Clarification Text in Compliance with Article 10 of the Kvkk

 

PERSONAL DATA PROTECTION LAW NUMBER 6698 (KVKK) INFORMATION AND Clarification TEXT

 

 

Within ELSACO DIŞ TİCARET A.Ş, your personal data is processed in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant secondary legal regulation, limited to the activities of our company.

ELSACO DIŞ TİCARET A.Ş. pays utmost attention to the processing and protection of your personal data. All necessary technical and administrative measures are taken in order to prevent the unlawful processing of personal data, to prevent unlawful access to personal data, and to ensure the protection of personal data.

Pursuant to Article 10 of the Law; Policies created to cover customers, suppliers, sub-employers, service providers, managers and employees, business partners, company partners, company employees, employee candidates, trainees, visitors, employees of public institutions and organizations and private law legal entities and relevant third parties, and herein We inform you as the data controller with the lighting text.

This clarification text has been prepared by the Data Controller (“Company”) within the scope of the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Disclosure Obligation with Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”).

 

 

1. Data Controller

 

ELSACO DIŞ TİCARET A.Ş. processes your personal data in the capacity of "Data Controller" defined in Article 3 of the Personal Data Protection Law No. 6698.

 

 

1. For What Purpose Personal Data Will Be Processed

 

Your personal data is obtained, recorded, stored, modified, rearranged and processed in accordance with the principles stipulated in the law, fully or partially, automatically or by non-automatic means provided that it is a part of any data recording system.

Your personal data is processed in accordance with the relevant legislation in line with the following purposes within the scope of company activities. According to this;

1. • Developing company products and services, maintaining corporate development activities, maintaining the company's finance and accounting, administrative, legal and technical business processes,

   • To make necessary notifications to relevant public institutions and organizations in accordance with legal regulations, to fulfill legal obligations,

   • Planning and execution of human resources processes, fulfillment of employment application processes, creation of personnel files for employees, fulfillment of legal, financial, financial and administrative obligations,

   • Making and performing the contracts that the company has made or will make with its customers, potential customers, suppliers, subcontractors, service providers, employees and related third parties with whom it has legal relations,

   • The obligation of the company to prove as evidence in legal disputes with third parties,

   • To ensure the contact and communication with the persons with whom the company has legal relations, to ensure the corporate quality of the company, to ensure the safety of the related persons,

• Using our website regarding company activities, providing communication through company contact information, filling in the forms on our website, maintaining the necessary processes for using the software, hardware and programs used within the scope of company activities,

 

 

For its purposes, your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the KVK Law. Your personal data is not used for any purpose other than the activities of our company. In line with the above-mentioned purposes, your personal data written below is processed, limited to company activities.

1. • Identity information (Name and surname, date of birth, child information)

   • Your contact information (Phone numbers, contact address, e-mail address)

   • Your location information (Address, location information of your current location)

   • Customer, supplier, service provider transaction information (Name, surname, T.R. Identity No / Foreign Identity, Passport information, address, e-mail information, telephone contact information, identity information, location, delivery, financial information, bank information, tax number, tax office, billing information, customer/member information, membership ID number, customer/member transaction information, purchased products, shopping amount of products, shopping date, call center call records, contract information, order-related information, risk management information, transaction security information , password, password information, ip address, marketing, internet cookie records, visual and audio data, call center call records, photo information, legal transaction information, commercial electronic message permission given by the personal data owner through the electronic registration system on the internet, membership agreement approved , distance sales contract, other contracts related to the sales transaction made by the company, mobile phone for marketing purposes, e-mail messages, request/complaint management/evaluation management information, purchased product or service sent depending on the commercial electronic message permission given by the relevant personal data owner. information, complaints or requests transmitted via the website, social media accounts or call center, and records of the transactions made during the evaluation and management process, bank account information, IBAN number, information about payment instruments such as checks, promissory notes, credit cards, invoices, dispatches. waybill, current account, finance, signature circular, power of attorney, trade registry, representation, authorization information),

• Audio-Visual Records (Your photos taken within the scope of company activities, job application forms, printed forms kept and filled in electronic and physical media, your documents and official identity documents, photographic information on personnel identity cards, company website for promotion and information purposes, your photos, videos/camera recordings shared in our social media accounts or written and visual media, third-party social media channels, audio recordings recorded through the call center)

• The software used for the purchased product or service, the personal data processed in the programs, the complaints or requests transmitted through the website, social media accounts or the call center and the records of the transactions made during the evaluation and management process, height, weight, work clothes size information, shoes Your personal data that you share with our company directly or indirectly, such as

• Information obtained through corporate call services, your personal information obtained by e-mail, letter or other communication tools.

 

 

1. To Whom and For What Purpose the Processed Personal Data Can Be Transferred

 

Your personal data processed by our company are transferred to real and legal persons for the purposes written below in accordance with Articles 8 and 9 of the KVK Law No. 6698. According to this;

 

1. • In order to carry out company activities and fulfill mutual obligations; to our customers, business partners, group companies, service providers, suppliers, performance assistants and subcontractors, to our group companies in order to ensure joint cooperation and coordination,

   • To the relevant public institutions and organizations, including the Revenue Administration, Tax Offices, SGK, in order to fulfill the legal obligations stipulated in the relevant legislation and to ensure security,

• To the prosecutor's offices, courts, enforcement offices and relevant legal institutions and organizations in matters of public security and legal disputes, upon request and limited to the request in accordance with the legislation,

• To software, hardware, information and technology companies in Turkey and abroad in order to install computer operating systems and computer programs used within our company, and to carry out maintenance and repair operations of the programs,

• In order to ensure the security of the electronic data belonging to the company, it is transferred to the information processing and technology companies established in the country that provide cloud technology services to our company.

