GENERAL INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
As Ar Grup Makine Sanayi ve Ticaret Anonim Şirketi (the "Company"), we attach great importance to ensuring the security of your personal data. In this context, in accordance with Law No. 6698 on the Protection of Personal Data ("PDP Law"), we take the necessary measures to ensure an appropriate level of security during the processing and transfer of your personal data to third parties, to prevent unlawful processing and access of your personal data, and to ensure its safekeeping. Aware of this responsibility, we process your personal data within the framework specified below, acting as the Data Controller, within the scope of the PPD Law and related legislation.
Obtaining, Processing, and Purposes of Processing Your Personal Data
Your personal data is collected for the purposes of carrying out the activities determined by our Company in accordance with the Personal Data Protection Law and relevant legislation, fulfilling the requirements of relevant legislation within the scope of our activities, managing our Company, conducting business, implementing Company policies, conducting marketing, advertising, and promotional activities, improving the quality of services, ensuring security within the Company, performing activities prescribed and/or deemed exceptional by public authorities, and complying with information storage, reporting, and information obligations.
In this context, the personal data I process is as shown in the table below:
|
Identity information
|
All information contained in documents such as Driver's License, Identity Card, Residence, Passport, Lawyer's ID, Marriage Certificate, which clearly belongs to an identified or identifiable natural person and is processed partially or fully automatically or non-automatically as part of the data recording system.
|
|
Contact information
|
Information such as telephone number, address, e-mail, which clearly belongs to an identified or identifiable natural person and is processed partially or fully automatically or non-automatically as part of a data recording system.
|
|
Customer information
|
Information that clearly belongs to an identified or identifiable natural person, processed partially or fully automatically or non-automatically as part of a data recording system; information obtained and produced about the relevant person, whether the customer's official or employee, as a result of our commercial activities and the operations carried out by our business units within this framework.
|
|
Customer transaction information
|
Information that clearly belongs to an identified or identifiable natural person and is included in the data recording system; records regarding the use of our products and services, and the instructions and requests required for the customer to use the products and services
|
|
Physical space security information
|
Personal data related to records and documents taken at the entrance to the physical location and during the stay in the physical location, which are clearly related to an identified or identifiable natural person and are included in the data recording system
|
|
Transaction security information
|
Your personal data, which clearly belongs to an identified or identifiable natural person and is included in the data recording system, is processed for the purposes of ensuring the fulfillment of technical, administrative, legal and commercial obligations while carrying out our commercial activities
|
|
Risk management knowledge
|
Personal data that clearly belongs to an identified or identifiable natural person and is included in the data recording system; processed through methods used in accordance with generally accepted legal, commercial practices and the rule of integrity in these areas in order to manage our commercial, technical and administrative risks
|
|
Financial information
|
Personal data of the customer's official or employee regarding information, documents and records showing all kinds of financial results of the relevant person, which are clearly related to an identified or identifiable natural person and are processed partially or fully automatically or non-automatically as part of a data recording system
|
|
Special categories of personal data
|
Data regarding race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data are special personal data.
|
Accordingly, depending on the nature of the service provided to you, your personal data is collected and processed in all forms of verbal, written, visual, or electronic media, for the purposes outlined below, to enable the Company to conduct all business within its scope of operations within the legal framework, and to fully and properly fulfill its contractual and legal obligations.
Sharing Your Personal Data
Your personal data, which we process for the purposes described above, may be transferred to our domestic and international subsidiaries, business partners, suppliers, company officials, shareholders, group companies, legally authorized public institutions and organizations, and private individuals, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.
Destruction of Your Personal Data:
Our Company retains the personal data it processes for the periods specified by legislation. In cases where no separate period is specified by legislation, Personal data is stored for the period required by our Company's practices and business practices, in accordance with the services our Company offers while processing that data, and for periods thereafter deemed necessary solely for the purpose of providing evidence in potential legal disputes. After these periods, personal data is deleted, destroyed, or anonymized on the first date of destruction, in accordance with Article 7 of the Personal Data Protection Law.
Your Rights Regarding the Processing of Personal Data
You may contact our Company pursuant to Article 11 of the Personal Data Protection Law and submit the following requests:
To learn whether your personal data has been processed, and if so, to request information regarding this.
To learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose.
To learn the third parties to whom your personal data has been transferred, whether domestically or internationally.
To request correction of incomplete or inaccurate personal data.
To request the deletion, destruction, or anonymization of your personal data if the reasons requiring the processing of your personal data cease to exist under Article 7 of the Personal Data Protection Law.
To request notification of the actions taken pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred.
To object to any adverse consequences arising from the analysis of processed data, exclusively through automated systems.
To request compensation for damages suffered due to the unlawful processing of your personal data.
Right to Apply
You can exercise your rights listed above, in accordance with the provisions of the Personal Data Protection Law and the Communiqué on the Procedures and Principles for Applications to the Data Controller, published on March 10, 2018, and relevant current legislation, by using the "Application Form Pursuant to the Protection of Personal Data" located at ………………………………………………
You can deliver the application in person or by hand to O.S.B. Avrupa Hun Cad. No: 10 Sincan/Ankara, or send it via notary to O.S.B. Avrupa Hun Cad. No: 10 Sincan/Ankara.
You can send it to argrup@hs05.kep.tr with a secure electronic or mobile signature, via your registered email address, or via your email address registered in our system.
For a person other than the relevant person to submit a request, the relevant person must have a notarized special power of attorney issued by the relevant person in the name of the person making the request.
In this context, your requests submitted to our Company in a proper manner will be resolved within thirty days at the latest. If the resolution of such requests requires additional costs, our Company will charge the applicant a fee as determined by the Personal Data Protection Board ("Board"). If our Company responds to your application using a recording medium such as a CD or flash drive, a fee not exceeding the cost of the recording medium may be charged.
Our Company may request information from the applicant to determine whether the applicant is the subject of personal data and may ask the applicant questions regarding their application to clarify the issues stated in the application.
In accordance with Article 14 of the Personal Data Protection Law, if the application is rejected, the response is deemed insufficient, or the application is not responded to within the timeframe, the data subject may file a complaint with the Board within thirty days from the date they learn of our Company's response, and in any case, within sixty days from the date of application.
For the General Information Text Click