EKTAM MAKİNE SAN. Ve TİC. A.Ş.
IN THE CONTEXT OF LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA, INFORMATION TEXT REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA DUE TO INDIVIDUAL RIGHTS AND OBLIGATIONS"
1. PROCESSING PURPOSE OF PERSONAL DATA
This information text has been prepared by EKTAM MAKİNE SAN. Ve TİC. A.Ş. as the data controller under the scope of Law No. 6698 on the Protection of Personal Data, in accordance with Article 10 of the Personal Data Protection Law and the Communiqué on Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
Within the scope of the information text, definitions of personal data processed as the data controller during the execution and completion of commercial activities falling within the scope of our Company's business activities, rights and obligations of individuals regulated in Law No. 6698 on the Protection of Personal Data, legal purposes of processing and transferring personal data, and the data security procedures established in this regard are explained.
2. PROCESSING OF PERSONAL DATA
The collection, processing, and storage of personal data related to the execution of commercial activities, fulfillment of obligations arising from commercial contracts, delivery, commissioning, testing of products, and the sustainability of services through binding maintenance agreements, as well as the management activities of the data controller concerning marketing, administrative affairs, and human resources processes are outlined as follows:
• Collection, processing, and storage of personal data through automatic or non-automatic means, provided that they are part of any data recording system,
• Requesting or obtaining, processing, updating, and preserving personal data in accordance with the Law on the Protection of Personal Data No. 6698.
• Processing, storing, and transferring personal data of employees directly related to our company under the written employment contract and temporarily assigned relevant individuals, with the explicit consent obtained,
• Processing, storing, and transferring personal data of individual suppliers and customers indirectly related to our company, as well as affiliated personnel, under verbal or written commercial contracts, with the explicit consent obtained in line with the purpose of data processing,
• Transfer of personal data to competent public institutions and organizations upon lawful request,
• Retention and disposal of personal data for the legal purposes in accordance with the specified period.
3. PROCESSING OF SPECIAL CATEGORY PERSONAL DATA
Within the scope of the Law on the Protection of Personal Data (KVKK), the processing of individuals' race, ethnic origin, political opinions, philosophical beliefs, religious, sectarian, or other beliefs, appearance and clothing, membership in associations, foundations, or unions, sexual life, criminal convictions, and health-related data is carried out as follows:
• Collection, processing, storage, and transfer of data in accordance with the KVKK for the purpose of continuing company management activities, administrative affairs, and human resources processes,
• Collection, processing, storage, and transfer of data through the company's website (www.ektam.com) for the purpose of continuing the marketing process,
• Processing, storage, and transfer of special category personal data collected in order to fulfill the legal and statutory obligations of our company,
• Processing, storage, and transfer of personal data of employees directly related to our company under the concluded employment contract with the explicit consent obtained,
• Processing, storage, and transfer of data under verbal or written commercial contracts related to individuals indirectly associated with our company, including suppliers and customers, and their affiliated personnel, with the explicit consent obtained.
4. COLLECTION, PROCESSING, AND STORAGE OF PERSONAL DATA: LEGAL GROUNDS
Our company has regulated the acquisition, processing, storage, and transfer of special category personal data within the scope of this information document. To facilitate commercial and managerial activities, emergency management operations, various marketing activities, and human resources processes:
In accordance with the implementation of Law No. 6331 on Occupational Health and Safety, and legal purposes stipulated by the law, the processing, updating, storage, and transfer of personal and special category personal data require obtaining the consent of data subjects related to our company through our employees and commercial agreements.
Within this context, individuals' data can be collected, processed, stored, and transferred through automatic or non-automatic means, including written or verbal, visual, or auditory data, for purposes such as application, request, proposal, specification, establishment of contracts, and the continuation of business, as part of our company's activities and human resources processes.
5. TRANSFER OF PERSONAL DATA ABROAD
In accordance with the Personal Data Protection Law, our company may transfer personal data abroad with the consent of individuals, in compliance with legally approved commercial transactions and conditions, as per the legal grounds stated by the company.
6. RIGHTS AND LEGAL OBLIGATIONS OF THE DATA SUBJECT UNDER ARTICLE 11 OF THE KVKK
Within the scope of this Information Text, individuals whose data is obtained by our company have the following rights and legal obligations under Article 11 of the Personal Data Protection Law:
a. Information can be requested regarding whether personal data is processed within the scope of the law.
b. Requests can be made for the lawful processing, modification, updating, and deletion of this data in accordance with the law.
c. Information can be requested about whether personal data, including overseas transfers, is transferred.
d. Information can be requested regarding whether sensitive personal data is processed.
e. Requests can be made for the processing, modification, updating, and deletion of sensitive personal data.
f. Information can be requested about whether sensitive personal data, including overseas transfers, is transferred.
