Personal Data Protection

INFORMATION NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ

As ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ, we would like you to know that we have taken all legal, technical, and administrative measures to protect your privacy within the scope of collecting, processing, transferring, deleting, destroying, or anonymizing your personal data and/or special categories of personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK”). We also wish to inform you about for what purposes your personal data and/or special categories of personal data will be processed, to whom and for what purposes they may be transferred, the method and legal grounds of data processing, and your rights.


Data Controller

Pursuant to the Personal Data Protection Law No. 6698, your personal data and/or special categories of personal data may be recorded, stored, processed, classified, updated, and—where permitted by legislation and/or limited to the purpose for which they are processed—disclosed/transferred to third parties by ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ, acting as the “Data Controller,” in a lawful manner and in accordance with the principles of good faith within the scope described below.


Collection, Processing, and Purposes of Processing Personal Data

Although your personal data and/or special categories of personal data may vary depending on the relationship between you and ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ, they may be collected and processed verbally, in writing, or electronically through automatic or non-automatic methods via all units of the Company, corporate e-mail, corporate portal, corporate website, social media platforms, mobile applications, and similar means. Your personal data and/or special categories of personal data may be processed and transferred within the scope of the information you have confirmed to be accurate in relation to your relationship with the Company.

Your personal data and/or special categories of personal data may be processed for purposes including: researching and developing our services and your personal preferences regarding such services; contacting you through communication channels you have shared directly with us; conducting promotions/advertisements/announcements/meetings/conferences/events/courses/development programs/exhibitions; carrying out projects in which the Company is an executor or stakeholder; ensuring and maintaining productivity and service quality principles during production; implementing the Company’s confidentiality policies; conducting and improving the Company’s business processes; and benefiting from such services within the scope of training activities.

Although the collected personal data and/or special categories of personal data may vary depending on your relationship with ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ (e.g., personnel/visitor/intern/job applicant/project partner/business partner), the following data may be collected, processed, updated, transferred, and anonymized for the purposes explained below: identity information; contact information; education and professional information; photographs; health information; financial information; Social Security Institution (SGK) information; résumé/CV information; residence information; internet access information made via the Company network; campus entry-exit information, etc.

2.1

Carrying out listing, reporting, verification, analysis, and assessments; producing statistical and scientific information; conducting measurement, evaluation, and success tracking; organizing events, courses, development programs, exhibitions, conferences, and meetings within or outside the campus by the Company and announcing such activities, within the scope of maintaining production activities, increasing service quality, ensuring service continuity, and reducing cost and workload.

2.2

Ensuring the protection and fulfillment of the rights and obligations of employees or service-recipient workers, subcontractors, or suppliers within Company units or external organizations.

2.3

Providing information and promotion about business areas required in relation to the Company’s business performance and service activities, and presenting offers, in order for a service and business relationship to begin or continue between the Company and customer or supplier candidates.

2.3 (Security and Compliance)

Ensuring compliance with legal obligations, requirements, or requests of judicial bodies or authorized administrative institutions, including the protection of life and property safety of all Company stakeholders (interns/personnel/visitors) and third parties; transferring to information processing infrastructures for the realization of these purposes by taking necessary security and legal measures; archiving in electronic or physical environments to fulfill legal obligations.

2.4

Within the scope of business processes created in line with the Company’s business strategies: determining and implementing commercial and business strategies; managing internal system and application operations; financial operations; procurement operations; management of legal operations; commercial and legal evaluation processes; legal and commercial risk analyses; legal compliance process; carrying out financial affairs; communication; market research; and social responsibility activities.

2.5

Within the scope of the Company’s Human Resources policies: conducting operations in line with the Company’s HR policies; recruitment of suitable personnel for open positions; fulfilling obligations and taking necessary measures within the framework of the Labour Law, Social Security Law, and relevant legislation regulating working life, and occupational health and safety.

2.6

Fulfilling rights and obligations arising from contracts with all natural and legal persons with whom the Company has a contractual relationship, and their affiliates.

2.7

Use of the Company’s information technology services (corporate e-mail, corporate portal, corporate wireless network, corporate internet, etc.).


To Whom and For What Purposes Processed Personal Data May Be Transferred

Your processed personal data and/or special categories of personal data—identity information, contact information, education and professional information, photographs, health information, financial information, SGK information, résumé/CV information, residence information, internet access information made via the Company network, campus entry-exit information, etc.—may be transferred by ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ, for purposes such as maintaining service activities, planning service policies and processes, carrying out training/education activities, ensuring continuity of the Company’s services by conducting administrative and academic processes, ensuring the legal and commercial security of natural or legal persons having a business relationship with the Company, ensuring physical security and control within and around campus facilities and buildings, conducting legal compliance processes, performing financial and accounting activities, determining and implementing commercial and business strategies; to the founder, board of directors, business partners, project partners, Social Security Institution, tax authorities, ministries, judicial authorities and other legally authorized public institutions, consultants/organizations/parties the Company cooperates with where permitted by legislation, contracted institutions, and payment systems institutions, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.


