PERSONAL DATA PROTECTION POLICY
As AYNOOR OFFICIAL, we respect the personal data you have shared with us and we attach importance to the protection of fundamental rights and freedoms, especially the right to privacy. We would like to inform you in detail about the protection of your shared personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK”), the ways your personal data is collected, the purposes of processing, legal reasons and our mutual rights and obligations.
Your personal data may be obtained, recorded, stored, disclosed, transferred to third parties or abroad to the extent permitted by the legislation, or processed in other ways by AYNOOR OFFICIAL, as the Data Controller, in accordance with the provisions of KVKK and within the framework explained below.
Collection of Your Personal Data
Your personal data may be collected verbally, in writing or electronically, by automatic or non-automatic methods, in order to fulfill legal obligations arising from the relevant legislation and to carry out collection, invoice issuance and order delivery processes.
Purpose for which your personal data will be processed
Personal data before our company; planning and execution of commercial activities, receiving payment services on matters that are not directly provided by us and not within our field of expertise, delivering orders, making collections, issuing invoices, resolving consumer complaints, sending commercial electronic messages if you give explicit consent, providing information to authorized institutions and organizations based on the legislation. , in order to plan and execute the audit activities necessary to ensure that the activities are carried out in accordance with our Company’s procedures and relevant legislation, to plan and execute corporate sustainability activities, to carry out studies to protect the reputation of our company, to manage demand and complaint processes, to plan and execute corporate governance and communication activities. It will be processed in accordance with the rules of honesty and the principles of keeping it limited and proportionate, related to the purpose for which it is processed, and for a period of time stipulated in the relevant legislation or required for the purpose for which it is processed.
Transfer of Your Personal Data
In order to fulfill the above-mentioned purposes, the personal data obtained by you are kept in accordance with the principles of law and honesty and the principles of keeping the personal data for the period for which they are processed, limited and proportionate, stipulated in the relevant legislation or for the period required for the purpose for which they are processed. or cooperated domestic/international/international, public/private institutions and organizations, companies and our company’s consultants or solution partners, other group companies, other authorized institutions and organizations, suppliers or subcontractors, as permitted by the Turkish Commercial Code and other relevant legislation. It can be shared with persons or organizations, legally authorized public and/or private law legal entities limited to the purpose requested within their legal authority, and with persons or organizations permitted or required by other legislation provisions, and with official authorities upon the request of official authorities.
In addition, in accordance with Articles 5 and 8 of the KVKK and/or in the presence of exceptions in the relevant legislation, personal data may be processed and shared with third parties without obtaining the consent of the Data Owner. The main ones of these situations are listed below:
It is clearly stipulated in the law,
It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity,
It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data owner and the Company,
It is mandatory to fulfill legal obligations,
The data has been made public by the owner himself,
Data processing is mandatory for the establishment, exercise or protection of a right,
It is necessary to process data for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data owner.
Method and Legal Reason for Collecting Personal Data
Your personal data is obtained in all kinds of verbal, written or electronic media, in order to be able to provide the services we provide by the Company within the determined legal framework for the purposes stated above and, in this context, to ensure that our Company can fully and accurately fulfill its contractual and legal responsibilities. Your personal data collected for this legal reason may be processed and transferred for the purposes specified in articles (1) and (2) of this text, within the scope of the personal data processing conditions and purposes specified in articles 5 and 6 of the KVK Law.
Rights of Personal Data Owner
As personal data owners, if you submit your requests regarding your rights to our Company using the methods set out below, our Company will finalize your request free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged.
In this context, personal data owners;
Learning whether personal data is processed or not,
Requesting information if personal data has been processed,
Learning the purpose of processing personal data and whether they are used for their intended purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data in case personal data has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.
You can submit your request to exercise these rights to us in writing, or if a separate method is determined by the Personal Data Protection Board, in accordance with this method, including the necessary information to identify you and your explanations about the rights you wish to exercise among the rights specified in Article 11 of the KVK Law.
Deletion, Destruction or Anonymization of Your Personal Data
Pursuant to Article 7 of the KVK Law, although personal data has been processed in accordance with the relevant legislation, if the reasons requiring processing are eliminated, personal data is deleted, destroyed or anonymized by our Company ex officio or upon the request of the personal data owner.
The procedures and principles regarding this matter will be fulfilled in accordance with the Personal Data Protection Law and the Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette No. 30224 dated 28.10.2017.
Personal data will be deleted, destroyed or anonymized within 3 (three) months following the date on which our obligation to delete, destroy or anonymize personal data arises.
When you contact our company and request the deletion or destruction of your personal data;
- a) If all the conditions for processing personal data have been eliminated; Your personal data subject to the request is deleted, destroyed or anonymized. Your request will be finalized within thirty (30) days at the latest and you will be informed.
- b) If all the conditions for processing personal data have been eliminated and the personal data subject to the request has been transferred to third parties, this situation is notified to third parties; It is ensured that the necessary procedures are carried out within the scope of the regulation.
- c) If all the conditions for processing personal data have not been eliminated, your request may be rejected by explaining the reason in accordance with the third paragraph of Article 13 of the KVK Law, and the rejection response will be notified to you in writing or electronically within thirty days (30) at the latest.
