General Data Protection Regulation

According to the Law No. 6698 on the Protection of Personal Data (“GPDR”), your personal data will be processed by our Company, in the capacity of Data Controller, in accordance with the purposes stated below, for purposes related to business activities, including but not limited to, being used, recorded, stored, updated, transferred, and/or classified. In this context, in order to protect the fundamental rights and freedoms of individuals, especially the right to privacy, our Company takes all technical and administrative measures to ensure the security level necessary to prevent the unlawful processing, unauthorized access, and to ensure the preservation of your personal data, as required by the Law and Regulations established for the protection of personal data.

The target audience of this text is all individuals whose personal data are processed by our Company, excluding our employees and job applicants.

Personal data processed in the capacity of Data Controller include, but are not limited to, the following:

Name, surname, T.R. identification number, address, phone number, email address, signature, physical location/security video recordings, call center/service quality voice recordings, bank account number, cookie (web activity status) records.

Purposes and Legal Grounds for Processing Personal Data:

Your personal data shared by you will be processed for the following purposes:

To provide you and/or the institutions and organizations you represent with the products and services offered by our Company, including but not limited to determining and implementing our Company’s commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities.
To carry out the administrative operations related to communication conducted by our Company.
To ensure the physical security and monitoring of the locations used by our Company.
To establish relationships with business partners/customers/suppliers (authorized persons or employees).
To fulfill the contractual requirements and financial reconciliation related to products and services offered jointly with our business partners, suppliers, or other third parties.
To implement our Company’s human resources policies.
To process personal data for the purpose of being contacted through our call center or using our website, and/or participating in trainings, seminars, or events organized by our Company.
Methods of Collecting and Storing Personal Data:

Your personal data shared with our Company may be collected verbally, in writing, or electronically through offices, branches, call centers, websites, social media platforms, mobile applications, and similar means, either automatically or non-automatically. Your personal data will be stored in electronic and/or physical environments. Our Company implements necessary business processes and technical security infrastructure to prevent unauthorized access, manipulation, loss, or damage to the personal data stored in these environments.

Your personal data will be processed and stored with all necessary information security measures in accordance with the stated purposes and scope, for the legal retention period or as long as required by the purpose of processing. Once this period has ended, your personal data will be removed from our Company’s data flow through methods of deletion, destruction, or anonymization.

Transfer of Personal Data:

Your personal data may be transferred within the scope of laws and other regulations and for the stated purposes to:

Companies and representatives authorized by us that operate on behalf of our Company,
Regulatory and supervisory authorities, and public institutions or organizations authorized to request your personal data under applicable laws,
Business partners, suppliers, and contractors, banks, credit risk and financial institutions, and other real or legal persons for the stated purposes,
Tax and similar consultants, persons and organizations required for legal follow-up processes, including our auditors, and other third parties from whom we receive consultancy, both domestically and abroad.
Your Rights Under Article 11 of the KVKK:

By applying to our Company, you have the right to:

Learn whether your personal data are processed,
Request information if they have been processed,
Learn the purpose of processing and whether they are used appropriately,
Know the third parties to whom your data have been transferred domestically or internationally,
Request correction if your data are incomplete or incorrectly processed,
Request deletion or destruction of your data under the conditions set out in Article 7 of the KVKK,
Request notification of corrections or deletions to the third parties to whom your data have been transferred,
Object to a result arising against you solely through automated systems,
Request compensation for damages in case you suffer harm due to unlawful processing.
According to Article 13, Paragraph 1 of the GPDR, you may submit your requests regarding the above-mentioned rights to our Company in writing or through other methods determined by the Personal Data Protection Authority.

To exercise your rights mentioned above, you may deliver your request in person to our headquarters, or send it via notary or other methods specified by the Personal Data Protection Authority, along with necessary identification information.