GENERAL INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
As Ar Grup Makine Sanayi ve Ticaret Anonim Şirketi (the "Company"), we attach great importance to ensuring the security of your personal data. In this context, we take the necessary measures to prevent the unlawful processing of and unauthorized access to your personal data and to ensure its preservation, in accordance with the Personal Data Protection Law No. 6698 (the "Law"), during the processing and transfer of your personal data to third parties. With the awareness of this responsibility, as the Data Controller, we process your personal data within the framework set forth below in accordance with the Law and relevant legislation.
- Collection, Processing, and Purposes of Processing Your Personal Data
Your personal data is collected for the purposes of carrying out the activities determined by our Company in accordance with the provisions of the Law and relevant legislation, fulfilling the requirements of the relevant legislation within the scope of our activities, managing our Company, executing business operations, implementing Company policies, conducting marketing, advertising, and promotional activities, enhancing the quality of services, ensuring security within the Company, fulfilling activities stipulated and/or deemed exceptional by public authorities, and complying with information storage, reporting, and disclosure obligations.
In this context, the personal data we process is as outlined in the table below:
| Identity Information |
All information contained in documents such as Driver's License, Identity Card, Residence Permit, Passport, Bar Association ID, Marriage Certificate, which is clearly related to an identified or identifiable natural person and is processed wholly or partially automatically or non-automatically as part of a data recording system. |
| Contact Information |
Information such as phone number, address, e-mail, which is clearly related to an identified or identifiable natural person and is processed wholly or partially automatically or non-automatically as part of a data recording system. |
| Customer Information |
Information obtained and generated regarding the authorized representative or employee of the customer, which is clearly related to an identified or identifiable natural person and is processed wholly or partially automatically or non-automatically as part of a data recording system, as a result of our commercial activities and the operations carried out by our business units within this framework. |
| Customer Transaction Information |
Information such as records regarding the use of our products and services, and instructions and requests required for the customer's use of products and services, which is clearly related to an identified or identifiable natural person and is included in the data recording system. |
| Physical Location Security Information |
Personal data relating to records and documents taken during entry to and stay within physical premises, which is clearly related to an identified or identifiable natural person and is included in the data recording system. |
| Transaction Security Information |
Your personal data processed for the purpose of fulfilling technical, administrative, legal, and commercial obligations while carrying out our commercial activities, which is clearly related to an identified or identifiable natural person and is included in the data recording system. |
| Risk Management Information |
Personal data processed through methods used in accordance with generally accepted legal, commercial practice, and rules of integrity in these areas in order to manage our commercial, technical, and administrative risks, which is clearly related to an identified or identifiable natural person and is included in the data recording system. |
| Financial Information |
Personal data of the customer's authorized representative or employee relating to information, documents, and records showing any kind of financial results of the relevant person, which is clearly related to an identified or identifiable natural person and is processed wholly or partially automatically or non-automatically as part of a data recording system. |
| Special Categories of Personal Data |
Data relating to individuals' race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance, membership in associations, foundations or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, constitute special categories of personal data. |
In this regard, depending on the nature of the service provided to you, your personal data is obtained and processed in any verbal, written, visual, or electronic medium for the purposes listed below, for the execution of all kinds of activities within the Company's field of business in a legal framework, and in order to fully and properly fulfill the Company's contractual and legal obligations.
- Sharing of Your Personal Data
Your personal data processed for the purposes explained above may be transferred to our affiliates, business partners, suppliers, company officials, shareholders, group companies, and legally authorized public institutions and private individuals, both domestically and abroad, within the framework of the personal data processing conditions and purposes set forth in Articles 8 and 9 of the Law.
- Destruction of Your Personal Data:
Our Company retains personal data it processes for the periods stipulated by legislation. In cases where no specific period is prescribed by legislation, personal data is retained for the period required by our Company's practices and commercial customs, in connection with the services provided at the time of processing, and thereafter solely for the purpose of serving as evidence in potential legal disputes, for the duration necessitated by practice. Upon the expiration of these periods, the said personal data is deleted, destroyed, or anonymized on the first destruction date, in accordance with Article 7 of the Law.
- Your Rights Regarding the Processing of Personal Data
Within the scope of Article 11 of the Law, you may submit the following requests to our Company by applying to us:
- To learn whether your personal data is processed and, if so, to request information regarding this,
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- To learn the third parties to whom your personal data is transferred, domestically or abroad,
- To request rectification of your personal data if it is incomplete or inaccurately processed,
- To request the deletion, destruction, or anonymization of your personal data in the event that the reasons requiring its processing cease to exist, within the scope of Article 7 of the Law,
- To request notification of the operations carried out pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,
- To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
- To request compensation for the damage if you suffer harm due to the unlawful processing of your personal data.
- Right to Apply
You may exercise the rights listed above by using the "Application Form Pursuant to the Protection of Personal Data" available at ........................, in accordance with the provisions of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on March 10, 2018, and relevant current legislation, by:
- Delivering it in person to O.S.B. Avrupa Hun Cad. No: 10 Sincan/Ankara,
- Sending it via notary public to O.S.B. Avrupa Hun Cad. No: 10 Sincan/Ankara,
- Submitting it via your registered electronic mail address or the e-mail address registered in our system, using a secure electronic or mobile signature, to argrup@hs05.kep.tr.
If a request is made by a person other than the data subject, a notarized special power of attorney issued by the data subject on behalf of the applicant must be present.
Your requests submitted to our Company in accordance with the procedures set forth above will be concluded within thirty days at the latest. If the conclusion of your requests requires an additional cost, a fee will be charged by our Company in accordance with the tariff determined by the Personal Data Protection Board (the "Board"). If our Company responds to your application on a recording medium such as a CD or USB flash drive, a fee not exceeding the cost of the recording medium may be requested.
Our Company may request information from the relevant person to verify whether the applicant is the data subject and may ask questions regarding the application to clarify the matters specified.
Pursuant to Article 14 of the Law, the data subject may lodge a complaint with the Board within thirty days from the date of learning the Company's response, and in any case within sixty days from the date of application, in cases where the application is rejected, the response is deemed insufficient, or no response is provided within the stipulated time.
For the General Information Notice, please Click Here..