1- PURPOSE AND SCOPE
Uygurlar Makina İmalat Sanayi ve Ticaret Anonim Şirketi (Uygurlar Makina or the Company) respects the privacy of your personal data and we are sensitive to the security of your data. With this awareness, we attach importance to the processing, safe use and storage of all kinds of personal data of persons related to Uygurlar Makina, who benefit from our products and services, in accordance with the Data Protection Act. personal data no. 6698. .
Uygurlar Makina, as "Data Controller", has been prepared in order to inform and enlighten you in a transparent way on the purposes of the processing of your personal data, the persons shared, the way in which they are collected, the legal reasons and your rights, within the scope of Article 10 of the Personal Data Protection Law No. 6698 and other relevant laws.
2-DEFINITIONS
The meanings of the following terms in the Disclosure Text refer to the definitions specified in Law No. 6698, regulations and announcements issued with respect to that Law, and are as follows.
• Express consent: Consent on a specific subject, based on information and expressed freely,
• Anonymization: Make personal data that can in no way be associated with an identified or identifiable natural person, even by matching with other data,
• Recipient group: The category of natural and legal persons to whom the personal data is transferred by the Data Controller,
• Person concerned: The natural person whose personal data is processed,
• Contact person: to ensure communication with the Authority regarding obligations under the law and secondary regulations to be issued on the basis of this law by the controller for natural and legal persons residing in Turkey, by the representative of the controller for natural and legal persons. persons not residing in Turkey The actual person notified upon registration for registration purposes,
• Law: Personal Data Protection Act (KVKK) of 03/24/2016 and numbered 6698,
• Personal data: Any information relating to an identified or identifiable natural person,
• Processing of personal data: obtaining, registration, storage, conservation, modification, reorganization, disclosure, transfer, recovery, provision of personal data by fully or partially automatic or non-automatic means, provided that they are part of any data logging system, All kinds of operations performed on data such as classification or prevention of use,
• Personal data retention and destruction policy: the policy on which data controllers base the process of determining the maximum duration necessary to achieve the purpose for which the personal data is processed, and the erasure process, destruction and anonymization,
• Sensitive personal data: Data on race, ethnic origin, political opinion, philosophical beliefs, religion, sect or other beliefs, disguise and dress, membership of associations, foundations or trade unions, health, sex life, criminal convictions and security measures. biometric and genetic data,
• Processor: the natural or legal person who processes personal data on behalf of the controller, on the basis of the powers conferred by the controller,
• Data registration system: The registration system in which personal data is processed and structured according to certain criteria,
• Processing manager: The natural or legal person who determines the purposes and means of processing personal data and who is responsible for setting up and managing the data recording system,
3- INFORMATION CONCERNING RESPONSIBLE DATA
In legal persons, the data controller is the legal person itself. The obligations of the data controller of legal persons residing in Turkey under the law are fulfilled by the body/person or persons authorized to represent and bind the legal person. The body empowered to represent the legal person,
He may appoint one or more persons with regard to the obligations to be fulfilled with a view to the application of the law. This assignment does not relieve the liability of the legal person in accordance with the provisions of the Law.
Uygurlar Makine operates as a joint-stock company residing in Turkey with legal personality. The information about Uygurlar Makine as data controller is as follows.
Data Controller;
Title:
Uygurlar Makina İmalat Sanayi ve Ticaret Anonim
Sirketi.
Mersis number: 0662-0282-6000-0013
Address:
Guldiken OSB, Ahi Evran Blv. n°1/
KIRSEHIR - TURKİYE
Telephone: +90 (0)386 272 11 11
e-mail address: info@uygurlarmakina.com.tr
4- OBLIGATIONS OF THE DATA RESPONSIBLE
Uygurlar Makina, as part of its obligation to inform data subjects;
• Identity of the data controller and his representative, if any,
• For what purpose will the personal data be processed,
• To whom and for what purpose the processed personal data may be transferred,
• Method and legal reason for collecting personal data,
• What are the rights of persons whose personal data are processed, responsible for providing information.
Uygurlar Makina also regarding data security;
• To prevent the unlawful processing of personal data,
• To prevent illegal access to personal data,
• It takes the necessary security measures to ensure the protection of personal data.