Method and Legal Grounds for Collecting Personal Data

Although your personal data and/or special categories of personal data may vary depending on your relationship established with the Company, they may be collected, processed, and transferred directly or indirectly in all verbal, written, or electronic environments in line with the purposes stated above, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, in order to provide the Company’s services and to ensure that the Company can fully and accurately fulfill its internal regulations (regulations, directives, policies, and procedures) and its contractual and legal responsibilities.


Obligations of the Data Controller

5.1. Obligation to Inform

Regarding the collected personal data and/or special categories of personal data, the Data Controller and/or other authorized persons must provide information to the relevant persons whose data are processed within the scope below:

  • The identity of the data controller and, if any, its representative,

  • The purpose(s) for which personal data will be processed,

  • To whom and for what purpose personal data may be transferred,

  • The method and legal grounds of personal data collection,

  • Other rights of the relevant person listed in Article 11 of the Law.

The obligation to inform may be fulfilled verbally or in writing, through voice recording, call center, or by using physical or electronic environments.

5.2. Obligations Regarding Data Security

Pursuant to Article 12 of the Personal Data Protection Law No. 6698, the obligations of ELEKTRİKSEL MALZEME SATIŞ PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ, acting as the data controller, regarding data security are as follows:

a) To prevent the unlawful processing of personal data,
b) To prevent unlawful access to personal data,
c) To take all necessary technical and administrative measures to ensure an appropriate level of security for the protection of personal data,
d) To carry out or have carried out the necessary audits within its institution or organization to ensure the implementation of the provisions of this Law,
e) If personal data are obtained by others through unlawful means, to notify the relevant person and the Board as soon as possible.

Data controllers and authorized persons may not disclose the personal data they learn to others contrary to the provisions of this Law and may not use them for purposes other than the purpose of processing. This obligation continues even after leaving office.

5.3. Deletion, Destruction, or Anonymization of Personal Data

Even if processed in accordance with Law No. 6698 and other relevant legislation, in the event that the reasons requiring processing cease to exist, personal data shall be deleted, destroyed, or anonymized by our Company acting as the data controller, either ex officio or upon the request of the relevant person.


Rights of the Personal Data Subject Under KVKK

If you submit your requests regarding your rights defined under the Personal Data Protection Law No. 6698 to our Company through the procedures and methods set out below, our Company will conclude such requests free of charge within 30 (thirty) days at the latest depending on the nature of the request. However, if the transaction requires an additional cost, the fee specified in the tariff determined by the Board may be charged.

Within this scope, pursuant to Article 11 of the Personal Data Protection Law No. 6698, personal data subjects have the right:

6.1 To learn whether personal data are processed,
6.2 If personal data have been processed, to request information regarding such processing,
6.3 To learn the purpose of processing personal data and whether they are used in accordance with that purpose,
6.4 To know the third parties to whom personal data are transferred domestically or abroad,
6.5 To request correction of personal data if they are processed incompletely or inaccurately and to request that the transactions carried out be notified to third parties to whom personal data have been transferred,
6.6 To request deletion or destruction of personal data in the event that the reasons requiring their processing cease to exist although they have been processed in accordance with this Law and other relevant laws, and to request that such transactions be notified to third parties to whom personal data have been transferred,
6.7 To object to a result arising against the person by means of analysis of processed data exclusively through automated systems,
6.8 To request compensation for damages in the event of damage due to unlawful processing of personal data.


Application Method

In applications to be made within the scope of Article 11 of the Personal Data Protection Law No. 6698, the channels and procedures through which you may submit your application are explained below.

In applications to be made by personal data subjects, it is mandatory to include the following information:

a) Name, surname and signature if the application is in writing,
b) Turkish ID number for citizens of the Republic of Turkey; nationality, passport number or ID number (if any) for foreigners,
c) Residential or workplace address for notification,
ç) If any, e-mail address, telephone and fax number for notification,
d) Subject of the request.

Pursuant to paragraph 1 of Article 13 of KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request containing your explanations regarding the right you wish to exercise, either in writing or by applying in person with your identity information to the address “ESENŞEHİR MAH. GÜNEYLİ SK. NO: 13 İÇ KAPI NO: 2 ÜMRANİYE-İSTANBUL”, or by using the Company’s e-mail address info@elektriksel.com, or by other methods specified under the Personal Data Protection Law No. 6698.

Prepared by  T-Soft E-Commerce.