HABAŞ GROUP OF COMPANIES DISCLOSURE TEXT REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO LAW 6698 ON THE PROTECTION OF PERSONAL DATA
Preliminary Information
In order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to regulate the obligations of real and legal persons who process personal data and the procedures and principles to be complied with, the Personal Data Protection Law No. 6698 (“KVK Law”) was enacted and entered into force after being published in the Official Gazette.
The provisions of the published Law apply to natural persons whose personal data are processed and to natural and legal persons who process such data in whole or in part by automatic means or by non-automatic means provided that they are part of any data recording system.
In our Group Companies; employees, customers, suppliers, business partners, project partners, real and legal persons with whom commercial cooperation is in commercial cooperation, real and legal persons with whom commercial shopping and business is carried out, persons who apply for a job to our Group companies, employees and interns, guests; This Clarification Text has been prepared and submitted for your information in order to inform you about the processing of personal data protected by the law, within the scope of security and confidentiality, in accordance with the procedures and rules stipulated by the Law, specifying the purpose of processing, the legal basis of processing, transfer of data to third parties, security and protection of personal data, deletion or anonymization, and the legal rights of the data owner specified in the Law.
In this context; your personal data is processed in Habaş Group Companies within the principles and procedures set out in the KVKK numbered 6698, in the capacity of “Data Controller”, within the limits detailed below and ordered by the Law.
With this clarification text; We inform you about your personal data processed by our Group companies, the purposes of processing and transferring this personal data in accordance with the Law, the reasons for compliance with the law within the scope of the Law, the methods of collecting data, the measures taken to protect personal data, the storage period of the Personal Data collected, and the rights of the Personal Data owner.
Identity of the Data Controller
Our Habaş Group Companies, which have the status of Data Controller, have the title of “Veri Sorumlusu” as defined in Law No. 6698.
Purposes of Collection and Processing of Personal Data
Your general and special categories of personal data (visual health data and religious information, which are among the special categories of personal data and are included in the identity documents, may come indirectly from the photocopy of the identity card and/or driver's license) may be processed by our Habaş Group companies for the purposes listed below. Your personal data collected with the aim of;
- Evaluating and finalizing your requests and contacting you about the results,
- Providing the products and services you receive from our Group Companies under the best conditions, providing them in a reliable and uninterrupted manner, and carrying out operations,
- Ensuring that the products and services you supply to our Group Companies are provided under the best conditions and that they are supplied in a reliable and uninterrupted manner,
- Increasing customer satisfaction to the highest level,
- Customer collection and vendor payments,
- Fulfillment of various transactions pertaining to the aforementioned services, execution and development of operations, promotion, marketing, advertising and campaign activities of these products and services or different products and services,
- Planning and realization of the human resources process of our employees and intern candidates, creation of personal files, tracking annual leave, managing and maintaining occupational health and occupational safety processes, following the entry/exit processes, accident and legislation management, providing periodic examinations and other health services by the workplace physician,
- Informing customers about opportunities, campaigns, fairs to be organized and all kinds of similar information,
- Fulfillment of the requirements of the contracts concluded with our Customers and Suppliers due to the performance of the services, products, etc. provided and/or received,
- Keeping statistics, internal planning, marketing and information research activities,
- Notification to relevant official institutions and/or audit companies due to legal and/or audit obligations,
- Data processing is mandatory for the establishment, exercise or enforcement of a right,
- Recording identification information, storing camera footage and taking security measures to monitor guest entrances/exits,
directly or indirectly obtains, records and stores identity information, address information, contact information and other relevant personal data in its secure systems, preserves, modifies, reorganizes, discloses and transmits in accordance with the law, classifies, processes or prevents the use or transfer of data by unauthorized persons.
Ensuring the legal and commercial security of real and legal persons who are in business relations with our Group Companies, evaluation processes, legal compliance process, financial affairs, etc. It is/will be processed for the purposes of determining and implementing the business development strategies of our Group Companies, ensuring the execution of the human resources policies of our Companies, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law No. 6698 and in accordance with other legal legislation in force.
To whom and for what purpose personal data can be transferred
Your personal data collected in accordance with the Law, for the above-mentioned purposes, depending on and limited to the reason for which it must be transferred; to the administrative and official authorities that are legally required to be transferred, to the relevant persons and institutions for the fulfillment of the legal obligation required by the legislation, to independent audit companies, tax consultants, third parties from whom we receive consultancy services, including lawyers, due to legal obligations and within the framework of legal limitations, insurance companies and agencies from which we receive services, domestic and foreign third parties and institutions from which we receive and provide services, our shareholders, affiliates, subsidiaries, business partners, suppliers, legally authorized public institutions and private persons, supervisory and regulatory Public Institutions and Organizations, both within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law and within the scope of other legal legislation. and 9. of the PDP Law and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law and within the scope of other legal legislation.
