company, you must notify the “KVK Customer-Related Third Parties Information Text”, which was prepared by us and delivered/sent to you or which you can access at any time from our official website, to the third parties whose personal data you have shared with us, and deliver/send a signed copy to our company. You will be held responsible for all kinds of liabilities and responsibilities in the event that the personal data you share does not belong to these third parties but you mislead us about the contrary, the signed/approved copy of the information text you shared with us was not notified to these persons and their signatures/approvals were not obtained, and the personal data belonging to these persons was obtained unlawfully or shared with our data controller company.
5. TRANSFER OF PERSONAL DATA
a. Your personal data may be transferred to Public Institutions or Organizations (Customs Consultancy, Ministry of Industry and Trade, Ministry of Finance etc.), our data controller business departments, our shareholders, our customers (dealers), our supplier agency, our shipping/cargo company, our banks, our lawyers, our financial advisors, our IT/Information Processing Support company, and other third parties from whom we receive services and cooperate to carry out our activities, who are responsible for taking data security measures such as protecting all kinds of your personal data, preventing unauthorized access and preventing unlawful processing, in accordance with Article 8 of the KVKK and other legislation and limited to the achievement of the above-mentioned purposes.
b. In case of your explicit consent, name and surname, identity / passport information-number, telephone number, e-mail, photo, video and declaration in these records. personal data obtained/shared, survey information your personal data in order to participate in activities such as trips, holidays and meals within the scope of customer satisfaction and advertising-marketing activities, to send commercial electronic messages and to conduct surveys, with our suppliers (agencies, airline companies, hotels, cargo-promotion companies, agencies); for the same purpose, photographs, videos and your personal data that you declare/shared in these records may be shared with the public through the website, company catalogs, social media and other channels.
c. Your personal data is not transferred abroad.
6. YOUR RIGHTS
a.Within the scope of Article 11 of the Personal Data Protection Law No. 6698 which regulates the rights of the relevant person, to learn whether your personal data has been processed; if so, to request information about this; to learn the purpose of processing your data and whether it is used appropriately for its purpose; to know the 3rd parties to whom your data is transferred at home or abroad; to request correction of your data if it is processed incompletely or incorrectly; to request deletion or destruction of your data if the reasons requiring processing are eliminated despite processing in accordance with the Law and other relevant legal provisions; to request notification of the correction, deletion or destruction to third parties to whom your data has been transferred if your data has been transferred; to object if a result against you occurs as a result of analysis of your data exclusively through automated systems; We hereby inform you that you have the right to demand compensation for damages in the event that you suffer damages due to the unlawful processing of your data.
b.As the Relevant Person (Data owner), you can fill out the “Relevant Person Application Form” that you can access from the website address above and send your requests in writing to the Data Controller in accordance with the Communiqué on the Procedures and Principles of Application via notary or registered letter with return receipt requested, to the above-mentioned postal address, registered electronic mail (KEP), secure electronic signature, mobile signature or to our KEP address written above or to our e-mail address allocated for KVKK communication by using your e-mail address that you have previously notified us and is registered in our system.
PERSONAL DATA PROTECTION POTENTIAL PRODUCT OR SERVICE BUYER (POTENTIAL CUSTOMER) INFORMATION TEXT
1. DATA CONTROLLER
| Data Controller Business Title | Cukurova Heat Joint Stock Company | ||
| MERSİS/TCK Number | 0264032441500023 | KEP Address | [email protected] |
| Web Address for Detailed Information | www.cukurovaisi.com | Phone/Fax | 02627513366 / 02627513388 |
| Mailing Address | Gebze Plastics OSB Mah. Atatürk Boulevard No: 28/1 Gebze/KOCAELI | ||
| Contact Person Application Email Address | [email protected] | ||
2. PURPOSE AND SCOPE OF THE INFORMATION TEXT
a. The purpose of this Information Text on the Processing of Personal Data is to fulfill the information obligation imposed by Article 10 of the Law on the Protection of Personal Data No. 6698 (“LPPD”) regarding the use of personal data processed by our company.
b. According to Article 3 of the Personal Data Protection Law No. 6698 (LPPD), personal data refers to any information that identifies or makes identifiable a natural person (Name, Surname, TR ID Number, Camera Recording, Address, Salary, IP, Log, E-Mail, etc.).
c. Your personal data is processed by our Data Controller company in accordance with the general principles set forth in Article 4 of the LPPD No. 6698, based on one or more of the personal data processing conditions set forth in Article 5.
d. According to Article 5 of the LPPD No. 6698, while some of your data may be processed without your explicit consent based on exceptional legal compliance conditions, some of your data may only be processed based on your “consent based on information and freely expressed on a specific subject”. You may withdraw your explicit consent, which you have given regarding the processing of your data processed with your explicit consent, at any time by applying to our company with the “Relevant Person Application Form” in accordance with the explanations in Article 11 of the KVKK No. 6698 and in the “Your Rights” section of this notification. If you withdraw your explicit consent, the relevant data will be destroyed if it is not processed separately for other purposes. Otherwise, it will continue to be processed for the purpose and legal reasons of processing without your explicit consent.
