PDPL Clarification Text

PDPL Clarification Text​

INFORMATION TEXT ON THE PROCESSING, STORAGE, USE AND SHARING OF PERSONAL DATA

Dear user,

In order to be informed about your rights and authorities regarding your personal data within the scope of the Law on Protection of Personal Data No. 6698, you must read and keep this text, and after reading and understanding it, read the following confirmation text carefully and approve it, draw the points that you do not want to approve, and indicate the parts you object to in the annotation section left blank below, please.

  1. What is personal data?

Any information relating to an identified or identifiable natural person constitutes personal data. All kinds of information that reveals your identity and enables you to be distinguished from other people, such as your name, surname, e-mail address, telephone number, address, title, profession, constitute your personal data.

  1. What is sensitive personal data?

Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data is defined as sensitive personal data. It is prohibited to process sensitive personal data without the explicit consent of the person concerned.

  1. Which of your personal or sensitive personal data are processed?

Without being limited to the ones listed below and in line with the requirements arising from the legislation, your data in the table below can be processed by our company.

Data Category

Data Types

ID Data

Name, surname

Communication Data

Phone number, address info, e-mail address

Other

Title, job

 

  1. Who is the Data Controller?

Data controller; It refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. The data controller for your personal data to be processed due to commercial relationship is D.B.A. Termal Seramik San. ve Tic. A.Ş. which is registered to Bilecik Tax Office, numbered by Mersis as 0840001163600010 and located in KAYHAN MAH.BİLECİK YOLU 1.KÜMELEME NO:6 SÖĞÜT/BİLECİK.

  1. How and on what basis is your personal data processed?

The procedures and principles stipulated in the Law No. 6698 and other laws are taken into account in the processing of your personal data. In order to improve our security, data analysis and service quality, your personal data in accordance with the law and honesty rules, within the framework of our authorities and obligations arising from legislation such as the Turkish Code of Obligations, the Turkish Commercial Code, the Turkish Penal Code, the Tax Procedure Law and due to our being a trader, is specific, clear, legitimate. We process for purposes and with your consent. Your personal data is preserved by processing the information and documents we have obtained from you and third parties during the continuation of your commercial contract in the database kept in electronic environment. Our IT unit makes maximum efforts to keep your personal data accessible to a minimum number of people and to prevent it from being captured by third parties.

  1. How long will your personal data be retained?

Your personal data; Turkish Code of Obligations, Turkish Commercial Code, Tax Procedure Law and other laws, Termal Seramik San. ve Tic. A.Ş. as a merchant, it will be kept for the maximum period prescribed by law, taking into account the periods for which it is held liable.

  1. Is it possible to process personal data in cases where there is no explicit consent, in which cases can personal data be processed without explicit consent?

As a rule, personal data cannot be processed without the explicit consent of the person concerned. However, in the presence of one of the conditions listed in the law, it is possible to process personal data without seeking the explicit consent of the person concerned. These conditions can be listed as follows:

  1. a) It is clearly stipulated in the laws.
  2. b) It is compulsory for the protection of life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not given legal validity.
  3. c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
  4. d) It is mandatory for the data controller to fulfill its legal obligation.
  5. e) The person concerned has been made public by himself.
  6. f) Data processing is mandatory for the establishment, exercise or protection of a right.
  7. g) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

 

  1. In which cases and when is your personal data deleted?

Although it has been processed in accordance with the conditions explained above, in the event that the reasons requiring the processing of your personal data disappear, the personal data shall be transferred to Termal Seramik San. ve Tic. A.Ş. deleted, destroyed or anonymized by anonymizing; means that personal data cannot be associated with an identified or identifiable natural person under any circumstances, even by matching them with other data.

  1. In which cases is your personal data transferred to third parties?

Your personal data can be legally transferred to third parties only with your explicit consent. Your personal data will never be transferred to third institutions or persons for any commercial purpose. However, as a result of the services provided from other companies like hosting, data security, storage, data analysis, call center etc., your personal data may be indirectly accessible to third parties.

In addition, your personal data listed in article 7 of this text, which can be processed legally even if you do not have your express consent, may also be shared with third parties without your express consent.

  1. How is your personal data transferred abroad?

Your personal data can be transferred abroad if you give your explicit consent.

As Termal Seramik San. ve Tic. A.Ş. in case of legitimate purposes and requirements, we may need to share your personal data with people to third parties abroad, due to the fact that services such as servers, domains, hosting, Information Technologies, storage, data security software, business development, data analysis, security, organization are obtained from companies headquartered abroad.

In case your personal data is to be transferred abroad, we will definitely check whether there is sufficient protection in the relevant foreign country and whether the necessary measures can be taken by the institution to which your personal data will be transferred abroad, even if there is not sufficient protection on a country basis, and if there is any doubt that your personal data cannot be adequately protected, it will not be transferred abroad.

  1. What are your rights regarding the protection of your personal data? How can you learn about the issues you are wondering about and your rights in this context?

You can ask to Termal Seramik San. ve Tic. A.Ş. via “kvkk@termalseramik.com.tr.tr” address  whether your personal data is processed, for what purpose and how your personal data is processed, how your personal data is used, and to whom your personal data is transferred in the country or abroad. If your personal data is incomplete or incorrectly processed, you may request that they be corrected by sending an e-mail to the same address, or that they be deleted if the reasons for processing your personal data have disappeared; you can also request that your personal data is destroyed or corrected, to be notified to the third parties to whom your personal data has been transferred. If a result against you occurs by analyzing the processed data exclusively through automated systems, you can object to the emergence of this result. You also have the right to demand the compensation of your damage if you suffer damage due to the unlawful processing of your personal data. You will be informed about your application result and its justification within 30 days at the latest by evaluating your questions and requests sent to the specified e-mail address. In cases where your application is rejected, the answer given is insufficient, or the application is not answered on time; you can also make a complaint to the Personal Data Protection Board within thirty days beginning from the date of data controller Termal Seramik San. ve Tic. A.Ş.’s reply, and possibly within sixty days from the date of application.

CONSENT TEXT ON THE PROCESSING, STORAGE, USE AND SHARING OF PERSONAL DATA

I accept and declare that I consent my personal data to the indirect sharing of “domain”, data security, data analysis, business development, storage, security by domestic or foreign resident companies, provided that it is not shared with the institution or commercialized, no person or any person or entity in any way for commercial purposes in accordance with the procedures and principles included in the Termal Seramik San. ve Tic. A.Ş.’s text titled “Termal Seramik Informative Text Regarding the Processing, Storage, Use and Sharing of Personal Data”,

I give consent for the processing, storage, use and sharing of my personal data.