Kişisel veriler; Uluslararası sözleşme hükümleri ve Kişisel Verilerin yurt dışına aktarılması ile ilgili Kanunlarda yer alan hükümler saklı kalmak koşulu ile; toplanan Kişisel verileriniz; KVK Kurulu tarafından yeterli korumaya sahip olduğu ilan edilen yabancı ülkelere (“Yeterli Korumaya Sahip Yabancı Ülke”) veya yeterli korumanın bulunmaması durumunda Türkiye’deki ve ilgili yabancı ülkedeki veri sorumlularının yeterli bir korumayı yazılı olarak taahhüt ettiği ve KVK Kurulu’nun izninin bulunduğu yabancı ülkelere (“Yeterli Korumayı Taahhüt Eden Veri Sorumlusunun Bulunduğu Yabancı Ülke”) aktarılmaktadır/aktarılabilecektir. Grup Şirketlerimiz; bu doğrultuda KVK Kanunu’nun 9. maddesinde öngörülen düzenlemelere ve sair yasal mevzuata uygun hareket etmektedir/edecektir.
Method and Legal Basis of Personal Data Collection
Your personal data may be collected verbally, in writing or electronically through offices, branches, facilities, factories, dealers, call center, website, application forms, resume, mobile applications, information systems and mobile devices (computer, mobile phone) and similar means by automatic or non-automatic methods within the principles specified in the KVKK Law, in accordance with the basic principles stipulated in the Law, due to the creation and / or performance of the contract, stipulated by law, legal obligation, legitimate interest of the data controller or protection of the right.
Within the scope of Article 5.2 and Article 6.3 of the KVKK Law, it can be processed without your explicit consent in order to fulfill our legal obligations, to establish or perform a contract, to fulfill our legal obligations, to establish, exercise or protect a right, and to protect our legitimate interests without harming your fundamental rights and freedoms and without your explicit consent in terms of personal data you make public. Your personal data may also be processed for the purposes specified in this Clarification Text, provided that your explicit consent is obtained within the scope of Article 5.1 and Article 6.2 of the KVKK.
Rights of the Personal Data Owner According to Article 11 of the KVK Law
In accordance with Article 11 of the Law on the Protection of Personal Data To learn whether your personal data is processed or not, to request information about it if it has been processed, to learn the purpose of processing and whether it is used by us in accordance with these purposes, to learn the third parties to whom it is transferred domestically or abroad, to request correction in case of incomplete or incorrect processing, to request its deletion or destruction or anonymization in case the reasons requiring its processing disappear in these cases or in case of correction, We would like to remind you that you have the right to request that these be notified to third parties to whom data is transferred, to object to this situation if you think that a result has arisen against you by analyzing the processed data exclusively through automated systems, and to demand compensation for this damage if you suffer a loss due to unlawful processing.
Within the scope of the Law, for your applications regarding your personal data, you can;
Pursuant to Article 13 of the Law and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your written requests with your right you want to use within the scope of your rights listed in Article 11 of the Personal Data Protection Law No. 6698 (“Law”) to our company through the Data Owner Application Form by one of the methods described below.
- From the registered electronic mail (KEP) address of the data owner, it can be sent to habassinai@hs01.kep.tr with secure electronic signature by writing “Personal Data Protection Law Information Request” in the subject section of the e-mail.
- It can be sent to the e-mail address kvkkhabas@habas.com.tr registered in our company's system by writing “Personal Data Protection Law Information Request” in the subject line.
- It can be sent through a notary public to Yeni mah. Fuat Paşa Sokak, No:1, 34880 Soğanlık / Kartal -İstanbul in writing to HABAŞ General Directorate - Personal Data Management Department or
- You can apply to our branches and facilities in person with an identity document (ID card, driver's license, passport, etc.).
In the applications; name, surname information, signature if the application is in writing, TR ID number for citizens of the Republic of Turkey, address information or workplace address for notification, contact telephone or fax number, e-mail address for notification, if any, must be included together with the subject of the request.
In accordance with Article 13 of the KVK Law, our Group Companies will finalize your application requests for your rights listed above as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board. If the request is rejected, the reason(s) for rejection shall be justified in writing or electronically.
In the event that you withdraw your explicit consent to the processing of your personal data, we would like to emphasize that you will not be able to benefit from the rights and advantages you have benefited from the processing required by the processing based on such explicit consent as of the date of withdrawal.
In the capacity of “Veri Sorumlusu” as defined in the KVK Law and again in Article 10 of the KVK Law. In accordance with Article 10 of the KVK Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform (“Communiqué”) published by the Personal Data Protection Board in the Official Gazette No. 30356 on March 10, 2018, in order to fulfill the duty to inform personal data owners during the acquisition of personal data; During the acquisition of personal data by our Group Companies to personal data owners, we provide this information regarding the identity of our Group Company, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data and the rights of the personal data owner under Article 11 of the KVK Law.
Depending on the changes that may occur in the Law over time, necessary updates will be made in this clarification text to inform you.