3. PERSONAL DATA THAT MAY BE PROCESSED, DATA PROCESSING PURPOSES AND LEGAL REASONS
Personal data processed by our Data Controller company and the purposes of processing, legal reasons (explicit consent/exception lawfulness conditions) are listed below.
| Category of Data That Can Be Processed | Identity |
| Personal Data That Can Be Processed | Name and Surname |
| Purposes of Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution/Audit of Business Activities, Execution of After-Sales Support Services of Goods/Services, Execution of Goods/Service Sales Contracts, Execution of Customer Relationship Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Monitoring of Requests/Complaints, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | The processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract, and the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. |
| Category of Data That Can Be Processed | Contact |
| Personal Data That Can Be Processed | Phone Number, E-Mail, Address, Fax Number |
| Processing Purposes | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution / Audit of Business Activities, Execution of After-Sales Support Services for Goods / Services, Execution of Goods / Services Sales Contracts, Execution of Customer Relationship Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Monitoring of Requests / Complaints, Ensuring the Security of Data Controller Operations, Authorized Person, Institution Ve Providing Information to Organizations |
| Legal Reasons for Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution / Audit of Business Activities, Execution of After-Sales Support Services for Goods / Services, Execution of Goods / Services Sales Contracts, Execution of Customer Relationship Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Monitoring of Requests / Complaints, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and not to harm the fundamental rights and freedoms of the relevant person provided that data processing is mandatory for the legitimate interests of the data controller |
| Data Category to be Processed | Customer Transaction |
| Personal Data to be Processed | Request-Complaint-Suggestion-Expectation Information |
| Purposes of Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution of After-Sales Support Services for Goods/Services, Execution of Goods/Service Sales Contracts, Execution of Customer Relationship Management Processes, Management of Storage and Archive Activities, Execution of Contract Processes Management, Monitoring of Requests / Complaints, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller |
| Category of Data That Can Be Processed | Legal Transaction |
| Personal Data That Can Be Processed | Company / Position Information, Fair-Event Date |
| Purposes of Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution / Audit of Business Activities, Execution of After-Sales Support Services for Goods / Services, Execution of Goods / Services Sales Contracts, Execution of Customer Relationship Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Monitoring of Requests / Complaints, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, provided that it does not harm the fundamental rights and freedoms of the relevant person, for the legitimate interests of the data controller. processing is mandatory |
| Data Category That Can Be Processed | Transaction Security |
| Personal Data That Can Be Processed | Commercial Electronic Message and Permission Information |
| Purposes of Processing | Execution of Information Security Processes, Execution of Access Authorities, Execution of Activities in Accordance with Legislation, Monitoring and Execution of Legal Affairs, Execution / Supervision of Business Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Information to Authorized Persons, Institutions and Organizations Provision |
| Legal Reasons for Processing | Explicitly provided for in the laws |
| Category of Data that can be Processed | Identity – Communication – Marketing – Visual and Audio Records |
| Personal Data that can be Processed | – Identity: Name and Surname (For sending commercial electronic messages for marketing purposes, conducting surveys, sharing on websites, social media and other media), – Contact: Phone Number, E-Mail (For sending commercial electronic messages for marketing purposes, conducting surveys, sharing on websites, social media and other media) – Audiovisual Record: Photo, Video and Personal Data Declared/Shared in These Records(For use in sharing on websites, social media, catalogs and other media) – Marketing: Survey Information (For surveys) |
| Purposes of Processing | Conducting Loyalty Processes to Company/Product/Services, Conducting Communication Activities, Conducting Business Continuity Activities, Conducting Customer Satisfaction Activities, Organization and Event Management, Managing Marketing Analysis Studies, Managing Performance Evaluation Processes, Managing Advertising/Campaign/Promotion Processes, Conducting Strategic Planning Activities, Following Up Requests/Complaints, Conducting Marketing Processes of Products/Services |
| Legal Reasons for Processing | In case of your explicit consent can be processed. |
4. PERSONAL DATA COLLECTION METHOD
Your personal data may be collected verbally, in writing or through electronic media; through the communication form or other forms and channels on our website, physical areas, fairgrounds and other areas, when you contact us, request service, request information, share your requests-complaints and suggestions with us, and when we carry out our activities for customer satisfaction and advertising/marketing purposes (sending commercial electronic messages, photo and video shootings, surveys) from all information and documents provided by you or obtained through official institutions and organizations and other 3rd parties, depending on the nature of the service or activity and the channel through which you communicate with us, automatically/partially automatically or non-automatically, provided that it is part of any data recording system.
