Protection of Personal Data
What Data Is Collected and What Is the Purpose of Collecting the Data?
Within the scope of our Company's activities, we collect the following data:
1. Identity Information
2. Contact Information
3. Financial Data
4. Other Data
| Data Category | Identity Information |
|---|---|
| Description | Data relating to the identification of a person, such as name, surname, Turkish Republic identification number, copy of identity card, and IP address. |
| Purpose of Data Collection | We collect the identity information of our customers for the establishment of contractual relationships regarding the products and services we provide and for the performance of the related services; to inform our customers about campaigns and price advantages and enable them to benefit from these opportunities. We collect the identity information of suppliers, subcontractors, and similar persons with whom we have business relationships in order to fulfill our commercial requirements, obligations arising from laws, and, where applicable, our contractual obligations. We collect the identity information of our platform users to enable them to access information about our products and services through our website; to enable them to apply online to our Human Resources department; to enable them to submit their questions, opinions, requests, and suggestions regarding our products and services; and to enable those who wish to benefit from our products and services to submit their survey requests to us. |
| Data Category | Contact Information |
|---|---|
| Description | Personal data that enables communication with a person, such as an e-mail address, residential address, mobile phone number, and fax number. |
| Purpose of Data Collection | We collect the contact information of our customers for the performance of products and services and to inform our customers about campaigns and price advantages. We collect the contact information of suppliers, subcontractors, and similar persons with whom we have business relationships in order to fulfill our commercial requirements, obligations arising from laws, and, where applicable, our contractual obligations. We collect the contact information of our platform users to enable them to access information about our products and services through our website; to enable them to apply online to our Human Resources department; to enable them to submit their questions, opinions, requests, and suggestions regarding our products and services; and to enable those who wish to benefit from our products and services to submit their survey requests to us. |
| Data Category | Financial Data |
|---|---|
| Description | Data such as bank account information, credit card information, and invoice information. |
| Purpose of Data Collection | We collect the financial information of our customers, suppliers, subcontractors, and similar persons with whom we have business relationships for the purpose of making payments related to the products and services we provide or receive. |
| Data Category | Special Categories of Personal Data |
|---|---|
| Description | Criminal record, religion, copy of identity card, blood type, photograph, fingerprint, and health data. |
| Purpose of Data Collection | Data submitted through job applications (CVs) via the platform are collected for potential employment evaluations. Special categories of personal data are collected for the purpose of ensuring the occupational safety of our employees and as required by applicable legislation. |
| Data Category | Other Data |
|---|---|
| Description | Signature, platform access records, data collected for security purposes, and other data collected within the scope of the products and services we provide. |
| Purpose of Data Collection | We process such data of our platform users, customers, suppliers, subcontractors, and similar persons with whom we have business relationships for the purpose of establishing contractual relationships; ensuring security through systems installed at our Company's offices and branches; providing you with higher-quality services through our website; customizing the products and services offered by our Company according to usage habits and needs and recommending them to customers; and ensuring the legal and commercial security of our Company and persons who have business relationships with our Company. |
For What Legal Reasons Are Data Collected?
The legal basis for collecting such data is our obligations under applicable legislation, our contractual relationship with the relevant persons, our legitimate interests, and the Company principles we have adopted.
Through Which Methods Are Data Collected?
Data is collected through technical and procedural methods carried out via various channels such as websites, mobile applications, call centers, and physical channels.
Do We Transfer Your Personal Data to Third Parties?
Identity information, contact information, and many other personal data listed above are shared periodically or upon request with authorities explicitly authorized under applicable legal regulations.
In addition, your personal data may be shared with authorized persons or institutions upon the request of a court decision or an administrative authority explicitly authorized by law.
Apart from these cases, your personal data is shared on a limited basis with group companies and business partners (contractors, suppliers, service providers, etc.), particularly the Deceuninck NV Group, of which we are a shareholder, for the purpose of improving service quality.
