Personal Data Protection Law
CUSTOMER CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA PURSUANT TO THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA (‘KVKK’)
Located in Turkiye, Kayapa Organised Industrial Zone, Kayapa Mah. Papatya (530) Cad. No:1A/1
As EUROTECH METAL ENDÜSTRİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ (‘COMPANY’), located in NİLÜFER – BURSA; In line with the importance we attach to the security of your personal data, all kinds of personal data we hold within our structure are processed, stored and transferred in accordance with the Personal Data Protection Law No. 6698 (‘KVKK’). This information has been prepared in accordance with Article 10 of the KVKK titled ‘Obligation of the Data Controller to Inform’ regarding your personal data collected, stored and processed by the COMPANY as the data controller.
If necessary, your personal data, which we obtain in the following ways, within the scope of our commercial relations or within our business relationship with you; within the framework of the purpose requiring their processing and in connection with this purpose, in a limited and measured manner, by preserving the accuracy and the most up-to-date version of the personal data as you have notified us or as notified to us, will be recorded, stored, maintained, reorganised, institutions that are legally authorised to request this personal data, shareholders, business partners and under the conditions stipulated by the Law on the Protection of Personal Data, it will be transferred to third parties in the country, transferred, classified and processed in other ways listed in the Law on the Protection of Personal Data.
YOUR PERSONAL DATA PROCESSED:
The personal data and data categories processed in relation to our customers and customer employees are as follows:
Customer/Member, Potential Customer/Member Identity Information: Name, surname, date of birth, gender, Turkish ID number
Location Information: City, district (delivery address of the shopping made through eurotechendustri.com)
Contact Information: mobile phone, e-mail address, address, postcode, landline phone
Financial Information: Tax office, invoice information
Customer/Member Information: Membership information, membership ID number
Customer/Member Transaction Information: Purchased product(s), shopping amount, shopping date, call centre call records, commercial communication permission, campaigns used, coupons used, information about the order
Risk Management Information: IP address
Transaction Security Information: Password, password information
Marketing Information: Cookie records, targeting information, evaluations showing habits and tastes
Auditory Data: Call centre call recordings
Legal Transaction and Compliance Information: The start and end time of the service provided, the type of service utilised, the amount of data transferred, the commercial electronic message permission given by the Relevant Person in electronic environment, the membership agreement, corporate membership agreement, distance sales agreement and other legal texts and agreements that enable the use of the services offered by the COMPANY
Marketing Information: Marketing sms, e-mail messages or calls made by the call centre sent based on the commercial electronic message permission given by the person concerned
Request/Complaint Management/Reputation Management Information: Records regarding the complaints and/or requests submitted by the relevant person through the website, mobile application, social media accounts or call centre regarding the product or service purchased by the relevant person and the transactions made during the evaluation or management of these requests
Online Visitor Transaction Security Information: Password, mobile phone, passcode information
Legal Action Information/Risk Management Information: IP address
Legal Procedure and Compliance Information: Start and end time of the service provided, type of service utilised, amount of data transferred.
Identification Information of the Person on Whose Behalf the Purchased Product will be Delivered: Name, surname, date of birth, gender, Turkish ID number
Location Information: City, district (delivery address of the shopping made through …………….com)
Contact Information: mobile phone, e-mail address, address, postcode, landline phone
Financial Information: Tax office, invoice information
Vendor/Supplier/Vendor Candidate/Vendor or Supplier Employee or Official Identification Information: Turkish ID No, Name and surname
Contact Information: e-mail address, telephone, KEP address, address, mobile phone
Financial Information: Account No, Tax office, Tax Identification Number, tax plate, IBAN
Legal Procedure and Compliance Information: Signature circular, certificate of activity,
Sensitive Personal Data/Legal Transaction Information: Signature
Visual Information: Photo
METHOD AND LEGAL REASON FOR COLLECTING YOUR PERSONAL DATA:
As the COMPANY, in order to fulfil our legal and financial obligations, for the requirements of the commercial relationship between us, for reasons stipulated by law and for the legitimate interest of the COMPANY, we collect your personal data that we personally request from you or in other texts shared by you, by you transmitting it to us electronically and recording information open to the access of third parties to the COMPANY computer programs, applications and servers open to the use of more than one person or to the internet environment; in order to fulfil our legal and financial obligations and due to the stipulation of the law.
Personal data collected by the COMPANY depending on the commercial relationship between the parties;
Personal Data Protection Law Art. 5/2-c : ‘ Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract’
Personal Data Protection Law Art. 5/2-ç: ‘It is mandatory for the data controller to fulfil its legal obligation’
Personal Data Protection Law Art. 5/2-e: ‘Data processing is mandatory for the establishment, exercise or protection of a right’
on the basis of legal grounds.
KVKK 5. Your personal data pursuant to Art; In cases clearly stipulated in the TCC, TCO and other laws, in cases where you cannot disclose your consent due to actual impossibility or your consent is not legally valid, it is necessary to process your personal data, provided that it is mandatory to protect your or someone else’s life or physical integrity, provided that you are directly related to the establishment or performance of a contract, If it is mandatory for the COMPANY to fulfil its legal and financial obligations, your personal data made public by you, if it is mandatory for the COMPANY to process data for the establishment, exercise or protection of a right, provided that it does not harm your fundamental rights and freedoms, if it is mandatory to process your data for the legitimate interests of the COMPANY, the COMPANY may process your data without seeking your consent.