In accordance with our company policy and security procedures, our priority is the lawful processing of personal data for legal purposes. The correction, updating, and deletion of personal and sensitive personal data will be evaluated based on written applications from the relevant individuals, and the results of the requested processes will be communicated to the applicant within the legally specified period.
7. DATA SECURITY
Within the scope of Law No. 6698 on the Protection of Personal Data (KVKK), our company has taken administrative and technical measures to ensure data security, as outlined below:
a. Employees' technical knowledge and skills are continuously developed, and our employees are informed about legal procedures regarding the acquisition, processing, transfer, and destruction of personal data within the scope of our company's activities.
b. Our employees are informed about communication techniques and relevant regulations. Data processing administrative and technical staff, under confidentiality agreements, are informed about the discipline procedure to be applied in case of non-compliance with data security policies and procedures.
c. Our obligation to inform data subjects is fulfilled through our policies and communication channels, including email.
d. Internal audits are conducted by evaluating compliance in the processing and transfer of personal and sensitive personal data. Data processing employees, as per their job descriptions, are informed about legal consequences and penalties to ensure the continuation of our commercial activities.
e. Contracts with individuals and institutions involved in external training programs for employees include confidentiality clauses within the scope of the Personal Data Protection Law.
f. The company's information systems equipment, software, and physical security of data are ensured through necessary measures. Risk analyses are evaluated and reported by authorized personnel. Security vulnerabilities are monitored, appropriate security patches are applied, information systems are kept up to date, and strong passwords are used in electronic environments where personal data is processed. Secure logging systems are used, and backup programs ensuring the secure storage of personal data are employed. Data stored in physical environments is kept in locked cabinets under the supervision of authorized personnel.
g. In addition to technical measures taken for personal data, policies and procedures for the security of sensitive personal data are defined. Access authorizations and role distributions are clearly defined, periodic authorization controls are performed, transaction records are logged, security tests are regularly conducted, and if transmission is required via email, it is carried out using Corporate Email or Registered Electronic Mail (KEP) with a "Confidentiality Note."
h. Accesses are recorded to keep inappropriate accesses under control. Storage and destruction processes in accordance with the retention and disposal policy are defined. An infrastructure is created to report to the relevant person and board in case of unlawful processing detection. Information systems are kept up to date, strong passwords are used in electronic environments where personal data is processed, secure logging systems are used, backup programs ensuring the secure storage of personal data are employed, and access to personal data stored in electronic or non-electronic environments is restricted according to access principles.
8. APPLICATION AND COMPLAINT
Individuals, as data subjects, can submit their requests within the scope of Article 11 of the Law through the application form, as stipulated by the "Communiqué on the Principles and Procedures for Application to the Data Controller" in accordance with Article 13 of the Law:
a. Data subjects can submit their requests in writing to the data controller's address at Kemalpaşa Organized Industrial Zone District, 64 Street No: 5 Ulucak Kemalpaşa / IZMIR, with the application form that they can access at http://www.ektam.com/kvkk.htm.
b. They can also submit their requests via email to the data controller's Registered Electronic Mail address.
c. The data controller shall process the requests in the application as soon as possible and no later than thirty days, free of charge, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged.
ç. The data controller accepts or rejects the request, explaining the reasons if necessary. The response is communicated to the data subject in writing or electronically. If the request is accepted, the data controller fulfills the request. If the fee was charged due to an error on the part of the data controller, it will be refunded to the data subject.
9. COMMERCIAL ELECTRONIC COMMUNICATIONS CONSENT STATEMENT
In accordance with the Law on the Regulation of Electronic Commerce No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages, electronic messages sent via electronic means such as telephone, call centers, fax, automatic calling machines, smart voice recording systems, electronic mail, and short message service for commercial purposes and containing data, voice, and visual content are considered commercial electronic messages. Commercial electronic messages can only be sent to recipients with their prior consent. This consent can be obtained in writing or through any electronic communication tools. Recipients can reject commercial electronic messages at any time through the Commercial Electronic Message Management System (IYS) without providing any justification.
This text, within the scope of Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, constitutes my consent for EKTAM Machine Industry and Trade Inc. ("EKTAM") to contact me through various electronic communication channels, such as telephone, fax, short message (SMS), email, WhatsApp, social media, call centers, and all other electronic communication tools, for the purpose of sending any kind of electronic message, including announcements, promotions, advertisements, campaigns, invitations, organization details, surveys, information, and responding to complaints and suggestions, related to products and services, sales and marketing, general/special opportunities, in compliance with the relevant legal regulations.
I acknowledge that I have read and understood the above Open Consent Statement regarding the sending of commercial electronic messages to me.
I hereby give consent to receive commercial electronic messages (SMS, Email, Calls).