1. Information Text on the Protection and Processing of Personal Data
1.1. In order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data, and to determine the obligations of real and legal persons who process personal data, we, as Apeks Tekstil Dış Tic. Ltd Şti., inform you as the Data Controller in accordance with Article 10 of the Law on the Protection of Personal Data (KVKK) No. 6698, published in the Official Gazette dated April 7, 2016, and numbered 29677, titled "Data Controller's Obligation to Inform".
1.2. As Apeks Tekstil Dış Tic. Ltd Şti., this text has been prepared to ensure that the personal data of our citizens are processed in accordance with the Constitution of the Republic of Turkey, international agreements to which our country is a party regarding human rights, and relevant legislation, primarily the Law on the Protection of Personal Data (KVKK) No. 6698, and that the data subjects can effectively exercise their rights. All personal data shared with our company may be processed lawfully, in connection with and proportional to our activities and service purposes.
2. Definitions
2.1. The concepts of personal data, special category personal data, and data processing used in the clarification text are used based on the definitions made in the KVKK. As used in the KVKK;
2.1.1. Law on the Protection of Personal Data (“KVKK ”): The Law on the Protection of Personal Data No. 6698, which entered into force after being published in the Official Gazette on April 7, 2016,
2.1.2. Personal Data: The concept refers to any information relating to an identified or identifiable natural person,
2.1.3. Data Processor: A natural or legal person who processes Personal Data on behalf of the data controller, based on the authority given by the data controller,
2.1.4. Data Controller: A natural or legal person who determines the purposes and means of processing Personal Data, and is responsible for the establishment and management of the data recording system,
2.1.5. Processing of Personal Data: The concept refers to any operation performed on data such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, fully or partially automatically or non-automatically provided that it is a part of any data recording system.
3. Principles of Personal Data Processing
3.1. Personal data belonging to the data subject, as specified in Article 4 of the KVKK, will be processed by the data controller Company within the scope of the purposes stated below, in a manner that is lawful and fair, accurate and, where necessary, up-to-date, specific, explicit and legitimate; relevant, limited and proportionate to the purposes for which they are processed; and stored for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.
4. Purpose of Processing Your Personal Data
4.1. Your personal data will be processed in accordance with Articles 4, 5, and 6 of the KVKK;
4.1.1. In a manner prescribed by law and fairness,
4.1.2. In connection with, limited to, and proportionate to the processing purposes,
4.1.3. Accurately and up-to-date,
4.1.4. For specific, explicit, and legitimate purposes, and for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.
4.2. Your personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for the purposes of: performing necessary work by our business units to enable you to benefit from the products and services offered by our company; proposing products and services offered by our company to you; planning and/or executing market research activities for the sale and marketing of products and services; planning and/or executing after-sales support service activities; monitoring contract processes and/or legal claims; ensuring the legal, technical, and commercial business security of relevant persons in a business relationship; ensuring the implementation of our company's human resources policies; evaluating job applications; fulfilling our legal obligations if you are an employee; ensuring quality control; tracking supplied products; for security and identity verification purposes when you visit our premises; contacting you if you request information from our company; fulfilling this contract if you purchase a product; planning, auditing, and executing information security processes; establishing and managing information technology infrastructure; monitoring financial and/or accounting affairs; monitoring legal affairs; planning and executing business activities; planning and executing corporate communication activities; determining and implementing our company's commercial and business strategies. The data of our employees may be processed by our Company or by real or legal persons with whom our Company cooperates or authorizes, in addition to the obligations stipulated by the Labor Law and Labor and Social Security legislation and other applicable legislation, within the scope of our human resources policy or for operational reasons such as increasing performance levels and employee satisfaction and ensuring occupational safety and peace.
