Personal Data Protection Notice
Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data will be processed by our Company, acting as the Data Controller, for business-related purposes and within the framework described below, by means of being used, recorded, stored, updated, transferred and/or classified. In this context, our Company takes all necessary technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing and access of personal data, and to ensure its safe storage, in accordance with the applicable Law and Regulations, particularly those aimed at protecting the privacy of private life and fundamental rights and freedoms.
This notice is intended for all real persons whose personal data is processed by our Company, excluding our employees and job applicants.
Personal data processed by the Company as the Data Controller includes, but is not limited to:
Full name, Turkish ID number, address, phone number, email address, signature, physical security camera footage, call center/service quality voice recordings, bank account details, and cookie data.
Purposes and Legal Grounds for Processing Personal Data:
Your personal data shared with our Company may be processed for the following purposes:
- To enable you and/or the institution or organization you represent to benefit from our products and services, and to carry out necessary activities including, but not limited to, defining and implementing our commercial and business strategies, marketing efforts, business development and planning,
- To carry out administrative operations related to corporate communication,
- To ensure the physical security and supervision of our offices and premises,
- To establish relations with business partners/customers/suppliers (authorized persons or employees),
- To fulfill the requirements of contracts and financial reconciliation for products and services offered jointly with our business partners, suppliers, or other third parties,
- To execute our human resources policies,
- To provide services through our call center or website,
- And/or to manage participation in training, seminars, or events organized by our Company.
Collection and Storage of Personal Data:
Your personal data may be collected through automatic or non-automatic means, verbally, in writing, or electronically, through offices, branches, call centers, websites, social media platforms, mobile applications, and similar means. Your data may be stored in electronic and/or physical environments. To prevent unauthorized access, manipulation, loss, or damage of your personal data, our Company implements secure processes and technical infrastructure improvements.
Your data will be processed and stored in compliance with the purposes and scope communicated to you, with all necessary data protection precautions in place, and will be retained for the duration required by applicable legal obligations or, in the absence of such duration, for the time necessary to fulfill the purpose of processing. Upon expiration, your data will be deleted, destroyed, or anonymized and removed from our data systems.
Transfer of Personal Data:
Your personal data may be shared for the purposes stated above with:
- Authorized representatives and companies operating on behalf of our Company,
- Regulatory and supervisory authorities and public institutions legally authorized to request such data,
- Business partners, suppliers, contractors, banks, credit rating and financial institutions, and other real or legal entities within the scope of relevant purposes,
- Tax and legal advisors, parties involved in legal follow-up processes, audit firms, and other third-party service providers, either in Turkey or abroad.
Your Rights Under Article 11 of the KVKK:
You have the right to apply to our Company and:
- Learn whether your personal data has been processed,
- Request information if it has been processed,
- Learn the purpose of the processing and whether it is being used in accordance with its purpose,
- Learn the third parties to whom it has been transferred domestically or internationally,
- Request the correction of incomplete or inaccurate data,
- Request the deletion or destruction of your data under the conditions provided in Article 7 of the Law,
- Request notification of these corrections or deletions to third parties to whom your data has been transferred,
- Object to any result that is to your detriment arising from the exclusive analysis of your data via automated systems,
- Request compensation if you suffer damages due to unlawful data processing.
Pursuant to Article 13, Paragraph 1 of the KVKK, to exercise your rights, you may submit your request in writing or via other methods defined by the Personal Data Protection Authority.
To exercise your rights, please send your signed request including identity verification documents by hand delivery, through a notary, by other methods determined by the Authority, or via a secure electronic signature to: info@kapitallegal.co