Clarification Text
INFORMATION TEXT ON THE PROCUREMENT, PROCESSING AND PROTECTION OF PERSONAL DATA
1- GENERAL EXPLANATION AND DEFINITIONS
This information text will be referred to as “Yilmazlar Maki̇na Ve Otom Ulaş. Tar. San. ve Ti̇c. Ltd. Şti̇. “(as referred YILMAZLAR MAKINA) as “Data controller”, within the scope of Article 10 of the Law on the Protection of Personal Data (Law) No. 6698, it has been prepared in order to fulfill the “clarification obligation”.
The meanings of the following terms in the information text refer to the definitions specified in Law No. 6698, the Regulations and Communiqués issued regarding this Law, and are as follows.
- Personal data: Any information about a specific or identifiable real person,
- Processing of personal data: Obtaining personal data completely or partially automatically or non-automatically provided that it is a part of any data recording system, all kinds of operations performed on data such as recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making it available, classifying or preventing its use,
- Relevant person: The real person whose personal data is processed,
- Express Assent: Consent on a specific subject, based on the information and expressed with free will,
- Making it anonymous: Making personal data unrelated to a certain or identifiable real person in no way, even by matching it to other data,
- Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,
- Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,
- Data registration system: The registration system in which personal data is processed and structured according to certain criteria,
- Contact person: The natural person notified by the data controller during registration to the Registry for the communication to be established with the Authority, regarding the obligations of the legal persons residing in Turkey and the representative of the data controller of the legal entity not residing in Turkey, under the Law and secondary regulations to be enacted based on this Law,
- Personal data retention and destruction policy: The policy in which data managers are based on the process of determining the maximum time required for the purpose for which personal data is processed and erased, and anonymizing
2-INFORMATION ABOUT DATA OWNERS
The data controller is the legal entity itself in legal persons. Data controller obligations of legal entities residing in Turkey within the scope of the Law are fulfilled by the body/person or persons authorized to represent and bind the legal entity. The body authorized to provide legal personality may assign one or more persons to respect the obligations to be fulfilled in terms of the application of the Law. This assignment does not remove the responsibility of the legal entity under the provisions of the Law.
YILMAZLAR MAKINA operates as a corporate capital company investing in Turkey. Information about YILMAZLAR MAKINA as a data controller is as follows.
Data Controller;
Yılmazlar Makine Ve Otom Ulaş. Tar. San. Ve Tic. Ltd. Şti̇.
Organize Sanayi Bölgesi / Odunpazarı 24. Caddesi No:2, 26100 Eskişehir – Türkiye
Telefon: +90 222 236 13 86 Fax: +90 222 236 13 87
E-mail: yilmazlar@yilmazlarmaksan.com
3-OBLIGATION OF DATA CONTROLLER
YILMAZLAR MAKİNA is obliged to inform the relevant persons responsible for providing information on the following issues;
- Identity of the data controller and if available its representative,
- For what purpose personal data will be processed,
- To whom and for what purpose the process personal data can be transferred,
- Method and legal reason for collecting personal data,
- What are the rights of the persons whose personal data are processed.
YILMAZLAR MAKİNA also, regarding data security;
- To prevent the processing of personal data against the law,
- To prevent access to personal data against the law,
- To ensure the protection of personal data,
takes the necessary security measures. YILMAZLAR MAKINA does not disclose the personal data obtained in its own institution or organization by performing the necessary inspections in order to ensure the implementation of the provisions of Law No. 6698, contrary to the provisions of Law No. 6698, and does not use it for purposes other than processing.
4- PERSONAL DATA TO BE PROCESSED
The personal data to be processed by YILMAZLAR MAKİNA are listed below, and when required and/or required by law, new information can be added and/or amended within the scope of legal legislation.
Personal data that is subject to data processing;
- Name, Surname, Turkish republic identification number, Date of Birth, etc. Information of ID,
- Address, phone, fax number, e-mail, contact information,
- Tax Office, Information of Tax Number
- Information on employee’s charge, social security, bank account number, and information about family members,
- Information about occupation and education
5- METHOD OF OBTAINING PERSONAL INFORMATION
Personal data can be obtained directly from the person concerned and may be obtained indirectly according to the purpose of acquiring data acquired, not limited to, resellers, solution partner institutions and organizations.
6- PURPOSE OF PROCESSING PERSONAL DATA
YILMAZLAR MAKİNA processes personal data for the following purposes. These purposes are;
- Tax laws, Turkish Commercial Code No. 6102 and other legal regulations, such as tax, etc. the fulfillment of public receivables,
- Measures for the protection of consumer rights under the Law on the Protection of consumers numbered 6502,
- Receiving orders for the products that the relevant people want to buy from YILMAZLAR MAKİNA, selling the products, delivering the products to the relevant persons, collecting the costs, providing after-sales services regarding the sold product, measuring customer satisfaction, collecting and evaluating complaints and suggestions, if any, regarding the product or service sold,
- Editing sales contracts, verifying the identity of the person involved in purchases,
- Improve service quality,
- Campaign, promotion, advertising, and promotional activities related to products and services providing information on these issues,
- Ensuring internal security, improving efficiency,
7-TRANSFER AND PROTECTION OF PERSONAL DATA
YILMAZLAR MAKINA does not transfer the personal data it has obtained for data processing purposes to third parties/institutions without the explicit consent of the person concerned.