5. TRANSFER OF PERSONAL DATA
a. Your personal data may be transferred to our data controller business departments, shareholders, customers (dealers), our supplier lawyers, IT/Information Processing Support company, and other third parties from whom we receive services and cooperate in order to carry out our activities, such as taking data security measures such as protecting all kinds of your personal data, preventing unauthorized access and preventing unlawful processing, in accordance with Article 8 of the KVKK and other legislation, and limited to the achievement of the above purposes and fulfillment of these purposes.
b. In case of your explicit consent, your name, surname, telephone number, e-mail, photo, video and personal data declared/shared in these records, survey information, your personal data may be transferred to our suppliers, agencies, in order to send commercial electronic messages within the scope of satisfaction and advertising-marketing activities, and to conduct surveys; for the same purpose, photos, videos and personal data you declare/share in these records may be shared with the public via the website, company catalogs, social media and other channels.
c. Your personal data is not transferred abroad.
6. YOUR RIGHTS
a. Within the scope of Article 11 of the Personal Data Protection Law No. 6698, which regulates the rights of the relevant person, to learn whether your personal data has been processed; if processed, to request information about this; to learn the purpose of processing your data and whether it is used in accordance with its purpose; to know the third parties to whom your data has been transferred domestically or abroad; to request correction of your data if it has been processed incompletely or incorrectly; to request deletion or destruction of your data if the reasons requiring processing are eliminated despite processing in accordance with the Law and other relevant provisions of law; to request notification of the correction, deletion or destruction made to the third parties to whom your data has been transferred if your data has been transferred; to object if a result occurs against you as a result of the analysis of your data exclusively through automatic systems; We hereby inform you that you have the right to demand compensation for damages in the event that you suffer damages due to the unlawful processing of your data. b. As the Relevant Person (Data owner), you can fill out the “Relevant Person Application Form” that you can access from the website address above and submit your requests in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller via notary or registered letter with return receipt requested to the above-mentioned postal address, registered electronic mail (KEP), secure electronic signature, mobile signature or by using your previously notified electronic mail address and registered in our system, to our KEP address written above or to our e-mail address allocated for KVKK communication.
PERSONAL DATA PROTECTION SUPPLIER OFFICIAL INFORMATION TEXT
1. DATA CONTROLLER
| Data Controller Business Title | Çukurova Isı Anonim Şirketi | ||
| MERSİS/TCK No | 0264032441500023 | KEP Address | [email protected] |
| Web Address for Detailed Information | www.cukurovaisi.com | Telephone/Fax | 02627513366 / 02627513388 |
| Postal Address | Gebze Plastikçiler OSB Mah. Atatürk Bulvar No: 28/1 Gebze/KOCAELİ | ||
| Relevant Person Application E-Mail Address | [email protected] | ||
2. PURPOSE AND SCOPE OF THE INFORMATION TEXT
a. The purpose of this Information Text on the Processing of Personal Data is to fulfill the information obligation imposed by Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) regarding the use of personal data processed by our business.
b. According to Article 3 of the Personal Data Protection Law No. 6698 (KVKK), personal data refers to any information that identifies or makes identifiable (Name, Surname, TR ID Number, Camera Recording, Address, Salary, IP, Log, E-Mail, etc.) a natural person.
c. Your personal data is processed by our Data Controller in accordance with the general principles set forth in Article 4 of the KVKK No. 6698, based on one or more of the personal data processing conditions set forth in Article 5.
d. According to Article 5 of the KVKK No. 6698, some of your data may be processed without your explicit consent, subject to exceptional legal compliance conditions, while some of your data may only be processed based on your “consent based on information and freely expressed on a specific subject”. You may withdraw your explicit consent, which you have given regarding the processing of your data processed with your explicit consent, at any time by applying to our company with the “Relevant Person Application Form” in accordance with the explanations in Article 11 of the KVKK No. 6698 and in the “Your Rights” section of this notification. If you withdraw your explicit consent, the relevant data will be destroyed if it is not processed separately for other purposes. Otherwise, it will continue to be processed for the purpose and legal reasons of processing without your explicit consent.
