TEKPAN TEKNİK ELK. KUMANDA PANO SAN. VE TURİZM TİC. A.Ş
LETTER OF INFORMATION CONCERNING
PROTECTION AND PROCESSING OF PERSONAL DATA
A. PURPOSE OF THE PROTECTION AND PROCESSING OF PERSONAL DATA POLICY
We, Tekpan Teknik Elk. Kumanda Pano San. ve Turizm Tic. A.Ş. (“Company”) would like to provide you with information concerning for what purpose Personal Data will be processed, to whom such processed Personal data may be transmitted and for what purpose, method and legal reason of collecting Personal Data and your other rights as provided for in the article 11 of the Protection of Personal Data Act No. 6698 (“PDPA”) under the article 10 entitled “Clarification Obligation of Data Controller” and the article 11 entitled “Right of the Relevant Person” of PDPA by this “Letter of Information” in our capacity as the data controller as per PDPA:
In our capacity as the data controller, we process, record, transmit, share and store your personal data in the manner we describe below and within the framework of the limits as stipulated by the regulations.
Our Company reserves its right to update this Letter of Information Concerning the Protection of Personal Data” at any time within the framework of any modifications that may be made in the formal regulations in effect.
B. COLLECTION AND PROCESSING OF PERSONAL DATA AND PURPOSES OF PROCESSING THEM:
Your personal data are collected and processed by verbal, written and electronic methods due to the activities of our Company which operates in the areas as specified in detail in the Articles of Incorporation of the Company or any contracts executed by our Company. Your personal data will be used to be able to provide you with the services related to the subjects of activity of our Company and improve the quality of such services, to perform the sales, marketing and other operations of our Company and to comply with our obligations of data storage, reporting and clarification. Further, your personal data may also be used within the scope of the works to be performed for the improvement of the quality of services we provide you with as well as for our sales and marketing operations.
Your personal data will not be used for any purposes other than those mentioned above except with your explicit consent nor shared with or transmitted to any third parties except in case of legal obligations and with governmental organisations and institutions.
Our Company may only be shared with our affiliates at home or abroad and with our directly or indirectly related subsidiaries and joint ventures or any public organisations and institutions authorised to claim such data due to any legal obligations and, provided that any sufficient measures are taken, with any organisations, suppliers, authorised resellers/dealers/business partners with which we are bound by contracts as required by our operations at home or abroad in order to provide our customers with value-added services, opportunities and means upon the explicit consent of our customers or in cases as stipulated in the regulations by which we are bound and in any other cases as stipulated in the subparagraph (2) of the paragraph (f) of the article 5 of PDPA.
While your personal data may vary on the basis of the services, products or commercial activities of our Company, they may also be collected by verbal, written or electronic ways via such means as automatic or non-automatic methods, offices, branch offices, dealers, call centre, website, social media channels, mobile applications and the like. As long as you make use of the products and services of our Company, your personal data may be processed by establishing and updating the same.
Moreover, your personal data may be processed, in order to use the service of our Company
- whenever you call our call centre or log in to our website;
- whenever you visit our Company, website or social media channels;
- whenever you attend any trainings, seminars or organisations as held by our Company.
Your personal data which we have obtained from you upon your consent or which have been obtained as a requirements of legal compliance reasons as stipulated in the laws of the Republic of Turkey may be processed by our Company and its related companies/corporations as well as by any other natural persons and/or legal entities as designated in the section (C) below so that
(i) our business units may perform any works required to enable you to make use of any services and products provided by our Company;
(ii) any products and services offered by our Company may be proposed to you by customising the same in accordance with your liking, habits of use and requirements;
(iii) legal and commercial security of our Company and all parties who have business relations with our Company may be insured (administrative operations implemented for communication by our Company, provision of physical security and control of the locations as owned by our Company, assessment processes of business partners/customers/suppliers (authorised personnel or employees thereof), legal adaptation period, financial affairs, etc.);
(iv) services offered by our Company may be made better quality and our quality policy may be improved;
(v) you may be made aware of and make use of any general and special campaigns, promotions, launching, reductions and other similar advantages offered by our Company;
(vi) data obtained about your personal data, preferences, transactions and browsing time in any relevant media may be processed in order to be able to provide you with any information and services you require whenever you log in using your user name and password in order to receive services rom the mdia offered by our Company;
(vii) we will be able to provide you with notices related to any loyalty cards issued and/or to be issued by our Company and its related companies/corporations as well as the website memberships to our Company and its related companies/corporations (renewal, expiry, etc.), and so that we may provide you with information about any communication which may be established with you, any services and products to be launched recently and any modifications, innovations, etc. which may occur in our personal data policies and membership conditions;
(viii) we may provide you with information about any information, events and services which you will require from our Company;
(ix) we may identify and implement commercial and business strategies of our Company;
(x) we may ensure the implementation of human resources policy of our Company; and
(xi) in case it is expressly stipulated in the regulations or in order to fulfil any legal obligations as stipulated by the regulations if necessary, under the personal data processing conditions and purposes as stipulated in the article 5 and 6 of PDP Act.
