logo

PDPL DISCLOSURE TEXT

PDPL DISCLOSURE TEXT

As POLMET YAPI, we show maximum sensitivity regarding the security of personal data.

POLMET YAPI takes security measures at the highest possible level within the framework of the relevant legislation in order to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy. With the awareness of this responsibility, 6698 s.k. As a data controller, we process your personal data as explained below and within the framework of the legislation.


1) Identity of the Data Supervisor and Representative

The scope of processing of your personal data by POLMET YAPI as a data controller in accordance with Article 10 of the Personal Data Protection Law ("PDPL") numbered 6698 is explained below.

2) Purpose of Processing Personal Data

Your collected personal data can be processed by POLMET YAPI in accordance with the basic principles stipulated by the legislation for the following purposes:

  • Carrying out the necessary work and carrying out activities in this direction by the business units of our Company in order to carry out the commercial activities carried out by POLMET YAPI in accordance with the legislation and Company policies;

  • Determining the human resources policy of POLMET YAPI and conducting and executing its activities;

  • Determining, planning and implementing the commercial policies of POLMET YAPI in the short, medium and long term;

  • Ensuring the commercial, technical and legal security of the relevant persons with whom POLMET YAPI has a business relationship and providing contact with these real / legal persons;

  • Protection of POLMET YAPI's commercial reputation and trust;

  • Complying with the information storage, reporting and informing obligations stipulated by the relevant legislation by official institutions, fulfilling the legal obligations we are subject to regarding the use of these services;

  • In order to determine and implement the commercial and business strategies of our company; financial operations, communication, market research and social responsibility activities, purchasing operations (request, offer, evaluation, order, budgeting), internal system and application management operations, management of legal operations;

  • Examining, evaluating and responding to requests from official authorities or related persons;

  • Ensuring the security and supervision of the company's physical spaces by means of camera recording and other systems;

  • Fulfilling the burden of proof as evidence in legal disputes that may arise in the future;

It is processed within the scope of the terms and purposes of the processing of personal data specified in Articles 5 and 6 of the PDPL.

In order to process the necessary business and information within the scope of our activities, your data are classified within the scope of automatic decision making. This situation is obligatory for the reports to be created and the documents to be submitted to the relevant organizations.

The processing of your personal data is legally and contractually obligatory, and if your data is not provided, it is impossible to carry out the commercial activities of real / legal persons who have a business relationship with the company, to fulfill the notifications and obligations required under the legislation, to ensure the execution of human resources activities, to ensure legal-technical-commercial security. will become.

3) To Whom and For What Purpose Data Can Be Transferred

Personal data are transferred to the following persons by POLMET YAPI within the scope of articles 8 and 9 of PDPL, provided that they are limited to the purposes listed above:

  • Persons and institutions permitted by the Turkish Commercial Code, Turkish Code of Obligations, Labor Law and other relevant laws and regulations,

  • With institutions, organizations, persons and companies ordered by legally authorized institutions and organizations, administrative and legal authorities and special legislation;

  • Real and legal persons from whom we purchase products and services and cooperate with,

In case of transfer, the domestic institution and / or enterprise to be transferred will also be asked if there is PDPL compliance and data security.

4) Collection Management of Personal Data and Legal Reason

In order to carry out our activities, your personal data is collected by our Company through different channels (verbal, written, electronic media) based on legal reasons for compliance with legislation and Company policies, execution of contracts, explicitly prescribed by law, legitimate interests of the company. Your personal data can also be processed and transferred for the purposes specified in this Clarification Text within the scope of personal data processing conditions and purposes specified in articles 5 and 6 of PDPL, in accordance with the basic principles stipulated by PDPL.

5) Period of Keeping Personal Data

Your personal data are kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed. The following criteria are taken into consideration while determining the maximum duration:

  • The period accepted as a general practice in the sector in which the data controller operates within the scope of the processing of the relevant data category,

  • The period that requires the processing of personal data in the relevant data category and the legal relationship established with the relevant person will continue,

  • The period during which the legitimate interest to be obtained by the data controller will be valid in accordance with the law and good faith, depending on the purpose of processing the relevant data category,

  • The period during which risks, costs and responsibilities to be created by storing the relevant data category depending on the purpose of processing,

  • Whether the maximum period to be determined is suitable for keeping the relevant data category accurate and up-to-date when necessary,

  • The period during which the data controller is obliged to keep personal data in the relevant data category in accordance with his legal obligation,

  • The statute of limitations determined by the data controller for asserting a right based on personal data in the relevant data category.

6) Rights of Personal Data Owner enumerated in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights to POLMET YAPI through the methods set out in POLMET YAPI Personal Data Protection and Processing Policy, which has been shared with the public at www.polmetyapi.com.tr, our company will send the request as soon as possible and at the latest thirty days, depending on the nature of the request. will conclude in. However, if the transaction requires an additional cost, POLMET YAPI will charge the fee in the tariff determined by the Personal Data Protection Board.

In this context, personal data owners;

  • Learning whether personal data is processed,

  • If their personal data has been processed, to request information regarding this,

  • Learning the purpose of processing personal data and whether they are used appropriately for their purpose,

  • To know the third parties to whom personal data are transferred domestically or abroad,

  • To request correction of personal data in case of incomplete or incorrect processing, and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,

  • Although it has been processed in accordance with the provisions of PDPL and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons for its processing disappear, and to request that the transaction made within this scope be notified to third parties to whom personal data has been transferred,

  • To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,

  • In case of damage due to the unlawful processing of personal data, they have the right to demand the compensation of the damage.

In case the application is rejected, the response is found to be insufficient or the application is not answered in time; The person concerned can make a complaint to the Personal Data Protection Board within thirty days from the date of learning the response of the data controller, and in any case within sixty days from the date of application. In accordance with Article 13 of the Law, complaints cannot be filed without exhausting the remedy.

Within the scope of international legislation, apart from the rights of the person concerned; It also has the right to request the restriction of the processing of personal data and to withdraw consent to the processing or transfer of personal data.

You can make your applications regarding your rights listed above by using the Data Supervisor Application Form at www.polmetyapi.com.tr.