Protection of Personal Data - Dortek

PROTECTION OF PERSONAL DATA DISCLOSURE TEXT

 

LIABILITY OF DATA SUPERVISOR

 

Pursuant to the Law No. 6698 on the Protection of Personal Data ("Personal Data Law"), your personal data; DORTEK KAPI SAN. VE TİC. A.Ş. (“Şirket”) may be processed within the scope described below.

 

Within the scope of the Law on the Protection of Personal Data, some definitions are given below:

 

Personal Information: Any information related to the identified or identifiable real person.

 

Sensitive Personal Data: It is the data that makes the person's racial or ethnic origin, political opinion, religious or philosophical belief, trade union membership, health or sexual life, and choices that are characteristic of his/her costume.

 

Processing of Personal Data: All kinds of processes performed on personal data including obtaining, recording, storing, keeping, changing, re-arranging, disclosure, transmission, acquisition, making available, classification or prevention of use in whole or in part, automatically or in non-automatic ways, being part of any data recording system.

 

Contact Person: The real person/data owner whose personal data is processed (Customer).

 

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system (DORTEK).

 

Data recording system: A recording system in which personal data are structured and processed according to certain criteria.

 

Express Consent: Consent about a specific subject based on information and expressed in free will.

 

Your personal data processed within the scope of this Clarification Text are as follows:

 

Identity Information: Name-surname, TR ID number, Tax identification number (personal company customer), Signature;

 

Contact Information: Mobile phone number, Workplace address, Residence address, E-mail address;

 

Finance Information: IBAN Number, Bank information, E-invoice information;

 

Physical Space Security Data: Camera recordings taken at the entrance to the physical space and during the stay in the physical space;

 

Visual and Audio Records: Audio recording (in case you call the call center),Video;

 

Other Data: Customer transaction data, Legal transaction data.

 

PURPOSE OF PROCESSING YOUR PERSONAL DATA AND LEGAL REASON

 

Based on the legal reason of "establishment and performance of the contract" regulated in Article 5/2(c) of the KVK Law; your personal data may be processed for the purposes of the establishment and performance of the contracts to which our Company is a party, the execution of goods/services sales, purchasing processes, and the conclusion of dealership and authorized service agreements.

The Company may process your personal data for the purposes of complying with the retention periods stipulated in the legislation to which the Company is subject and fulfilling other obligations stipulated in the relevant legislation, fulfilling the requests of the courts and public institutions and organizations requesting information and other legal obligations based on the legal reason of "data controller's ability to fulfill its legal obligation" regulated in Article 5/2 (ç) of the PPD Law.

Based on the legal reason of "establishment, use or protection of a right" regulated in Article 5/2 (e) of the PPD Law, the Company may process your personal data for the purposes of proving possible disputes, obtaining legal advice and technical support.

Based on the legal reason of "legitimate interest of the data controller" regulated in Article 5/2 (f) of the PPD Law, the Company may process for the purposes of ensuring customer satisfaction and executing quality standards processes, performing internal operational activities, conducting internal audit investigation activities, data backup and storage.

WHICH PERSONAL DATA WILL BE PROCESSED

 

Our company will be able to process your data specified from the following groups of persons based on the purposes and reasons of the above processing.

 

Product or Service Receiver (Name-Surname, Address, Business Address, Signature, TR ID No, Telephone Number, Tax Office Information, Tax ID No, Customer Transaction Information, Credit Card Information, Voice Record)

Supplier Officer/Employee (Name-Surname, Workplace address, Signature, Phone number, Tax Office information, Tax ID No, Bank information, IBAN)

Employee Candidate (Address, Name-Surname, Diploma Information, Date of Birth Information, Place of Birth Information, Marital Status, Professional Competence Information, Reference Information, Phone Number, Foreign Language Competence Information)

Visitors (Camera recording images, Log records)

TO WHOM AND FOR WHAT PURPOSE THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED

 

Your collected personal data may be transferred to the following groups of persons within the framework of the above-mentioned purposes and the personal data processing conditions specified in Articles 8 and 9 of the Law No. 6698.

 

The necessary payment and collection transactions within the scope of the establishment and performance of the contract subject to the processing of your personal data can be shared with the relevant banks and dealers and authorized services for service and turnkey services.

With the courts and public institutions and organizations requesting information when necessary within the scope of the fulfillment of our company's legal obligations;

It can be shared with financial consultancy and law offices and other consultants in order to get legal support within the scope of establishing, using and protecting the rights of our company.

Personal data may be shared with the data storage and/or cloud service provider company whose servers are located abroad for the purposes of conducting communication activities, carrying out storage and archive processes, and making use of cloud and e-mail services, based on the explicit consent legal reason in paragraph 1 of Article 9 of the Personal Data Protection Law.

 

METHOD OF COLLECTING PERSONAL DATA

 

Your personal data is collected by our Company through different channels, either physically or electronically, from you or from third parties with whom you have given your explicit consent to be communicated to our Company.

 

STORING YOUR PERSONAL DATA

 

Your personal data are stored based on the regulations in the "c", "ç" and "f" paragraphs of Article 5 of the PPD Law and in accordance with the general principles specified in Article 4 of the PPD Law; taking into account the periods specified in the Erasure and Destruction Policy regulated in accordance with Article 7 of the PPD Law;

 

The data of the product or service recipient natural or legal person 10 years from the establishment of the contract,

Identity and accounting data of the supplier official/employee 10 years from the date of payment of the contract,

Identity, communication, professional experience data of the employee candidate 30 days from the date of CV evaluation,

Company camera images 3 weeks from the date of recording,

Log records of the visitors over the internet network of the company are kept for 2 years and are destroyed at the end of the storage period.

RIGHTS OF THE DATA OWNER

 

As the data owner, by applying to our Company, You have the rights listed in;

 

To learn whether his/her personal data is processed or not,

Request information if their personal data has been processed,

To learn the purpose of processing the personal data and whether they are used in line with this purpose,

To receive information on the third persons to whom the personal data is transferred at home or abroad,

To request the rectification of the data in the event they are processed incompletely or inaccurately,

To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Personal Data Protection Law,

Requesting that the correction, deletion or destruction of personal data be notified to third parties to which personal data is transferred,

To object to any adverse consequences arising as a result of processed data being analyzed exclusively by automatic systems,

To claim compensation for the damage arising from the unlawful processing of personal data.

APPLICATION TO THE DATA CONTROLLER

 

In the event that you submit your requests regarding your rights as personal data owners to the Company in accordance with paragraph 1 of Article 13 of the PPD Law or through the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller (https://www.resmigazete.gov.tr/eskiler/2018/03/20180310-6.htm), our Company will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the Company will charge the fee in the tariff determined by the Personal Data Protection Authority.

 

In order to exercise your above-mentioned rights, you can send your request containing the necessary information identifying your identity and your explanations regarding your right to exercise the rights specified in Article 11 of the KVK Law; by filling in the application form on our website, you can send a signed copy to our address in printed form, you can send it by hand, you can send it through a notary public or you can send the relevant form to our Kep address with a secure electronic signature.

 

 

 

 

 

 

 

 

 

 

The contact information of our company is as follows:

 

DORTEK KAPI SAN. VE TİC. A.Ş.

 

Merdivenköy Mah. Yumurtacı Abdi Bey Cad. Dikyol Sk. No:2 B Blok K:19 34732 Kadıköy/İSTANBUL

 

0216 412 4035

 

info@dortek.com.tr