Information Regarding Processing of Personal Data
Processing of personal data belonging to natural persons which are obtained by natural and legal entities are subject to some rules as per the Law No. 6698 on the Protection of Personal Data (“Law”) which has been passed on 24.03.2016 and published on the Official Gazette on 07.04.2016. Within the scope of the Law, ÜSTAY YAPI TAAHHÜT VE TİCARET A.Ş. (“The Company”) acts as the “Data Processor”.
This information note is prepared for the purpose of informing you regarding the “Data Processor’s Information Liability” specified in Article 10 of the Law as well as the “Rights of Data Owners” specified in Article 11 of the Law.
1- About Data Processor
Your personal data can be processed by ÜSTAY YAPI TAAHHÜT VE TİCARET A.Ş. in accordance with the Law No. 6698 on Protection of Personal Data (“Law”). ÜSTAY YAPI TAAHHÜT VE TİCARET A.Ş. is deemed as the data processor as per the Law.
2- For which purpose will the personal data be processed?
Your personal data are processed in accordance with the conditions listed in Articles 5 and 6 of the Law, regarding processing of personal data.
Purposes of processing your personal data are, including but not limited to, ensuring legal and commercial safety of our Company or business partners of our Company, carrying out business activities and managing human resources and employment policies of our Company.
Taking all necessary technical and administrative measures to prevent illegal processing of or illegal access to your personal data and to maintain your personal data in a secure way.
3-Principles for processing personal data
Personal Data may be processed only in accordance with the principles and procedures stipulated by the Law and other laws and legislations.
Your personal data will be processed in accordance with the following principles:
a) Being in conformity with the law and good faith;
b) Being accurate and if necessary, up to date;
c) Being processed for specified, explicit, and legitimate purposes;
d) Being relevant, limited and proportionate to the purposes for which data are processed;
e) Being stored only for the time designated by relevant legislation or necessitated by the purpose for which data are collected.
4- Whom we share your personal data with
Our company may share your personal data with company shareholders, business partners, suppliers, outside service providers as well as legally authorized public institutions and offices in accordance with the conditions specified in Articles 8 and 9 in the Law, by taking the necessary measures within the framework of safety and confidentiality principles stipulated in the Law.
In addition, your personal data may be shared with authorities which may lawfully request for such data or in order to fulfil legal obligations of our company as well as maintain our security.
Purposes of sharing your personal data are, including but not limited to, ensuring legal and commercial safety of our Company or business partners of our Company, carrying out business activities and managing human resources and employment policies of our Company.
Your personal data that you share with us will not be shared with third parties outside the purposes of processing and sharing specified in the Law and in this notice or without your express consent to do so.
5-Method and Legal basis for collecting personal data
Our company collects your personal data via questionnaires, websites, through company representatives or by other similar ways in order to maintain the company’s business activities and processes your personal data in accordance with the conditions stipulated in Articles 5 and 6 in the Law for various legal purposes.
6-Updating Personal Data
It is important that we have correct and up-to-date personal data. For this reason, please inform us whenever your personal data changes.
7-What are your rights?
Notwithstanding the conditions stipulated in Article 28 of the Law titled as “Exemptions” and within the scope of Article 11 of the Law, you will be entitled, upon applying to our company, to the following as a personal data owner:
a) Learning whether your personal data is being processed,
b) Requesting information about the manner of process if your personal data has been processed,
c) Learning the purpose of processing of your personal data and whether it were processed appropriately for the intended purpose,
d) Learning the third parties located in Turkey and abroad to whom your personal data was transferred,
e) Requesting for correction of your personal data if it is incomplete or incorrectly processed,
f) Requesting that your personal data be deleted or destroyed in accordance with the conditions stipulated in Article 7 of the Law,
g) Requesting that the process carried out in accordance with the paragraphs (e) and (f) above to be notified to third parties whom your personal data are shared with,
h) Objecting to any negative consequence of your personal data being analyzed exclusively through automated systems,
i) Claiming compensation for your losses if you suffer any due to violation of the Law in processing of your personal data.
Your requests to our company must be in writing, as per the Law. Therefore, you can apply to our company with your identification and by submitting the “Application Form for Data Owners” explaining the rights you wish to exercise by sending the form to our headquarters at Maslak Mah. Ahi Evran Cad. Polaris Plaza Kat 11 Sarıyer- İstanbul or by hand or you may send your application form through a notary public or registered letter with return receipt. Your application will be finalized as soon as possible, within 30 (thirty) days after you submit your request, depending on the nature of your request. Applications are currently free. However, a fee may be charged for application in the event that the Data Protection Board decides to do so, in accordance with the rates to be established by the Board.