3. PERSONAL DATA THAT MAY BE PROCESSED, DATA PROCESSING PURPOSES AND LEGAL REASONS
Personal data processed by our Data Controller company and the purposes of processing, legal reasons (explicit consent/exception lawfulness conditions) are listed below.
| Data Category That Can Be Processed | Identity |
| Personal Data That Can Be Processed | Name and Surname, T.R. Identity Number / Tax Identity Number, T.R. ID Number |
| Purposes of Processing | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Execution and Execution of Legal Affairs, Execution of Communication Activities, Execution / Audit of Business Activities, Execution of After-Sales Support Services, Execution of Goods / Services Sales Contracts, Execution of Customer Relationship Management Processes, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Management of Contract Processes, Monitoring of Requests / Complaints, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations, Ensuring the Security of Movable Goods and Resources, Execution of Remuneration Policy, Management of Performance Evaluation Processes, Monitoring of Requests / Complaints |
| Processing Legal Reasons | Provided that it is clearly provided for in the laws, it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligation |
| Data Category That Can Be Processed | Communication |
| Personal Data That Can Be Processed | Telephone Number, E-Mail, Address, KEP Address |
| Purposes of Processing | Following and Conducting Legal Affairs, Conducting Communication Activities, Conducting / Supervising Business Activities, Conducting Business Continuity Activities, Logistics Carrying out activities, carrying out after-sales support services for goods/services, carrying out sales contracts for goods/services, managing storage and archive activities, managing contract processes, monitoring requests/complaints, ensuring the security of movable goods and resources, ensuring the security of data controller operations, authorizing persons, institutions and organizationsProviding Information to Organizations, Conducting Customer Relationship Management Processes, Managing Marketing Analysis Studies, Managing Performance Evaluation Processes, Monitoring Requests / Complaints, Conducting Marketing Processes of Products / Services |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligation |
| Data Category That Can Be Processed | Legal Transaction |
| Personal Data That Can Be Processed | Vehicle Plate Information (Where Goods Are Transported), Company Information, Company-Institution Information / Title Information in the Company-Institution, Signature, Signature/Signature Circular, Delivery Time of Goods/Services, Payment Method, Order Information, Contract Information, Title (e.g. Sales Specialist, Assistant Manager, Prof.), Power of Attorney – Information and Documents on the Subject of the Authorization Certificate, Tax Document Information, Tax Identification Number |
| Processing Purposes | Execution of Information Security Processes, Execution of Activities in Accordance with Legislation, Execution of Finance and Accounting Affairs, Monitoring and Execution of Legal Affairs, Execution / Audit of Business Activities, Execution of Logistics Activities, Execution of Goods/Service Sales Contracts, Management of Risk Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Execution of Strategic Planning Activities, Ensuring the Security of Movable Goods and Resources, Execution of Wage Policy, Data Ensuring the Security of the Controller’s Operations, Providing Information to Authorized Persons, Institutions and Organizations, |
| Legal Reasons for Processing | Provided that it is clearly provided for in the laws, directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligations |
| Data Category That Can Be Processed | Finance |
| Personal Data That Can Be Processed | Payment Information, Bank Account Information |
| Purposes of Processing | Conducting Activities in Accordance with the Legislation, Finance And Carrying Out Accounting Affairs, Following Up and Carrying Out Legal Affairs, Carrying Out / Auditing Business Activities, Carrying Out Goods / Services Sales Contracts, Managing Risk Management Processes, Managing Storage and Archive Activities, Managing Contract Processes, Carrying Out Strategic Planning Activities, Carrying Out Remuneration Policy, Ensuring the Security of Data Controller Operations, Carrying Out Investment Processes, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Provided that it is clearly foreseen in the laws, directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligation |
| Data That Can Be Processed Category | Transaction Security |
| Personal Data That Can Be Processed | Commercial Electronic Message and Permission Information |
| Purposes of Processing | Execution of Information Security Processes, Execution of Access Authorities, Execution of Activities in Accordance with Legislation, Monitoring and Execution of Legal Affairs, Execution / Supervision of Business Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Explicitly provided for in the Laws |
| Data Category That Can Be Processed | Physical Space Security |
| Personal Data That Can Be Processed | Vehicle License Plate Information |
| Purposes of Processing | Conducting Activities in Accordance with Legislation, Conducting / Supervising Business Activities, Managing Contract Processes, Conducting Information Security Processes, Conducting Access Authorities, Conducting Finance and Accounting Affairs, Managing Assignment Processes, Monitoring and Conducting Legal Affairs, Conducting Occupational Health / Safety Activities, Managing Performance Evaluation Processes, Providing Information to Authorized Persons, Institutions and Organizations, Conducting Logistics Activities, Managing Goods / Services Procurement Processes, Storage and Archive Activities Management, Ensuring the Security of Movable Goods and Resources,Execution of Supply Chain Management Processes, Ensuring the Security of Data Controller Operations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligation |
