Customer Information Text

 

Personal Data Protection Law

As Trakya Group, we continue to carry out our work regarding the Protection of Personal Data, which we have attached great importance to since the day we were founded, with an approach parallel to the “Personal Data Protection Law (KVKK)”. In this context, some terms expressed in the law and information about our data processing processes to fulfill our obligations are presented below.

What is KVKK?

The Personal Data Protection Law (KVKK) was accepted by the Turkish Grand National Assembly on 24.03.2016 and came into force by being published in the Official Gazette dated 07.04.2016 and numbered 29677.

The law is based on the compliance of all data processing individuals and institutions within the framework of basic purposes such as ensuring the confidentiality and protection of personal data and preventing unauthorized use. Our Company, like all organizations, is obliged to comply with this Law and personal data processed in all processes of our Company are within this scope.

What is Personal Data?

All data or data sets that directly or indirectly identify a person are considered personal data.

What is Data Processing?

Any operation performed on personal data is considered “data processing”. Therefore, archiving, storing, altering, reorganizing, disclosing, transferring, analyzing and classifying data falls within the scope of data processing.

Who is the Relevant Person / Data Owner?

One of the expressions frequently used in the law and our corporate policies is “relevant person” or “data owner”. It refers to real persons whose personal data is processed.

Who is the Data Controller?

Data controller is the natural or legal person who determines the purposes and methods of processing personal data and is responsible for establishing and managing the data recording system.

Who is the Data Processor?

Data processors are natural or legal persons who process data on behalf of the data controller. These persons may also be a separate natural or legal person authorized by the data controller to process personal data.

Data Processing Terms

All data controllers have the right to process data only if the following conditions are met or the data subject gives explicit consent:

-It is clearly foreseen in the law,

– It is directly related to the establishment or execution of a contract,

– Ability of the data controller to fulfill its legal obligations,

– It has been made public by the person concerned,

– Data processing is mandatory for the establishment, exercise or protection of a right,

– Legitimate interest of the data controller.

Meeting Data Owner Requests

KVKK gives relevant persons the right to request which personal data is processed in which processes and the current status of these data. As our company, we are obliged to respond to requests from data owners within 30 days.

Our clarification text regarding the personal data we process as Trakya Group is presented below.

Information Text on Protection of Personal Data

As Trakya Group, we act as the data controller and take the necessary precautions during the preservation, processing and transfer of your personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the principle of privacy of private life and protection of fundamental rights and freedoms of individuals in accordance with the legislation We would like to inform you about these issues.

Purposes of Processing Your Personal Data

Your personal data collected electronically or physically in various ways, in accordance with the general principles listed in Article 4 of the Law and subsequently within the personal data processing conditions specified in Articles 5 and 6, is processed for marketing, selling, transporting and assembling the products and services produced and sold. and for the purposes of carrying out commercial activities related to them, managing customer complaints and enabling relevant persons to benefit from other mandatory or voluntary products and services.

To whom and for what purpose the processed personal data can be transferred

Your collected personal data is carried out by our business units to make you benefit from the products and services offered by our Company; Customizing and recommending the products and services offered by our company according to your tastes, usage habits and needs; Fulfilling obligations arising from legal legislation; For the purposes of ensuring the legal and commercial security of our Company and the people who have business relations with our Company and determining and implementing our Company’s commercial and business strategies, our business partners, suppliers, service providers, shareholders, affiliates, legally authorized public institutions and private persons are subject to the provisions of Articles 8 and 9 of the Law. It may be transferred within the framework of the personal data processing conditions and purposes specified in the articles.

Method and Legal Reason for Collecting Your Personal Data

Your personal data is collected for the following legal reasons specified in Articles 5 and 6 of the Law, in order to carry out the necessary activities and processes in line with the processing purposes stated above:

  • It is clearly stipulated in the law,
  • It is mandatory to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
  • It is mandatory for the data controller to fulfill its legal obligation,
  • Data processing is mandatory for the establishment, exercise or protection of a right,
  • It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned,
  • Explicit consent you will give, if necessary within the framework of the relevant articles of the Law.

Within the scope of the above-mentioned legal reasons, your personal data may be processed in any verbal, written or electronic environment, your personal statements and shares by visiting our Company, your business partners, applications and/or visits, your communications via e-mail, telephone, fax, social media accounts, Notifications from administrative and judicial authorities are collected through written, visual or electronic records and other communication channels received when you visit our Company.

Rights of the Personal Data Owner Listed in Article 11 of Law No. 6698 We hereby inform you that,

as a personal data owner, you have the following rights in accordance with Article 11 of the Law:

  • Learning whether personal data is processed or not,
  • Requesting information if personal data has been processed,
  • Learning the purpose of processing personal data and whether they are used for their intended purpose,
  • Knowing the third parties to whom personal data is transferred at home or abroad,
  • In case personal data has been processed incompletely or incorrectly, to request their correction and to request that the action taken in this context be notified to third parties to whom personal data has been transferred,
  • Requesting the deletion or destruction of personal data in the event that the reasons requiring processing no longer exist, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
  • Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
  • In case of damage due to unlawful processing of personal data, you have the right to request compensation for the damage.

In accordance with your legal rights stipulated in the relevant law and other legislation listed above, you can personally submit your requests to our address above, or have them delivered through a notary. In addition, in accordance with the fifth article of the “Communiqué on the Procedures and Principles of Application to the Data Controller”, by using the registered e-mail (KEP) address, secure electronic signature, mobile signature or the e-mail address you have previously notified to our Company and registered in our systems, info@trakyagrup.com.tr You can send it to .tr address.

As personal data owners, if you submit your requests regarding your rights to our Company using the methods set out in the Personal Data Protection and Processing Policy, our company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, our Company will charge the fee in the tariff determined by the Personal Data Protection Board.

Regards.

Trakya Grup Plastik Alüminyum ve Cam Sanayi Ticaret Limited Şirketi.