PURPOSES OF PROCESSING YOUR PERSONAL DATA:
Your personal data may be processed by the COMPANY for the following purposes and legal reasons.
The fulfilment of the purpose necessary for the performance of the contract between the parties, in particular;
Providing you with the products and services offered by our company
Carrying out the necessary operational activities within the company,
Recommend products and services to our customers in accordance with your consumption and purchase motivation
Carrying out the necessary work with the relevant business unit and business partners,
Ensuring the rights of real persons by providing human resources management by our Company,
Taking the necessary steps to make, implement and realise commercial decisions by our Company,
Ensuring the legal security of the real persons with whom we establish business relations and our Company arising from these relations
To send important information about changes to our terms of service, changes to our electronic services and other administrative information.
Providing quality, training and safety improvement (e.g. in relation to recorded or monitored telephone calls to our contact numbers)
Resolve complaints and process data access or correction requests.
Prevent, detect and investigate crime and analyse and manage other business risks.
Comply with applicable laws and regulatory obligations (including those outside your country of residence); comply with due process of law and respond to requests from public authorities and governmental authorities (including those outside your country of residence).
Manage our infrastructure and business operations and comply with internal policies and procedures, including those relating to audit, finance and accounting; billing and collections; IT systems; data and website hosting; business continuity and records, document and print management.
To establish and defend legal rights; to protect our activities or the activities of our business partners, our rights, privacy, security or property, and/or your or others’ such assets; and to enforce available remedies or limit our loss.
Conducting market research and analysis, including satisfaction surveys.
Processing of online visitor data in accordance with the relevant legislation,
Improving the services offered through the platforms, developing new services and providing information about them
For the purpose of the performance of the Service Agreement established with the Customer, commercial electronic message approval in terms of existing customers; Analysing customer preferences, tastes and needs and providing special promotions, opportunities and benefits to the Customer
Within the scope of the contractual relationship, commercial electronic message approval in terms of existing customers; direct marketing, digital marketing, remarketing, targeting, profiling and analysis, promotion and marketing of applications, goods/products and services in line with the preferences and tastes of the Customer
Resolution of customer problems and complaints
Contacting the Customer based on the commercial electronic message permission, improving the Customer experience on both the platform and the mobile application
Creating customer satisfaction, loyalty and commitment
Corporate reputation management, media communication
Determining and implementing the commercial and business strategies of the COMPANY
Follow-up of accounting and purchasing transactions
Legal processes and compliance with legislation
Responding to information requests from administrative and judicial authorities
Planning of internal reporting and business development activities within the COMPANY
Ensuring information and process security and preventing malicious use
Your personal data will be retained for the maximum period specified in the relevant legislation or required for the purpose for which they are processed, and in any case for the legal statute of limitations.
SHARING YOUR PERSONAL DATA WITH THIRD PARTIES IN THE COUNTRY:
Your personal data may be shared with public legal entities such as the Turkish Code of Obligations, the Turkish Commercial Code, the Law on the Protection of Personal Data No. 6698, the Law on the Protection of Personal Data, the Law on Identity Notification and other legislation provisions, including but not limited to the Turkish Code of Obligations, the Turkish Commercial Code, the Ministry of Finance, the Ministry of Customs and Trade, the Ministry of Labour and Social Security, the Information Technologies and Communication Authority, to the extent permitted and required by the relevant institutions or organisations.
YOUR RIGHTS UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA:
Pursuant to Article 11 of the Law on the Protection of Personal Data, if you apply to us in person, with the form available on the COMPANY’s website, provided that you prove your identity, regarding your personal data;
To find out whether the COMPANY has processed personal data about you, and if so, to request information regarding this,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To learn whether personal data are transferred domestically or abroad and to whom they are transferred,
To request the correction of your inaccurate and incomplete personal data and to inform the recipients whose data has been or may have been transferred,
To request the destruction (deletion, destruction or anonymisation) of your data within the framework of the conditions stipulated in Article 7 of the KVKK and to request that the third parties to whom the data is/may be transferred be informed about your request for such destruction,
Object to the results of your personal data analysis, which are exclusively generated using an automated system, if these results are contrary to your interests,
You have the right to demand compensation for damages in case you suffer damage due to unlawful processing of your personal data.
However, by evaluating your destruction request, we will evaluate which method is appropriate according to the circumstances of the concrete case. In this context, you can always request information from us about why we have chosen the destruction method we have chosen.
Your requests in your application will be finalised free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the COMPANY, the fee in the tariff determined by the Personal Data Protection Board in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged.
In matters related to the processing of your personal data, you must submit your application to our COMPANY by filling out the application form on the COMPANY’s website, in writing or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified to us and is included in our records.
Depending on the nature of your request and your application method, the COMPANY may request additional verifications (such as sending a message to your registered phone, calling you) in order to determine whether the application belongs to you and thus protect your rights. For example, if you apply via your e-mail address registered with the COMPANY, we may contact you using another communication method registered with the COMPANY and request confirmation of whether the application belongs to you.