……………………………………….COMPANY
INFORMATION TEXT ON PROCESSING OF PERSONAL DATA
This Information Text has been prepared by ……………………………….. Company ("Company") in order to inform the customers of the Company about the processing of their personal data by the Company within the scope of the Law No. 6698 on the Protection of Personal Data ("Law").
For detailed information on the processing of your personal data within the scope of this Information Text, you can access the Personal Data Protection and Processing Policy of …………………………….. Company at [www…………………….com].
a) Methods of Obtaining Personal Data and Legal Grounds
Your personal data is collected in electronic or physical environment. Your personal data collected with the legal grounds specified in this Information Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.
b) Purposes of Processing Personal Data
Your personal data is processed for the purposes of customizing the products and services offered by the Company according to the preferences, usage habits, and needs of the relevant individuals, planning and executing the activities necessary for offering and promoting the products and services of the Company to the relevant individuals, conducting the necessary studies by the business units to benefit the relevant individuals from the products and services offered by the Company and to carry out the related business processes, conducting the necessary studies by the relevant business units to carry out the commercial activities of the Company and to carry out the related business processes, planning and implementing the commercial and/or business strategies of the Company, and ensuring the legal, technical, and commercial-business security of the Company and the individuals in business relationship with the Company within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.
c) Parties with Whom Personal Data May be Shared and Purposes of Sharing
Your personal data may be shared with the business partners and suppliers of the Company, legally authorized institutions and organizations, and legally authorized private law legal entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including planning and executing the activities necessary for offering and promoting the products and services of the Company to the relevant individuals, conducting the necessary studies by the business units to benefit the relevant individuals from the products and services offered by the Company and to carry out the related business processes, conducting the necessary studies by the relevant business units to carry out the commercial activities of the Company and to carry out the related business processes, planning and implementing the commercial and/or business strategies of the Company, and ensuring the legal, technical, and commercial-business security of the Company and the individuals in business relationship with the Company.
d) Rights of Data Subjects and Exercise of These Rights
As data subjects, you have the following rights under Article 11 of the Law:
To learn whether your personal data is processed or not,
To request information if your personal data is processed,
To learn the purpose of processing of personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request the rectification of personal data if it is incomplete or inaccurate and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
To request the deletion or destruction of personal data in case the reasons requiring their processing disappear, despite being processed in accordance with the Law and other relevant laws, and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
To demand compensation in case of damage due to the unlawful processing of personal data.
Article 28/2 of the Law lists the cases where data subjects do not have the right to request as follows:
If personal data processing is necessary for the prevention of crime or for the investigation of a crime,
If personal data are processed that have been made public by the data subject,
If personal data processing is necessary for the exercise of the duties and powers of authorized public institutions and organizations or professional organizations with a public institution status for the conduct of disciplinary investigation or prosecution, or for the purpose of conducting supervision or regulation,
If personal data processing is necessary for the protection of the economic and financial interests of the State regarding budget, tax, and financial matters,
In cases where data are processed in accordance with the law for purposes such as national defense, national security, public security, public order, economic security, privacy, or personal rights, or for purposes such as art, history, literature, or science, or within the scope of freedom of expression.
Exercise of Rights by Data Subjects
Data subjects can use the above-mentioned rights by using the "Form for Applications to Data Controller by Data Subject" available at the link [ww……………..………..com].
Applications will be made with one of the following methods, along with documents identifying the relevant data subject:
Submitting the filled and wet-signed copy of the form by hand, through a notary, or by registered mail to [………………………………………………………..-Turkey] address,
Signing the form with a secure electronic signature prepared within the scope of Law No. 5070 on Electronic Signature and sending it to the email address [……………………..@hs02].kep.tr registered with electronic mail,
Following a method prescribed by the Personal Data Protection Board.
The Company responds to the data subjects who wish to exercise the specified rights within the framework of the Law, within a maximum of thirty (30) days in accordance with the procedure prescribed in the Law. In order for third parties to make an application on behalf of the data subject, a special power of attorney issued by the data subject through a notary must be present.
Although data subject applications are generally processed free of charge, they may be subject to charging based on the fee schedule[1] determined by the Personal Data Protection Board. The Company may request information from the relevant individual to determine whether the applicant is a data subject and may ask questions related to the application in order to clarify the matters specified in the application.
[1] According to the "Regulation on Procedures and Principles Regarding Application to Data Controller" published in the Official Gazette dated 10.03.2018 and numbered 30356, no fee is charged for written responses to data subjects' applications for up to ten pages. An operation fee of 1 Turkish Lira can be charged for each page above ten. If the response to the application is given in a recording medium such as a CD, flash drive, etc., the fee requested by the Board cannot exceed the cost of the recording medium.