| Data Category That Can Be Processed | Identity – Communication – Visual and Audio Recordings – Marketing |
| Personal Data That Can Be Processed | – Identity: Name Surname (For sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on websites, social media and other environments) for) – Contact: Phone Number, E-Mail (For sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on websites, social media and other media) – Audiovisual Record: Photo, Video (For sharing on websites, social media and other media) – Marketing: Survey Information (For conducting surveys) |
| Processing Purposes | Conducting Loyalty Processes to Company/Product/Services, Conducting Communication Activities, Conducting After-Sales Support Services of Goods/Services, Conducting Activities for Customer Satisfaction, Organization and Event Management, Managing Marketing Analysis Studies, Managing Performance Evaluation Processes, Managing Advertising/Campaign/Promotion Processes, Conducting Strategic Planning Activities, Monitoring Requests/Complaints, Conducting Marketing Processes of Products/Services Execution, Execution of Business Continuity Activities. |
| Legal Reasons for Processing | It can be processed if you have given your explicit consent. |
4. PERSONAL DATA COLLECTION METHOD
Your personal data can be collected verbally, in writing or through electronic media; During the establishment of a contractual relationship between you and us, during the purchase and post-purchase processes related to the supply of the product/service we supply, during our advertising/marketing activities (sending commercial electronic messages, photo and video shootings, surveys), during the sharing of your requests-complaints and suggestions with us, depending on the nature of the service, work or activity and the channel through which you communicate with us, it may be collected automatically/partially automatically or non-automatically, provided that it is part of any data recording system, from all information and documents provided by you or obtained through official institutions and organizations and other third parties.
5. TRANSFER OF PERSONAL DATA
a. Your personal data may be transferred to institutions and other third parties that we receive services from, cooperate with, and that are responsible for taking data security measures such as protecting all kinds of your personal data, preventing unauthorized access and preventing unlawful processing, such as Public Institutions or Organizations (Ministry of Finance, Customs Consultancy, Ministry of Industry and Trade, etc.), our data controller business departments, our shareholders, our customers, our supplier shipping company, e-delivery note company, our banks, our lawyers, our financial advisors, our IT/IT Support company, in order to carry out our activities, in compliance with Article 8 of the KVKK and other legislation and limited to the achievement of the above purposes.
b. In case of your explicit consent, your name, surname, telephone number, e-mail, photo, video and personal data declared/shared in these records, survey information, your personal data may be shared with our suppliers for the purpose of sending commercial electronic messages within the scope of satisfaction and advertising-marketing activities, and for the purpose of conducting surveys; and for the same purpose, your photos, videos and personal data declared/shared in these records may be shared with the public via the website, company catalogs, social media and other channels.
c. Your personal data is not transferred abroad.
6. YOUR RIGHTS
a. Within the scope of Article 11 of the Personal Data Protection Law No. 6698, which regulates the rights of the relevant person, to learn whether your personal data has been processed; to request information about it if it has been processed; to learn the purpose of processing your data and whether it is used in accordance with its purpose; to know the 3rd parties to whom your data is transferred domestically or abroad; to request correction of your data if it is processed incompletely or incorrectly; to request correction of the reasons requiring processing despite processing in accordance with the Law and other relevant legal provisions.We hereby inform you that you have the right to request the deletion or destruction of your data in case of any violation; to request that the correction, deletion or destruction be notified to the third parties to whom your data has been transferred if your data has been transferred; to object if a result occurs against you as a result of the analysis of your data exclusively through automated systems; and to request compensation for the damages if you suffer damages due to the unlawful processing of your data. b. As the Relevant Person (Data Owner), you can fill out the “Relevant Person Application Form” that you can access from the website address above and send your requests in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller via notary or registered letter with return receipt requested to the above postal address, registered electronic mail (KEP), secure electronic signature, mobile signature or by using your previously notified electronic mail address and registered in our system to our KEP address written above or to our e-mail address allocated for KVKK communication.
