1 – ABOUT THE IDENTITY OF THE DATA SPEAKER

Cetinkaya Pano Hair Table and Plastiksan. Tic. Inc. (hereinafter referred to as the ‘Company’) within the scope of the Personal Data Protection Law (‘Law’) numbered 6698, as the Data Controller, with this ‘Clarification Text’ we have prepared, our Suppliers are informed about the 10 titled “Informing Obligation of the Data Controller” in the Law. and within the framework of Article 11 titled “Rights of the Relevant Person”; We provide information about the purpose for which personal data will be processed, the method and legal reason for collecting the processed personal data, and other rights listed in Article 11 of the Law. Personal data belonging to suppliers may be processed and transferred by our Company in the capacity of “data controller” in accordance with the Law, within the scope specified below.

2- PROCESSED PERSONAL DATA

The company processes the following personal data within the scope of procurement processes:

  • Customer Transaction: Invoice, Check/Voucher Information
  • Identity: Name Surname, Signature
  • Physical Venue Security: Camera Recording, Visitor Entry and Exit Records
  • Legal Action: Case Files

3- PURPOSE OF PROCESSING PERSONAL DATA

Our company, due to company activities, within the framework of Competition Law and Tax Legislation, to which our company is subject, such as the Law on the Protection of Competition, Tax Laws, the regulations of the Competition Authority, Revenue Administration and other similar public institutions and organizations, as well as being a party to the contracts we have concluded, reasons for the performance of the contract. Personal data of an oral, written or electronic nature are collected and processed. These personal data can be used to provide services related to our Company’s fields of activity and to increase the quality of services, to carry out our Company’s activities such as production, storage, sales, marketing and distribution, and to be able to perform such activities as Turkish Commercial Code, Tax Procedure Law, Corporate Tax Law and the like. Information will be processed and stored in order to fulfill obligations such as information retention, reporting and information arising from various laws. In addition to these, personal data is used in the supply chain and purchasing practices for supplier evaluation and purchasing practices, starting from all purchasing and supplier portfolio creation processes, in order to increase the product and service quality in all commercial and industrial activities that our Company carries out in the framework of customer satisfaction at the end point. Works within the framework of procurement management can also be used within the framework of the purposes of determining and implementing our Company’s commercial and business strategies and ensuring the execution of our Company’s human resources policies. In this whole process, personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

4- TRANSFER OF PERSONAL DATA AND PURPOSE OF TRANSFER

Personal data and sensitive personal data collected by the Company may be transferred to third parties and institutions in accordance with Article 8 of the Law, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law and limited to the purposes specified in this document. Your data can be transferred abroad within the scope of our company activities. The persons and institutions to which your personal data can be transferred consist of public institutions and organizations that are legally authorized to receive information, legally authorized private law / public law legal entities and related banks, company partners, subsidiaries, company affiliates.

5- PERSONAL DATA COLLECTION METHOD AND LEGAL REASON

Personal data is collected by our Company in written, verbal and electronic format in accordance with the legislation in force, our expert and managerial staff responsible for purchasing and supply chain management, our experts assigned and authorized in the technical team, our experts and managers responsible for human resources and personnel management practices, our business partners. and through various channels that have a contractual relationship with our Company and are authorized with such a task. Personal data is collected for different legal reasons on which our work is based, in order to carry out our commercial activities and ensure the continuity of our Company. These legal reasons arise from various tax laws, commercial law regulations and other legal obligations. The data collected for these legal reasons can be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

6- STORAGE PERIOD AND DISPOSAL OF PERSONAL DATA

Personal data shared with our Company through the channels mentioned in this Clarification Text are kept for 10 years in accordance with TCC article 146 and TCC article 82, during and after the end of the business/commercial relationship with the Company. From the end of the retention period, upon the request of the person concerned, it is destroyed ex officio or in the first June or December in accordance with the procedures specified in the Personal Data Retention and Destruction Policy.

7- RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF KVKK

Personal data owners within the scope of Article 11 of the Law on Protection of Personal Data No. 6698;

   

1-) Learning whether personal data is processed or not,

2-) If personal data has been processed, requesting information about it,

3-) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

4-) Knowing the third parties to whom personal data is transferred at home and abroad,

5-) Requesting correction of personal data if it is incomplete or incorrectly processed,

6-) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

7-) Requesting notification of the transactions made pursuant to subparagraphs (5) and (6) to third parties to whom personal data has been transferred,

😎 Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

9-) In case of loss due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

 

8- METHOD OF APPLICATION TO DATA SPEAKER

Our suppliers, as the relevant person, must first apply to the data controller in order to exercise their rights regarding their personal data. According to Article 14 of the Law, no direct complaint can be made to the Personal Data Protection Board. The person concerned must first apply to our company as a data controller in order to exercise their rights regarding their personal data. Your applications submitted to us will be answered free of charge within thirty days from the date of receipt of your request, depending on the nature of the request, in accordance with the second paragraph of Article 13 of the KVKK. Our answers will be delivered to you in writing or electronically in accordance with the provisions of Article 13 of the KVKK. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by the Personal Data Protection Board will be charged by our Company.

In this context, by adding your identity and address information in a clear and agreeable manner to your application to our Company;

  • By delivering it to our address “Selehaddin Eyyübi Mahallesi Piri Reis Cadde No: 6/1 Esenyurt/Istanbul” in person with a written and wet signature or by sending it through a notary public,
  • You can do this by signing with a secure electronic signature or mobile signature to our registered e-mail address ik@cetinkayapano.com.

You can find more detailed information on the procedures and principles to be followed when making an application in the “Communiqué on the Procedures and Principles of Application to the Data Controller” of the Personal Data Protection Authority.