C. METHOD AND LEGAL REASON OF THE COLLECTION OF PERSONAL DATA:
Our personal data are obtained so that any products and services offered by our Company may be offered within the identified legal framework and so that, in this context, our Company may be able to fulfil its contractual and legal obligations in a complete and correct manner in order to maintain our operations and on the basis of compliance with the regulations as well as with the Company policies.
Your personal data collected as per the legal reasons as described above are processed, recorded, transmitted, shared and stored for the purposes as specified in detail in the section (B) of this letter of information within the scope of the personal data processing conditions and purposes as stipulated in the article 5 entitled “Processing Conditions of Personal Data” and the article 6 entitled “Processing Conditions of Personal Data of Special Nature” of the Protection of Personal Data Act.
D. PROCESSING OF DATA OF SPECIAL NATURE:
As per the PDP Act, such data as those concerning race, ethnic origin, political opinion, religion, creed or other faiths, raiment, membership to associations, foundations or labour unions, health, sexual life, criminal conviction and safety measures as well as biometric and genetic data of people are personal data of special nature. Our Company further takes any measures identified by the Protection of Personal data Committee at the sufficient level in the processing of the personal data of special nature. Our Company will only process data of special nature of people by obtaining the consent of the relevant person and only to serve the purpose of collection thereof so that it may provide better services.
E. TO WHOM PROCESSED PERSONAL DATA MAY BE TRANSMITTED AND FOR WHAT PURPOSE:
Your personal data so collected may be transmitted to our Company Tekpan Teknik Elk. Kumanda Pano San. ve Tur. Tic. A.Ş. as well as to our shareholders, business partners, suppliers, legally authorised public organisations and private persons within the framework of the personal data processing conditions and purposes as stipulated in the article 8 and 9 of the PDP Act so hat they will serve the purposes as contained in the section (B) hereof.
F. TRANSMISSION OF PERSONAL DATA ABROAD:
Our Company is entitled to transmit any personal data abroad under the conditions as stipulated in the PDP Act by the Protection of Personal Data Committee in accordance with any other terms and conditions in the Act and by obtaining explicit consent of the person for this purpose.
G. RIGHTS OF THE PERSONAL DATA OWNER AS LISTED IN THE ARTICLE 11 OF THE PDP ACT:
We agree that under the PDP Act the relevant person is entitled to be provided with information and give his consent before the processing, recording, transmission, sharing and storage of his personal data and that he is entitled to determine the fate of such data after the processing, recording, transmission, sharing and storage thereof.
In this context, in the event that you notify our Company of your requests about your rights as personal data owners by the methods as listed below in this “Letter of Information Concerning the Processing of Personal Data”, our Company will conclude such request on free of charge basis not later than thirty days, depending on the nature of the request.
As per the Communiqué Concerning the Filing Applications with Data Controller published by the Personal Data Protection Committee,
- No costs are charged up to ten pages if your application will be replied in writing. A transaction fee of TRL 1,00 may be charged per page exceeding ten pages.
- In case the application is replied in a storage medium such as a CD, memory stick, etc., then any fees which may be charged by our Company, in its capacity as the data controller, may not by any means exceed the cost of the storage medium.