PERSONAL DATA PROTECTION INFORMATION TEXT FOR SUPPLIER PERSONNEL
1. DATA CONTROLLER
| Data Controller Business Title | Çukurova Isı Anonim Şirketi | ||
| MERSİS/TCK No | 0264032441500023 | KEP Address | [email protected] |
| Web Address for Detailed Information | www.cukurovaisi.com | Telephone/Fax | 02627513366 / 02627513388 |
| Postal Address | Gebze Plastikçiler OSB Mah. Atatürk Bulvar No: 28/1 Gebze/KOCAELİ | ||
| Relevant Person Application E-Mail Address | [email protected] | ||
2. PURPOSE AND SCOPE OF THE INFORMATION TEXT
a. The purpose of this Information Text on the Processing of Personal Data is to fulfill the information obligation imposed by Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) regarding the use of personal data processed by our business.
b. According to Article 3 of the Personal Data Protection Law No. 6698 (KVKK), personal data refers to any information that identifies or makes identifiable (Name, Surname, TR ID Number, Camera Recording, Address, Salary, IP, Log, E-Mail, etc.) a natural person.
c. Your personal data is processed by our Data Controller in accordance with the general principles set forth in Article 4 of the KVKK No. 6698, based on one or more of the personal data processing conditions set forth in Article 5.
d. According to Article 5 of the KVKK No. 6698, while some of your data may be processed without your explicit consent based on exceptional legal compliance conditions, some of your data may only be processed based on your “consent based on information and freely expressed on a specific subject”. You may withdraw your explicit consent regarding the processing of your data processed with your explicit consent at any time by applying to our business with the “Relevant Person Application Form” in accordance with the explanations in Article 11 of the KVKK No. 6698 and in the “Your Rights” section of this notification. If you withdraw your explicit consent, the relevant data will be destroyed if it is not being processed for other purposes. Otherwise, it will continue to be processed for the purposes and legal reasons for processing without your explicit consent.
3. PERSONAL DATA THAT MAY BE PROCESSED, DATA PROCESSING PURPOSES AND LEGAL REASONS
Personal data processed by our Data Controller and the purposes of processing them, legal reasons (explicit consent/exception legal compliance conditions) are listed below.
| Data Category That Can Be Processed | Identity |
| Personal Data That Can Be Processed | Name and Surname, T.R. ID Number |
| Purposes of Processing | Conducting Activities in Accordance with Legislation, Conducting / Supervising Business Activities, Managing Contract Processes, Conducting Information Security Processes, Conducting Finance and Accounting Affairs, Managing Assignment Processes, Following and Conducting Legal Affairs, Providing Information to Authorized Persons, Institutions and Organizations, Conducting Logistics Activities, Managing Goods / Services Purchasing Processes, Managing Storage and Archive Activities, Ensuring the Security of Movable Goods and Resources, Conducting Supply Chain Management Processes, Ensuring the Security of Data Controller Operations, Conducting Occupational Health / Safety Activities, Conducting Logistics Activities, |
| Legal Reasons for Processing | Directly related to the establishment or execution of a contract |
| Data Category That Can Be Processed | Contact |
| Personal Data That Can Be Processed | Address, License Plate, E-Mail, Company Information/Title Information in the Company, Telephone Number |
| Purposes of Processing | Conducting Activities in Accordance with Legislation, Conducting / Supervising Business Activities, Managing Contract Processes, Conducting Information Security Processes, Conducting Access Authorizations, Managing Assignment Processes, Following Up Legal Affairs and Execution, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Logistics Activities, Management of Goods / Services Procurement Processes, Management of Storage and Archive Activities, Ensuring the Security of Movable Goods and Resources, Execution of Supply Chain Management Processes, Ensuring the Security of Data Controller Operations, Execution of Occupational Health / Safety Activities, |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligation, and the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person |
| Category of Data That Can Be Processed | Legal Transaction |
| Personal Data That Can Be Processed | Signature, Company Information, Title (e.g. Sales Specialist, Assistant Manager, Prof.), Personnel’s Position/Job (e.g. Job Description If Available), Personnel Office – Branch – Directorate Information (White Collar) |
| Processing Purposes | Conducting Activities in Accordance with Legislation, Conducting / Supervising Business Activities, Managing Contract Processes, Conducting Information Security Processes, Conducting Access Authorizations, Conducting Finance and Accounting Affairs, Managing Assignment Processes, Monitoring and Conducting Legal Affairs, Conducting Occupational Health / Safety Activities, Managing Performance Evaluation Processes, Providing Information to Authorized Persons, Institutions and Organizations, Conducting Logistics Activities, Managing Goods / Services Purchasing Processes, Managing Storage and Archive Activities, Ensuring the Security of Movable Goods and Resources, Conducting Supply Chain Management Processes, Ensuring the Security of Data Controller Operations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary |
| Data Category That Can Be Processed | Professional Experience |
| Personal Data That Can Be Processed | Course, Seminar Certificate Information, Personnel’s Position / Job – Profession Code, Profession / Educational Status |
| Purposes of Processing | Performing Activities in Accordance with Legislation, Conducting / Supervising Business Activities, Managing Contract Processes, Conducting Information Security Processes, Conducting Access Authorizations, Managing Assignment Processes, Monitoring and Conducting Legal Affairs, Occupational Health / Safety Activities Conducting, Managing Performance Evaluation Processes, Providing Information to Authorized Persons, Institutions and Organizations, Conducting Logistics Activities, Managing Goods/Services Procurement Processes, Managing Storage and Archive Activities, Ensuring the Security of Movable Goods and Resources, Executing Supply Chain Management Processes, Ensuring the Security of Data Controller Operations |