Uygurlar Makina does not disclose personal data obtained by carrying out the necessary inspections in order to ensure the implementation of the provisions of Law No. 6698, in violation of the provisions of Law No. 6698, and does not use them for other purposes. than the treatment.
5- PURPOSE OF THE PROCESSING OF PERSONAL DATA
In accordance with Article 4 of Law No. 6698 on the protection of personal data, your personal data;
• As stipulated by law and the rule of honesty,
• In connection with the purposes of the processing, in a limited and measured way,
• Accurate and up-to-date,
• For certain explicit and legitimate purposes,
• They are processed taking into account the conditions stipulated in the relevant legislation or the conditions for which they are processed and their conservation for the required period.
Email registered
(KEP): uygurlarmak@hs01.kep.tr
Contact person: Adnan Naci UYGUR
By Uygurlar Makina, of parties such as customers, employees, potential customers, employee candidates, business partners and suppliers, identity information, contact information, personal and legal transaction data, customer transaction information, physical space security, transaction security, marketing sales information, Personal Data may be collected in categories such as work experience and education data, health information, jazz beliefs and security measures, and visual and audio data.
Uygurlar Makina processes personal data collected for the following purposes.
These purposes are;
• Within the scope of tax laws, Turkish Commercial Code No. 6102 and other legal, tax, etc. regulations. compliance with obligations relating to public debts,
• Take measures concerning the protection of consumer rights within the framework of Law No. 6502 on consumer protection,
• Order the products that the data subjects wish to buy from Uygurlar Makine, sell the products, deliver the products to the data subjects, collect costs, provide after-sales services regarding the product sold, measure customer satisfaction, collect complaints and suggestions, if any, regarding the product or service sold and its evaluation,
• Plan the human resources process and execute the personnel procurement processes,
• Carry out campaigns, promotions, advertisements and promotional activities regarding products and services, providing information on these matters,
• Ensure internal safety, increase production efficiency,
• Prove the business relationship, record wage and salary information, make legal notifications to finance, social security institution and other institutions, apply occupational health and safety principles, to fulfill the obligations resulting from the laws, to determine the working conditions,
• Carrying out market studies and analyses, including satisfaction surveys,
• Planning and execution of corporate communication activities,
• Respond to purchase requests, determine and approve the terms of the contract,
• Planning and execution of financial and accounting activities,
• Planning and execution of legal activities
• Creation and monitoring of visitor files.
6- TRANSFER AND PROTECTION OF PERSONAL DATA
Uygurlar Makine does not transfer the personal data it has obtained for data processing purposes to third parties/institutions without the explicit consent of the data subject.
Uygurlar Makina provides services to individuals, institutions and/or organizations which are required/permitted by tax and social security laws and other laws and other legislative provisions, Tax Administration, İş-Kur, Social Security Institution, Commission of Financial Crimes Investigation, Interbank Card Center, Kosgeb, Credit Registry Office, Regulatory and Supervisory Institutions, Public Legal Entities Authorized to Receive Personal Data, Domestic/Foreign Subsidiaries of Uygurlar Makine, Institutions and Organizations cooperation program partners/solution partner, PTT branches, logistics support service, consulting and independent audit due to legal obligations; Even if there is no legal obligation, it may transfer personal data to third parties and institutions, partners of the company, provided that the rights of the person concerned under Law no.
In accordance with the purpose of the service we provide or in the cases provided for by the relevant legislation with the regulatory, control institutions and official authorities, it may be transferred within the country or abroad.
7- METHOD OF COLLECTING YOUR DATA AND LEGAL REASONS
Your personal data may be collected by the Company by verbal, written, video recording, visual or electronic means in accordance with the aforementioned purposes and for legal reasons arising from legislation and contractual obligations, in particular Law No. 6698.
8- OBTAINING THE EXPRESS CONSENT OF THE PERSON RELATED TO THE PROCESSING OF PERSONAL DATA
The personal data to be processed by Uygurlar Makine is processed by obtaining the "explicit consent" of the data subject under Law No. 6698. express consent; means consent of the data subject, based on information, on a particular subject, which will be declared voluntarily. In accordance with article 5/2 of law no. 6698, personal data may be processed without requesting the explicit consent of the person concerned, in the presence of one of the following conditions.
