KVKK – YDE Elektromekanik

YDE Electromechanical Construction. Industry and Trade Ltd. Co.

INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

This Information TEXT has been prepared by YDE Electromechanical Construction. Industry and Trade Ltd. Co. (“Company”) to inform the Company’s customers regarding the Company’s processing of their personal data under Law No. 6698 on the Protection of Personal Data (“Law”).

You can access detailed information regarding the processing of your personal data under this Information TEXT in the YDE Electromechanical Construction. Industry and Trade Ltd. Co. Personal Data Protection and Processing Policy, available at [https://www.yde.com.tr].

a) Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected electronically or physically. Your personal data collected for the legal reasons specified in this Disclosure Statement may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Your personal data is processed for the purposes of planning and executing the activities necessary to recommend and promote the products and services offered by the Company to relevant individuals by customizing them according to their tastes, usage habits, and needs, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law. This process includes the carrying out of the necessary work by the business units and the execution of relevant business processes to enable relevant individuals to benefit from the products and services offered by the Company. This process involves the carrying out of the necessary work by the business units and the execution of related business processes to carry out the commercial activities carried out by the Company. This process involves the planning and execution of the Company’s commercial and/or business strategies, and the ensuring of the legal, technical, and commercial-occupational security of the Company and the relevant individuals who have a business relationship with the Company.

c) Parties with whom Personal Data May Be Shared and Purposes of Sharing

Your personal data may be shared with the Company’s business partners and suppliers, legally authorized institutions and organizations, and legally authorized private law legal entities, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of planning and executing the activities necessary to recommend and promote the products and services offered by the Company to relevant individuals by customizing them according to their tastes, usage habits, and needs; carrying out the necessary work by the business units and carrying out the relevant business processes to enable relevant individuals to benefit from the products and services offered by the Company; carrying out the necessary work by the relevant business units and carrying out the relevant business processes to carry out the commercial activities carried out by the Company; planning and executing the Company’s commercial and/or business strategies; and ensuring the legal, technical, and commercial-occupational security of the Company and relevant individuals in business relationships with the Company.

d) Data Subjects’ Rights and the Exercise of These Rights

As personal data owners, if you submit your requests regarding your rights listed below to the Company using the methods specified under the heading “Exercise of Rights by Data Owners,” your requests will be evaluated and finalized by our Company as soon as possible and in any case within 30 (thirty) days.

As a personal data subject, you have the following rights pursuant to Article 11 of the Law:

To learn whether your personal data has been processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose,
To know the third parties to whom your personal data has been transferred, whether domestically or internationally,
To request correction of your personal data if it is incomplete or inaccurately processed, and to request notification of the action taken to the third parties to whom the personal data has been transferred,
To request the deletion or destruction of your personal data if the reasons requiring processing no longer exist, despite the data being processed in accordance with the Law and other relevant legal provisions, and to request notification of the action taken to the third parties to whom the personal data has been transferred,
To object to the analysis of your processed data, exclusively through automated systems, resulting in a detrimental outcome,
To request compensation for damages suffered due to the unlawful processing of your personal data. Article 28, Paragraph 2 of the Law lists the situations in which data subjects do not have the right to request processing. In this context, the above-mentioned rights cannot be exercised in the following cases:
Personal data processing is necessary for the prevention of crime or criminal investigation;
Personal data that has been made public by the data subject;
Personal data processing is necessary for the performance of supervisory or regulatory duties, or for disciplinary investigations or prosecutions, by authorized public institutions and organizations, or professional organizations with public institution status, based on the authority granted by law;
Personal data processing is necessary to protect the economic and financial interests of the State regarding budget, tax, and financial matters.
According to Article 28, Paragraph 1 of the Law, in the following cases, data subjects’ requests will not be processed, as the data falls outside the scope of the Law:
Personal data is processed by natural persons within the scope of activities related solely to themselves or their family members living in the same residence, provided that they are not disclosed to third parties and that data security obligations are complied with.
Processing of personal data, anonymized by official statistics, for purposes such as research, planning, and statistics.
Processing of personal data for artistic, historical, literary, or scientific purposes, or for freedom of expression, provided that it does not violate national defense, national security, public safety, public order, economic security, privacy of private life, or personal rights, or constitutes a crime.
Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order, or economic security.
Processing of personal data by judicial authorities or enforcement authorities in connection with investigations, prosecutions, trials, or executions.
Exercise of Rights by Data Subjects
Data subjects may use the “Form Regarding Applications to be Made by Personal Data Subjects to the Data Controller” available at [https://www.yde.com.tr] to exercise the aforementioned rights.
Applications must be submitted, accompanied by documents confirming the identity of the relevant data subject, using one of the following methods:
The form must be completed and a signed copy must be delivered by hand, via a notary, or by registered mail to [YDE Elektromekanik İnş. San. ve Tic. Ltd. Şti. – Gayret Mahallesi, Bankacılar Caddesi, Marka Konutları No:3, A Blok No:2 Yenimahalle / Ankara / Turkey].
The form must be signed with a secure electronic signature issued under Electronic Signature Law No. 5070 and sent by registered email to info@yde.com.tr.
The method prescribed by the Personal Data Protection Board must be followed.
The Company responds to data subjects who wish to exercise these rights within the limits stipulated in the Law within a maximum of thirty (30) days, as stipulated in the Law.
For third parties to submit applications on behalf of personal data subjects, the data subject must have a special power of attorney issued through a notary public in the name of the applicant.
Data subject applications are generally processed free of charge, but fees may be charged according to the fee schedule established by the Personal Data Protection Board.
The Company may request information from the applicant to determine whether the applicant is the personal data subject and may ask the data subject questions regarding the application to clarify the matters specified in the application.