PDPL
PERSONAL DATA PROTECTION LAW CLARIFICATION TEXT
Clarification Text on Processing Receiver Personal Data
1. The Purpose of Clarification Text and Data Controller Position of Our Company:
- Our company, DERYA BİLİŞİM GÜV. TEL. MÜH. DAN. SAN. VE TİC. LTD. ŞTİ (“Derya Information Technology” ve/veya “The Company”), has the capacity of “data controller” under the Law no.6698 on the Protection of Personal Data in terms of personal data of the customers and in this Clarification Text, it is aimed to enlighten the customers on data processing activities conducted by Derya Information Technology in accordance with the Law.
2. What Personal Data Do We Process?
- Your personal data that you share with us or may be subject to processing if necessary is as follows:
-
Identity Data Name-Surname Communication Data Phone, E-Mail, Company Name Web Site Usage Data Application/Request Form filling date
3. Why and How Do We Request Your Personal Data?
-
As a company we collect your personal data orally, in physical or electronical media that we request from you due to fulfilling our legal obligations, to perform the service agreement between us and the reasons set forth in the laws and for the legal interest of the Company.
We can collect your personal data in electronical media or orally and physically for the performance of the service agreement between us.
4. The Purpose of Processing Your Personal Data:
-
Your personal data can be processed by Derya Information Technology due to following purpose and legal reasons but not limited to these.
Your personal data, including the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, and including the planning and execution of the
commercial and/or business strategies of the persons who have a business relationship with Derya Information Technology and the provision of legal, technical and commercial job security, can be shared with DERYA BİLİŞİM GÜV. TEL. MÜH. DAN. SAN. VE TİC. LTD. ŞTİ., Group Companies, Company officials, our affiliates, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions in the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.
For the management of the company, conducting the works, applying the Company policies, especially;
The personal data cannot be processed without explicit consent of the data owner as a rule. However, the Law has determined some situations in which data can be processed without express consent in terms of personal data and sensitive personal data within the scope of of Articles 5 and 6.
The personal can be processed even without explicit consent of the data owner (provided that necessary clarification is provided) in accordance with the Article 5.
The Law shall not be exercised in the following cases in accordance with the Article 28 of the Law:
5. Transfer of Personal Data of the Customers:
-
Your personal data can be transferred to specialist companies or servers of the applications that we use in order for us to conduct certain activities from time to time.
If you are in our SMS sending list, bulk SMS or e-mail sending list, your necessary data can be transferred to the companies who send bulk e-mails only for conducting the activity in question.
If we need technical support, the consultant companies and operator company need to be able to access to our systems from time to time, thus your data in the relevant systems can be accessible for the companies in question. However, we can take necessary measures in order for this companies not to use your personal data.
Your data can be transferred to the companies with which we cooperate for campaign purposes from time to time if you accept too.
Your data can be transferred to gift companies so that we can send you a celebratory gift.
We can share it with relevant authorities in the framework of our responsibility to fulfill legal requests such as court order or evidence request in order us to exercise our right of defense provided that this is in accordance with our lawyers and law and procedure.
6. SHARING YOUR PERSONAL DATA WITH THIRD PARTIES ABROAD
-
We can share your personal data in some cases with the below-mentioned receiver groups abroad.
We can be working with a third party company abroad in order to send bulk e-mail to inform you on developments, promotions and innovations. We can share your personal data with these companies only for this purpose.
We can transfer the necessary personal data to the servers located abroad of the companies that conduct customer satisfaction analysis to determine if you are satisfied with our services and to discover how to make you and our other customers more satisfied.
We can transfer information, documents, files etc. that we produce, obtain and acquire in the framework of our activities to the to servers located abroad of applications and databases that provide record keeping service.
7. The Method and Legal Ground of Collecting Personal Data:
-
The personal data is collected from the customer in electronical media. The personal data collected due to abovementioned legal reasons can be processed and transferred for the purposes specified in Consent Text in the Articles 5 and 6 of the Law and in cases where this Clarification Text and express consent are required.
8. The Rights of the Customers as Personal Data Owner:
-
In accordance with the Article 11 of the Law:
- To learn if the their personal data is processed;
- If personal data has been processed, to request information about it
- To learn the purpose of processing the personal data and whether they are used for their intended purpose,
- To know third parties to whom personal data is transferred at home or abroad
- To request correction of personal data if it was processed incomplete or wrong and the notification of the transaction made in this context to the third parties to whom the personal data has been transferred,
- To request the deletion or destruction of personal data in the event that the reasons for processing disappear, although it has been processed in accordance with the provisions of the law and other relevant laws and to request the notification of the transaction made in this context to the third parties to whom the personal data has been transferred,
- To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- To request indemnify the loss if he incurred loss due to unlawful processing of the personal data.
-
In accordance with first paragraph of the Article 13 of Personal Data Protection Law, the applications to be made to our Company, the data controller, on these rights must be submitted us in written or by other methods determined by the Personal Data Protection Board (“Board”).
he applications to be made to our Company in this framework can be submitted to us by printing personal data protection law application form;
- by the personal application of the Applicant,
- through Public Notary or
- by sending registered e-mail of the Company which is [email protected] by singing with secure electronic signature defined in Electronic Signature Law No. 5070 by the Applicant;
- by e-mail to be sent from the e-mail address registered in the system of our Company and previously notified by the Applicant to our Company.
CONTACT INFORMATION
DERYA BİLİŞİM GÜV.TEL.MÜH.DAN.SAN.VE TİC.LTD.ŞTİ.
Central Registration System No99887418756156454/6
Contact link: www.deryabilgiteknolojileri.com