YILMAZLAR MAKINA provides services to individuals, institutions, and/or organizations that are required/permitted by tax and social security laws and other laws and other legislation, including but not limited to, Revenue Administration, İş-Kur, Social Security Institution, Financial Crimes Investigation Board, Interbank Card Services. Public legal entities authorized to receive personal data such as Card Centre, Consumer Reporting Agency, YILMAZLAR MAKİNA's domestic/foreign subsidiaries, companies operating as dealers, cooperating program partner/solution partner institutions and organizations, PTT branches, logistics support service, consultancy, and companies that receive independent audit services, due to legal obligations; Even if there is no legal obligation, it will be able to transfer personal data to 3rd persons and institutions in order to achieve its aims to provide better service within the scope of Article 6, provided that the rights of the person concerned under the Law No. 6698 are reserved.
8- OBTAINING THE EXPRESS CONSENT OF THE RELATED PERSON IN THE PROCESSING OF PERSONAL DATA
Personal data to be processed by the company shall be processed under Law No. 6698 with the "express assent" of the person concerned. Explicit consent expresses the consent of a specific subject, based on the information and the consent of the person concerned to be released with free will.
In accordance with Article 5/2 of Law No. 6698, personal data may be processed without seeking the explicit consent of the person concerned, in case one of the following conditions exists.
- Explicitly stipulated in the law.
- A person who is unable to disclose his or her consent due to actual impossibility or whose consent is not legally valid is mandatory to protect his or her life or body integrity.
- The processing of personal data of the parties of the agreement is necessary, provided that it is directly related to the establishment or performance of an agreement.
- Data responsible must be required to fulfil its legal obligation.
- The person concerned has been made public by herself or himself.
- Data processing is mandatory for the establishment, exercise or protection of a right.
- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
9- RETENTION TIME OF PERSONAL DATA
YILMAZLAR MAKINA the purpose of processing personal data disappears, the mandatory storage periods determined within the scope of Laws and other legislation expire and personal data is destroyed. (deletes, destroys, or anonymizes personal data)
10- RIGHTS OF THE RELATED PERSON
Relevant persons may apply to the data controller and request certain rights. These rights are;
- Learn if personal data is processed,
- Request information if personal data has been processed,
- Learn the purpose of processing personal data and whether it is used for its purpose,
- Know of third parties in which personal data is transferred, either domestic or abroad,
- Requesting that personal data be corrected if it is missing or incorrectly processed,
- To request that personal data be deleted or destroyed under the terms stipulated in the law,
- Requesting notification of changes in personal data to third parties to whom personal data has been transferred,
- Objecting to the appearance of a result against the individual by analysing the processed data exclusively through automated systems,
- They have the right to request that damage be remedied if personal data is damaged due to illegal processing.
11- APPLICATION TO DATA SPECIALIST
Natural persons whose personal data are processed can apply to YILMAZLAR MAKINA regarding their requests within the scope of their rights specified in Article 11 of Law No. 6698. The relevant persons may benefit from this right, provided that they apply in Turkish. Relevant persons may submit their requests to YILMAZLAR MAKINA through one of the following communication channels. In this direction, the requests of the relevant persons;
- In writing,
- Via registered electronic mail (KEP) address,
- Via secure electronic signature or mobile signature,
- By using the e-mail address previously notified to YILMAZLAR MAKINA by the person whose personal data is processed and registered in YILMAZLAR MAKINA's system,
- Data can be transmitted to YILMAZLAR MAKİNA through software or application developed for application purposes.
The following information is required in applications;
- Name, surname, and signature if the application is written,
- For citizens of the Republic of Turkey, T.R. identification number, nationality for foreigners; passport number or identification number,
- Domicile or workplace address for notification,
- E-mail address, telephone, and fax number for notification,
- Request subject.
Information and documentation on the subject must be included in the application. Application requests can be made using the "Application Request Form". For the applications to be made by the relevant persons, the communication channels specified in the section titled "2-INFORMATION ABOUT DATA OWNERS" of this information text can be used.
YILMAZLAR MAKİNA concludes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost, a fee may be charged in the amount specified in Article 7 of the "Communiqué on Application Procedures and Principles to the Data Controller". In case the application is caused by the fault of the data controller, the fee collected is returned to the relevant person.
12 - CHANGES AND UPDATES
This information text has been prepared within the scope of Law No. 6698 and the Regulations and Communiqués published within the scope of the said Law and the personal data processing purposes and policies of YILMAZLAR MAKINA. The information text may be modified accordingly in accordance with the relevant legal legislation and/or changes to the personal data processing purposes and policies of YILMAZLAR MAKINA.
The most recent version of the briefing text will be available at https://recber.com/kisisel-verilerin-korunmasina-iliskin-aydinlatma-metni/.