| Legal Reasons for Processing | Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, and it is mandatory for the data controller to fulfill its legal obligation |
| Data Category That Can Be Processed | Transaction Security |
| Processable Personal Data | Commercial Electronic Message and Permission Information |
| Purposes of Processing | Execution of Information Security Processes, Execution of Access Authorities, Execution of Activities in Accordance with Legislation, Monitoring and Execution of Legal Affairs, Execution / Supervision of Business Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Management of Storage and Archive Activities, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Persons, Institutions and Organizations |
| Legal Reasons for Processing | Explicitly provided for in the Laws |
| Data That Can Be Processed Category | Identity – Communication – Marketing – Visual and Audio Recordings |
| Personal Data That Can Be Processed | – Identity: Name Surname (For sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on websites, social media and other media) – Communication: Phone Number, E-Mail (For sending commercial electronic messages for marketing purposes, for conducting surveys, for sharing on websites, social media and other media) – Audiovisual Record: Photo, Video (For using on websites, social media and other media) – Marketing: Survey Information (For conducting surveys) |
| Purposes of Processing | Conducting Loyalty Processes to Company/Product/Services, Implementation of Communication Activities, Carrying out After-Sales Support Services of Goods / Services, Carrying out Activities for Customer Satisfaction, Organization and Event Management, Managing Marketing Analysis Studies, Managing Performance Evaluation Processes, Managing Advertising / Campaign / Promotion Processes, Carrying out Strategic Planning Activities, Monitoring Requests / Complaints, Carrying out Marketing Processes of Products / Services, Carrying out Business Continuity Activities, |
| Legal Reasons for Processing | It may be processed if you have given your explicit consent. |
4. PERSONAL DATA COLLECTION METHOD
Your personal data is collected verbally, in writing or through electronic media; After establishing a goods/service supply contract and other relations between us and the business you are an employee of, during the service you provide to our business, during the purchasing and post-purchase processes of the goods/services we supply, during the provision/execution of the goods/services we supply and during your visits to our business, in cases where we organize meetings, during the performance of our advertising/marketing activities (sending commercial electronic messages, photo and video shootings, surveys), during the sharing of your requests-complaints and suggestions with us, and according to the nature of the service or activity and the channel through which you communicate with us, it may be collected automatically/partially automatically or non-automatically, provided that it is part of any data recording system, from all information and documents provided by you or obtained through official institutions and organizations and other 3rd parties.
5. TRANSFER OF PERSONAL DATA
a. Your personal data may be transferred to Public Institutions or Organizations (Customs Consultancy, Ministry of Industry and Trade etc.), our data controller business departments, our shareholders, our customers, our supplier transportation company, e-delivery note company, our banks, our lawyers, our financial advisors, our IT/Information Processing Support company, and other third parties that we receive services from and cooperate with in order to carry out our activities, such as taking data security measures such as protecting all kinds of your personal data, preventing unauthorized access and preventing unlawful processing, in accordance with Article 8 of the KVKK and other legislation, and limited to the realization of the above-mentioned purposes and fulfillment of these purposes. b. In case of your explicit consent, your name, surname, telephone number, e-mail, photo, video and personal data declared/shared in these records, survey information, your personal data may be transferred to our suppliers, agencies, in order to send commercial electronic messages within the scope of employee satisfaction and advertising-marketing activities, and to conduct surveys; for the same purpose, photos, videos and personal data you declare/share in these records may be shared with the public via the website, company catalogs, social media and other channels.
c. Your personal data is not transferred abroad.
6. YOUR RIGHTS
a. Within the scope of Article 11 of the Personal Data Protection Law No. 6698, which regulates the rights of the relevant person, to learn whether your personal data has been processed; if processed, to request information about this; to learn the purpose of processing your data and whether it is used in accordance with its purpose; to know the third parties to whom your data has been transferred domestically or abroad; to request correction of your data if it has been processed incompletely or incorrectly; to request deletion or destruction of your data if the reasons requiring processing are eliminated despite processing in accordance with the Law and other relevant provisions of law; to request notification of the correction, deletion or destruction made to the third parties to whom your data has been transferred if your data has been transferred; to object if a result occurs against you as a result of the analysis of your data exclusively through automated systems; We hereby inform you that you have the right to demand compensation for damages in the event that you suffer damages due to the unlawful processing of your data. b. As the Relevant Person (Data owner), you can fill out the “Relevant Person Application Form” that you can access from the website address above and submit your requests in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, via notary or registered letter with return receipt requested, to the above-mentioned postal address, registered electronic mail (KEP), secure electronic signature, mobile signature or to our KEP address written above or to our e-mail address allocated for KVKK communication using your e-mail address that you have previously notified us and is registered in our system.