In this context, data owners are entitled to
- learning whether or not their personal data have been processed;
- if their personal data have been processed, requiring information concerning this fact;
- learning the purpose of processing their personal data and whether or not they are used to the purpose;
- knowing any third parties to whom their personal data have been transmitted at home and abroad;
- in case their personal data have been shortly or incorrectly processed, requiring the same to be corrected and any third parties to whom such data have been transmitted to be notified of the procedure carried out in this context;
- requiring their personal data to be deleted or destroyed under the terms and conditions as stipulated in the article 7 of the Act and any third parties to whom such data have been transmitted to be notified of the procedure carried out in this context;
- raising an objection to any adverse outcome occurring against the person by analysing the processed data solely via automated systems;
- in case they incur any loses due to the fact that personal data are illegally processed, claiming their loss to be remedied.
In any event, people would not have any other rights concerning the data anonymized in the Company. Our Company may share any personal data with any competent organisations and institutions as per any business or contractual relationship so that they may be used for any judicial duty or for any governmental authority to exercise its legal powers.
H. PERIODS DURING WHICH YOUR PESONAL DATA MAY BE PROCESSED:
The Company stores personal data for any period of time as stipulated in the relevant regulations or for any period of time as required for the purpose for which they are processed. In this context, the Company first determines whether or not any time is prescribed for the storage of personal data in the relevant regulations. If any period is prescribed in the regulations, it complies with such period. If no period is prescribed, then it stores the personal data for the period of time as required for the purpose for which they are processed. In accordance with the PDP Act, your personal data processed for the purpose as provided in this “Letter of Information Concerning the Processing and Protection of Personal Data” will be deleted, destroyed and kept being used by anonymization by us when the purpose requiring processing as per the first subparagraph of the paragraph (f) of the article 7 of the PDP Act ceases to exist and/or when any prescription periods during which we are required to process your data as per the regulations. Personal data are not stored by the Company for the possibility of using the same in the future.
I. CASES IN WHICH OUR COMPANY MAY PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPLICIT CONSENT AS PER LAWS:
As per the article 5 of PDPA, our Company may process your personal data as identified above which it has legally acquired without requiring your explicit consent in the following cases:
- Cases as clearly stipulated by laws;
- Cases where you are unable to give your consent as the data owner due to physical incapacity or where your consent is not legally validated and where it is mandatory to process your personal data in order to protect your or anyone else’s life or physical integrity;
- Cases where personal data of the contractual parties should be processed, provided that they are directly related to the execution or performance of any contracts with any other natural persons and/or legal entities identified in the section (C) hereof by our Company and its related companies/corporations;
- Cases where it is required for our Company to be able to fulfil any of its legal obligations;
- Cases where your personal data have been made public by yourselves;
- Cases where it is necessary to process personal data in order to create, exercise or protect any right;
- Provided that it will not prejudice any basic rights and freedoms which you have;
- Cases where data processing is necessary for the legitimate interests of our Company.
J. TO FILE ANY REQUESTS AS PER THE PROTECTION OF PERSONAL DATA ACT:
As per the first paragraph of the article 13 of the PDP Act, you may communicate your request related to the exercise of your rights as mentioned above by any method(s) to be identified by the Protection of Personal Data Committee.
As per the PDP Act, you may further communicate your requests for detailed information and claims in writing by completing the form as contained in our website for your requests concerning your rights as personal data owners.
In order to exercise your rights as contained in the article 11 of the Act No. 6698, you can contact us by sending an e-mail to firstname.lastname@example.org at all times.
The e-mail address at email@example.com must only be used on any matters concerning your personal data and any requests and notices arriving via any channels other than this e-mail address will not be taken into consideration.
Rights related to personal data may only be exercised for the data belonging to the people’s own. Any requests related to any people other than the person who completes the form and who attaches official documents evidencing his identity will not be taken into consideration.
Any forms not accompanied by any documents evidencing your identity will not be taken into consideration. We would like you to know that even when the requests for data deletion are satisfied, we are obliged to share such data with public authorities if so required by such public authorities..
TEKPAN TEKNİK ELK. KUMANDA PANO SAN. VE TUR. TİC. A.Ş.