5. Transfer of Personal Data
5.1. Your personal data may be transferred to our business partners, suppliers, shareholders, affiliates, legally authorized public institutions, and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, for the purposes of: performing necessary work by our business units to enable you to benefit from the products and services offered by our Company; proposing products and services offered by our Company customized to your and your company's needs; ensuring the implementation of our Company's human resources policies; ensuring the legal and commercial security of our Company and individuals in a business relationship with our Company; and determining and implementing our Company's commercial and business strategies.
.
6. Method of Collection and Legal Basis for Personal Data
6.1. Personal data is collected, used, recorded, stored, and processed by our company verbally, in writing, and/or electronically, in accordance with the law and principles of honesty, linked to and limited by the legitimate purposes explicitly stated above, and within the principle of proportionality, by providing clear and understandable verbal, written, and/or electronic information to personal data owners and, when necessary, obtaining their explicit consent. In addition; it is collected for the purpose of developing the products and services we offer and carrying out our commercial activities, through different channels and based on different legal grounds within the framework of our company's commercial purpose, such as contacting us, establishing a contractual relationship, visiting our premises, providing your information to us for commercial activity purposes, and sharing information at promotional organizations. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
6.2. Furthermore, we guarantee that your personal data will not be processed for purposes other than those specified in this clarification document by our company, will not be transferred to third parties located domestically or abroad, and will not be stored.
7. Data Storage and Deletion:
7.1. Our Company stores the personal data it processes for the periods determined by legislation. If no period is specified in the legislation, personal data is stored for the period required by our Company's practices and commercial customs regarding the services provided by our Company while processing that data, and after this period, only for the periods deemed necessary in practice to serve as evidence in possible legal disputes. After the expiry of the specified periods, the said personal data is deleted, destroyed, or anonymized.
8. Rights of the Data Subject
8.1. Data subjects, by applying to the Company acting as the data controller, have the right to;
8.1.1. Learn whether their personal data has been processed,
8.1.2. Request information if their personal data has been processed,
8.1.3. Learn the purpose of the processing of their personal data and whether they are used in accordance with their purpose;
8.1.4. Be informed about the third parties to whom their personal data has been transferred domestically or abroad,
8.1.5. Request the rectification of their personal data if it is incomplete or incorrectly processed,
8.1.6. Request the erasure or destruction of their personal data within the framework of the conditions stipulated in Article 7 of KVKK No. 6698,
8.1.7. Request that the operations carried out pursuant to subparagraphs (d) and (e) of Article 11 of the KVKK be notified to third parties to whom their personal data has been transferred,
8.1.8. Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
8.1.9. Request compensation for damages if they suffer damage due to unlawful processing of personal data.
8.2. To exercise your rights mentioned above, you can send your written request, including the necessary information to identify you and your explanations regarding the right you wish to exercise, along with a wet signature on the Personal Data Information Request and Processing Request Form to " www.apexhali.com " or to our registered e-mail address "………………………." using a secure electronic signature, mobile signature, or the e-mail address previously notified by the data subject to Apeks Tekstil Dış Tic. Ltd Şti. and registered in the data controller's system. Applications must be made in Turkish.
8.3. Applications must include the name, surname and, if the application is written, signature, T.C. identity number for Turkish citizens, nationality, passport number/identity number for foreigners, residential or business address for notification, if any, electronic mail address, telephone or fax number for notification, and the subject of the request.
8.4. In your application to exercise your rights as a personal data owner, as listed above, which includes your explanations regarding the right you wish to exercise; it is imperative that the requested matter is clear and understandable, that the requested matter concerns you personally or, if you are acting on behalf of someone else, that you are specifically authorized in this regard and that your authority is documented, that the application includes identity and address information, and that documents proving your identity are attached to the application.
8.5. Applications made within this scope will be concluded as soon as possible and within 30 days at the latest. If the response to the data subject's application is to be provided in writing, no fee will be charged for up to ten pages. A processing fee of 1 TL may be charged for each page over ten pages. If the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be requested by Apeks Tekstil Dış Tic. Ltd Şti. cannot exceed the cost of the recording medium.