PERSONAL DATA PROTECTION VISITOR INFORMATION TEXT
1. DATA CONTROLLER
| Data Controller Business Title | Çukurova Isı Anonim Şirketi | ||
| MERSİS/TCK No | 0264032441500023 | KEP Address | [email protected] |
| Web Address for Detailed Information | www.cukurovaisi.com | Telephone/Fax | 02627513366 / 02627513388 |
| Postal Address | Gebze Plastikçiler OSB Mah. Atatürk Bulvar No: 28/1 Gebze/KOCAELİ | ||
| Relevant Person Application E-Mail Address | [email protected] | ||
2. PURPOSE AND SCOPE OF THE INFORMATION TEXT
a. The purpose of this Information Text on the Processing of Personal Data is to fulfill the information obligation imposed by Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) regarding the use of personal data processed by our business.
b. According to Article 3 of the Personal Data Protection Law No. 6698 (KVKK), personal data refers to any information that identifies or makes identifiable a natural person (Name, Surname, TR ID Number, Camera Recording, Address, Salary, IP, Log, E-Mail, etc.).
c. Your personal data is processed by our Data Controller in accordance with the general principles set forth in Article 4 of the KVKK No. 6698, based on one or more of the personal data processing conditions set forth in Article 5.
3. PERSONAL DATA THAT MAY BE PROCESSED, DATA PROCESSING PURPOSES AND LEGAL REASONS
Personal data processed by our Data Controller, the purposes of processing them, and legal reasons are listed below.
| Data Category That Can Be Processed | Identity – Physical Space Security |
| Personal Data That Can Be Processed | Name Surname – Phone, E-Mail, Information About the Person He/She Came to Visit, Information About Which Company or Institution He/She Came to Visit, Date-Time Information, Camera Recording (taken for security purposes) |
| Purposes of Processing | Creating and monitoring visitor records, ensuring physical space security, ensuring the security of data controller operations, informing authorized persons, institutions and organizations |
| Legal Reasons for Processing | Mandatory for the data controller to fulfill its legal obligations , provided that it does not harm the fundamental rights and freedoms of the relevant person, data processing is mandatory for the legitimate interests of the data controller |
4. PERSONAL DATA COLLECTION METHOD
Your personal data may be collected verbally, in writing or through electronic means; if you visit our business (physical areas), your visit information will be collected at our business desk and recorded in physical/online environments, and automatically/partially automatically with the cameras in our business or non-automatically provided that it is part of any data recording system.
5. TRANSFER OF PERSONAL DATA
a.Your personal data may be transferred, upon request, to Public Institutions or Organizations, departments of our data controller business, our shareholders, our lawyers, our IT/Information Processing Support company, and other third parties from whom we receive services and cooperate in order to carry out our activities, who are responsible for taking data security measures such as protecting all kinds of your personal data, preventing unauthorized access and preventing unlawful processing, in accordance with Article 8 of the KVKK and other legislation, and limited to the achievement of the above-mentioned purposes.
b.Your personal data is not transferred abroad.
6. YOUR RIGHTS
a. Within the scope of Article 11 of the Personal Data Protection Law No. 6698, which regulates the rights of the relevant person, to learn whether your personal data has been processed or not; and to request information about this if processed; to learn the purpose of processing your data and whether it is used in accordance with its purpose; to know the third parties to whom your data is transferred domestically or abroad; to request correction in case your data is processed incompletely or incorrectly; to request deletion or destruction of data in case the reasons requiring processing are eliminated despite processing in accordance with the Law and other relevant provisions of law; to request notification of the correction, deletion or destruction made to third parties to whom your data is transferred if your data has been transferred; to object in case a result occurs to your detriment as a result of the analysis of your data exclusively through automated systems; in case you suffer damage due to the unlawful processing of your data.We hereby inform you that you have the right to request compensation for the damage. b. As the Relevant Person (Data owner), you can fill out the “Relevant Person Application Form” that you can access from the website address above and send your requests in writing to the Data Controller in accordance with the Communiqué on the Procedures and Principles of Application via notary or registered letter with return receipt requested to the above-mentioned postal address, registered electronic mail (KEP), secure electronic signature, mobile signature or by using your previously notified electronic mail address and registered in our system, to our KEP address written above or to our e-mail address allocated for KVKK communication.