• Explicitly provided for by law.
• It is mandatory for the protection of the life or physical integrity of the person or of another person who cannot express his consent due to real impossibility or whose consent is not legally recognised.
• It is necessary to process the personal data of the parties to the contract, provided that they are directly related to the establishment or performance of a contract.
• It is mandatory for the data controller to fulfill his legal obligation.
• The person concerned has been made public by himself.
• Data processing is mandatory for the recognition, exercise or protection of a right.
• Data processing is mandatory for the legitimate interests of the controller, provided that it does not adversely affect the fundamental rights and freedoms of the data subject. In accordance with article 6/2 of law no. 6698, it is prohibited to process sensitive personal data without the express consent of the data subject.
• Personal data other than health and sex life may be processed without requesting the express consent of the person concerned, in the cases provided for by law.
• Personal data relating to health and sex life are only subject to the explicit consent of the person concerned by persons bound by confidentiality or institutions and bodies authorized for the purposes of the protection of public health, practice of preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing can be handled without phoning.
9- PERIOD OF CONSERVATION OF PERSONAL DATA
Uygurlar Makine destroys personal data (deletes, destroys or anonymizes personal data) when the purpose for processing personal data disappears and mandatory storage periods determined under laws and other legislations expire.
10- RIGHTS OF THE RELATED PERSON
Data subjects can contact the controller and;
• Know whether personal data is being processed or not,
• If personal data has been processed, request information about them,
• Know the purpose of the processing of personal data and whether they are used in accordance with the purpose,
• Know the third parties to whom the personal data is transferred in the country or abroad,
• Request the correction of personal data in the event of incomplete or incorrect processing,
• Request the erasure or destruction of personal data under the conditions provided by law,
• Request notification of changes to personal data from third parties to whom the personal data has been transferred,
• To oppose the emergence of a result against the person himself by analyzing the data processed exclusively by automated systems,
• He has the right to demand compensation for damage in the event of loss due to unlawful processing of personal data.
11- APPLICATION FOR DATA SPECIALIST
Natural persons whose personal data are processed may contact Uygurlar Makine regarding their requests within the scope of their rights specified in Article 11 of Law No. 6698. Data subjects may benefit from this right, provided that submit their application in Turkish. Data subjects may submit their requests to Uygurlar Makine through one of the following communication channels. In this sense, the requests of the persons concerned;
• In writing,
• Via a registered e-mail address (KEP),
• By secure electronic signature or mobile signature,
• By using the e-mail address previously communicated to Uygurlar Makine by the person whose personal data is processed and stored in the Uygurlar Makine system,
In the applications;
• Surname, first name and signature if the request is in writing,
• For citizens of the Republic of Türkiye, T.R. identification number, nationality for foreigners, passport number or identification number, if applicable,
• Domicile or professional address according to notification,
• E-mail address, telephone and fax numbers for notification, if applicable,
• The subject of the request is mandatory. Information and documents relating to the subject must be attached to the application. Applications can be made using the "application form". For requests to be made by data subjects, the communication channels specified in the section entitled “3-INFORMATION CONCERNING THE PERSON CONCERNED” of this information text may be used. Uygurlar Makine completes requests in the application free of charge as soon as possible and at the latest within thirty days, depending on the nature of the request. However, if the process requires a separate cost, a fee may be charged for the amount specified in article 7 of the “Notice on the procedures and principles of application to the controller”. In the event that the request is caused by the fault of the data controller, the fees collected are returned to the data subject.
12- CHANGES AND UPDATES
This clarifying text has been prepared within the framework of Law No. 6698 and the regulations and announcements issued within the framework of said law and the personal data processing objectives and policies of Uygurlar Makina. In the event of inconsistency between the legislation in force and the Clarification Text, the Data Controller accepts that the applicable legislation finds a scope of application.
Necessary changes may be made to the clarifying text in accordance with applicable law and/or changes in the purposes and personal data processing policies of Uygurlar Makina.