• In the case of transferring sensitive personal data within the country, your personal data can be transferred in cases stipulated by the laws in terms of special quality personal data other than health and sexual life, by obtaining the explicit consent of the person concerned.

Along with the above-mentioned groups of persons, our company's employees, legal, financial and tax consultants, public institutions such as auditors, authorized public institutions and organizations such as ministries, judicial authorities, and relevant persons and organizations that we are in contact with for foreign trade transactions are subject to the provisions of the payment service legislation. Your personal data is transferred to the persons, institutions and organizations that it allows, in accordance with the legislation and limited to the purpose of transfer.

 

 

1. Data Transfer Abroad

 

4/2 of the KVK Law. By obtaining Explicit Consent Texts regarding the processed personal data, to be collected separately from employees, employee candidates, customers and suppliers, service providers, visitors in accordance with the principles set forth in Article 5/2 of the Law. , 6/3. In the cases stipulated in Articles of Association, after the declaration of foreign countries with sufficient protection to be determined by the Personal Data Protection Board ("Board") in accordance with the rules in Article 9 of the Law, without seeking explicit consent, only persons and organizations residing in these countries are determined and announced that there is no adequate protection. and for the countries where the data controllers in Turkey and the relevant foreign country undertake to provide adequate protection in writing, and on the condition that the necessary permissions are obtained from the KVK Board in terms of the relevant transfer.

 

In this context, your personal information is transferred abroad in accordance with the legislation and for the purpose of transfer, within the scope of the foreign trade activities of the company and your legal relationship with the company, by taking all necessary measures, within the limits stipulated by the law numbered 6698.

 

 

1. Method and Legal Reasons for Personal Data Collection

 

Your personal data; Within the scope of company activities, limited to the stated purposes, filling in all kinds of verbal, written or electronic media applications, creating personal files, organizing and performing contracts, accounting, processing financial information for the establishment and maintenance of financial and social rights, purchasing, by using the video camera recording system for the purpose of processing the personal data received for the purpose of marketing, planning, exporting, quality and institutional development, visiting the company buildings and annexes, the website, calling our call services, using the indoor and outdoor security in the company buildings and annexes. or partially automated or non-automatic, provided that it is part of any data recording system.

As a rule, your personal data and sensitive personal data are processed based on the explicit consent of the person concerned, in order to provide products and services by our company in accordance with the legal regulations to which our company is subject, and in this context, for our company to fully and accurately fulfill its obligations arising from contracts and legal regulations. In addition, within the scope of your contact with our company, your personal data is processed without seeking explicit consent in the following cases.

• It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of contracts between our company and third natural and legal persons,

• It is compulsory for the company to fulfill its legal obligations,

• The personal data has been made public by the person concerned,

• Data processing is mandatory for the establishment, exercise or protection of a right,

• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• As it is clearly stipulated in the laws,

 

5/1-h. It is processed, collected and transferred limited to the purposes specified in accordance with the article.

 

 

1. Rights of Personal Data Owner (Right of Application)

 

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698 "regulating the rights of the data subject" are submitted to Elsaco Dış Ticaret A.Ş. - Elsaco Foreign Trade Inc. Maslak Mah. AOS 55. St. 42 Maslak A Blok 2/25 Sarıyer, ISTANBUL, by filling in the attached "FRM-49 KVKK Personal Data Owner Application Form" of the person who is the Personal Data Owner, and send a signed copy of the form to the company address personally with the documents identifying your identity. by using the Secure Electronic Signature, mobile signature or the e-mail address you have notified to our company and registered in our company system.hello@minelacare.com By sending an e-mail to the address of our company, using the Personal Registered Electronic Mail (KEP) address of the person concerned, to the Registered Electronic Mail (KEP) address of our company.hello@minelacare.com You can send it by sending an e-mail, with your personal application, with the application you make through a notary public or by the methods determined by the KVK Institution.

 

Pursuant to Article 11 of the Law; everyone, in relation to himself by applying to the data controller;

• Learning whether personal data is processed or not,

• If personal data has been processed, requesting information about it,

• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

• Knowing the third parties to whom personal data is transferred at home or abroad,

• Requesting correction of personal data in case of incomplete or incorrect processing,

• Deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK

do not want to,

• In case of correction, deletion or destruction of personal data, requesting that these transactions be notified to the third parties to whom the personal data has been transferred,

• By analyzing the processed data exclusively through automated systems, the person himself

to object to the emergence of a result against him,

• It has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.

 

KVK Law No. 6698 13/1. In accordance with the article, you must submit your applications to our company in writing or through the above-mentioned methods determined by the KVK Institution in order to exercise your above-mentioned rights. Our company will conclude your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.