Do We Transfer Your Personal Data Abroad?
Your personal data may be transferred abroad only;
- where you have given your explicit consent,
- where the conditions stipulated under the KVKK exist and adequate protection is available in the country to which the data will be transferred, and
- where the conditions stipulated under the KVKK exist, but adequate protection is not available in the country to which the data will be transferred, provided that sufficient protection is undertaken by the relevant country and permission of the Personal Data Protection Board (“Board”) is obtained.
if one of the above conditions exists.
For example, if personal data is obtained through an agency abroad, we may transfer your personal data abroad without obtaining your consent for the performance of the contract, provided that adequate protection exists in the relevant country. If such protection does not exist, we may transfer your personal data abroad with the permission of the Board and limited to the purposes required by the relevant relationship.
How Long Are Your Personal Data Stored?
The retention period of your personal data is as follows:
- If a period for storing the data is specified in the law or relevant legislation, the relevant data must be stored for at least this period.
- Considering possibilities such as a potential court request or a request from an administrative authority authorized by law regarding the relevant data reaching us late, or the occurrence of a dispute in which we may be a party, the retention period of your data is determined by adding a period of 6 months to 1 year to the periods stipulated in the legislation. At the end of the determined period, such data is deleted, destroyed, or anonymized.
- If no period is specified in the legislation regarding the retention period of the data we process, your data is stored for the period required by our relationship and for the period specified in the contract made with you. After the end of the relevant relationship or after the expiration of the period specified in the contract, your data is deleted, destroyed, or anonymized without requiring any request from you.
- If you request the deletion or destruction of your data before the periods specified in the legislation, such request cannot be fulfilled. Where no specific period is stipulated in the legislation regarding the retention period of personal data, if you request the deletion or destruction of your personal data, your data will be deleted, destroyed, or anonymized on the first periodic destruction date and within a maximum period of 6 months.
What Are Your Rights Regarding Your Personal Data?
- To learn whether your personal data is being processed,
- To request information regarding the processing of your personal data if it has been processed,
- To learn the purpose of processing your personal data and whether it is used in accordance with this purpose,
- To know the third parties to whom your personal data is transferred, whether within the country or abroad,
- To request correction of your personal data if it has been processed incompletely or inaccurately,
- To request deletion or destruction of your personal data within the conditions stipulated under KVKK legislation,
- To request notification of third parties to whom your personal data has been transferred regarding the correction or deletion/destruction of your personal data,
- To object to the occurrence of a result against you through the analysis of processed data exclusively by automated systems,
- To request compensation for damages if you suffer damage due to unlawful processing of your personal data
rights.
How Can You Exercise Your Rights?
Provided that it remains within the framework of the KVKK and other applicable legislation, you may exercise your rights listed in the previous section by completing the application form available in the personal data protection section of our website, printing the completed form, and;
- By applying personally as the Applicant,
- Through a notary public or via Registered Electronic Mail (REM/KEP) address,
- By signing electronically with a “secure electronic signature” defined under the Electronic Signature Law No. 5070 and sending it to the e-mail address kvkk@deceuninck.com,
You may exercise the rights listed in the previous section by submitting your request to our Company's registered electronic mail address;
Your application will be answered within a maximum of 30 days. However, if processing the request requires an additional cost, a fee determined according to the tariff set by the Personal Data Protection Board may be requested.
We reserve the right to reject your application if the information and documents you provide are incorrect or if the application is made by an unauthorized person.
Within What Period Are Your Requests Regarding the Processing of Your Personal Data Answered?
Your requests regarding your rights concerning your personal data are evaluated and answered within a maximum of 30 days from the date they reach us. If your application is rejected, the reasons for the rejection will be sent to the address specified in your application via e-mail or postal mail.
How Can You Obtain More Detailed Information About the Processing of Your Personal Data?
For more detailed information about the processing of your personal data, you can review our Personal Data Protection and Processing Policy .