Purpose of the Personal Data Protection and Processing Policy:
At Çaytaş Ateş Tuğla San. Tic. A.Ş., we place utmost importance on the security of your personal data. With this awareness, we prioritize the processing, recording, transferring, sharing, and storage of all personal data belonging to individuals, including those benefiting from our products and services, in compliance with the Personal Data Protection Law No. 6698 (“KVK Law”).
The protection of personal data is among the fundamental policies of our Company. Throughout its existence, our Company has prioritized the confidentiality of personal data, adopted this as a principle of operation, and instructed its employees to act in line with this principle. Our Company accepts and undertakes to comply with all responsibilities brought by the KVK Law. In full awareness of this responsibility and in our capacity as Data Controller, we process, record, transfer, share, and store your personal data as explained below and within the limits set forth by the official legislation.
For any questions regarding our Company’s “Personal Data Processing Information Notice,” you may contact us using the contact details below:
Our Company reserves the right to update this “Information Notice on the Protection of Personal Data” at any time within the framework of changes to the applicable official legislation.
Collection, Processing, and Purposes of Processing Personal Data:
Our Company’s policy on the Protection and Confidentiality of Personal Data has been prepared in accordance with the KVK Law. Accordingly, your personal data may be collected by our Company in connection with the services, products, or commercial activities we provide, using automated or non-automated methods, verbally, in writing, or electronically through offices, branches, dealers, call centers, websites, social media channels, mobile applications, and similar tools. Your personal data may be processed and updated for as long as you benefit from our products and services.
Additionally, your personal data may be processed when:
- You use our website;
- You visit our Company, website, or social media channels/platforms;
- You participate in training, seminars, or events organized by our Company.
Your personal data, obtained with your consent or as permitted by other legal bases stated in the laws of the Republic of Turkey, may be processed by our Company to:
- Enable our business units to perform the necessary work so that you can benefit from the products and services offered by our Company;
- Customize our products and services based on your preferences, usage habits, and needs, and recommend them to you;
- Ensure the legal and commercial security of our Company and persons who are in business relationships with us (administrative operations related to communication carried out by our Company, ensuring and auditing the physical security of Company locations, business partner/customer/supplier (authorized or employees) evaluation processes, compliance with legal processes, financial affairs, etc.);
- Improve the quality of the services we offer and develop our quality policy;
- Inform you about and allow you to benefit from general and special campaigns, promotions, discounts, and similar advantages offered by our Company;
- Process data related to your personal information, preferences, transactions, and browsing activities when you log into the platforms offered by our Company with your username and password to provide you with the requested information and services;
- Manage notifications related to any loyalty cards issued by our Company or its affiliated entities, website memberships, renewals, expirations, and other relevant communications;
- Inform you about new services, products, changes, and updates in personal data policies and membership conditions;
- Provide you with information regarding your requests, events, and services;
- Determine and implement our Company’s commercial and business strategies;
- Manage our Company’s human resources policies;
- Fulfill a legal obligation explicitly stated in the legislation, when necessary.
Your personal data may be processed by our Company and affiliated entities/organizations, as well as other real and/or legal persons listed under Section (C), in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.
Method and Legal Basis for Collecting Personal Data:
Your personal data is collected in any verbal, written, or electronic form, in line with the purposes stated above, to provide products and services offered by our Company within the legal framework and to fulfill our Company’s contractual and legal obligations completely and accurately. The personal data collected on this legal basis are processed, recorded, transferred, shared, and stored for the purposes specified in Section (B) of this document, in compliance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.
Processing of Special Categories of Personal Data:
According to the KVK Law, data concerning a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, security measures, and biometric and genetic data are categorized as special personal data. Our Company takes adequate precautions specified by the Personal Data Protection Board when processing special categories of personal data. To provide better services, our Company will process special categories of personal data only with the relevant person’s consent and solely for purposes that serve the purpose of data collection.
To Whom and for What Purposes Processed Personal Data May Be Transferred:
Your collected personal data may be transferred to Çaytaş Ateş Tuğla San. Tic. A.Ş., our shareholders, business partners, suppliers, legally authorized public institutions, and private individuals for the purposes stated in Section (B), within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law.
Transfer of Personal Data Abroad:
Our Company may transfer personal data abroad in accordance with the conditions specified by the KVK Law and after obtaining the individual’s explicit consent for this purpose.
Rights of Personal Data Owners under Article 11 of the KVK Law:
Under the KVK Law, we recognize that individuals have the right to be informed and provide consent prior to the processing, recording, transferring, sharing, and storage of their personal data. After data processing begins, individuals have the right to determine the fate of their personal data. In this context, personal data owners have the following rights:
a. To learn whether personal data is being processed; b. To request information if their personal data has been processed; c. To learn the purpose of processing personal data and whether it is used in line with its purpose; d. To know the third parties to whom personal data is transferred domestically or abroad; e. To request correction of personal data in case of incomplete or incorrect processing and to request that the third parties to whom personal data is transferred be informed of this correction; f. To request deletion, destruction, or anonymization of personal data under the conditions specified in Article 7 of the KVK Law and to request that third parties to whom personal data has been transferred be informed of such action; g. To object to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems; h. To request compensation in case of damage caused due to unlawful processing of personal data.
To exercise your rights under the KVK Law, you may submit your requests to our Company in writing or using other methods determined by the Personal Data Protection Board. Our Company will finalize your request free of charge within 30 days at the latest, depending on the nature of the request.
Retention Period of Personal Data:
Your personal data processed for the purposes specified in this “Information Notice on the Processing of Personal Data” will be deleted, destroyed, or anonymized when the purpose requiring processing is no longer applicable and/or when the mandatory retention periods specified by legislation expire.
Cases Where Your Personal Data May Be Processed Without Your Explicit Consent:
Under Article 5 of the KVK Law, our Company may process your personal data without your explicit consent in the following cases:
i. When it is explicitly permitted by law;
ii. When it is necessary to protect the life or physical integrity of the data subject or another person who is unable to express consent due to actual impossibility;
iii. When it is necessary for the performance of a contract to which you are a party;
iv. When it is necessary for our Company to fulfill a legal obligation;
v. When the personal data is made public by the individual;
vi. When it is necessary for the establishment, exercise, or protection of a right;
vii. When it is necessary for the legitimate interests of our Company, provided it does not harm the fundamental rights and freedoms of the data subject.
To Make a Request Under the Personal Data Protection Law:
Pursuant to Article 13, Paragraph 1 of the Personal Data Protection Law (KVK Law), you can submit your request to exercise the aforementioned rights to our Company through the methods determined/to be determined by the Personal Data Protection Authority. Alternatively, as required by the KVK Law, you may also submit your request to our Company in writing. To do so, first complete and sign the form available at the URL address. Then, choose one of the following methods to deliver the form to our Company:
i. You can personally deliver a signed copy of the form, which includes explanations regarding the right you are requesting to exercise, along with official identity verification documents (e.g., a copy of your ID) to the address:
Sefercik Mahallesi, Irmak Cad. No: 37/14, Çaycuma, Zonguldak.
ii. You can send the completed form and official identity verification documents via a Notary.
iii. You can electronically send the completed form and identity verification documents, signed with a secure electronic signature or mobile signature, to the email address: caytasatestugla@hs01.kep.tr.
iv. You can send the completed form and identity verification documents to our Company using the electronic mail address that you have previously provided to our Company and is registered in our systems, ensuring it is addressed to the Data Controller.
Our Company will ensure that your request is finalized within a maximum of 30 days, depending on the nature of the request. Rights regarding personal data can only be exercised for the data of individuals themselves. Requests related to the data of persons other than the individual filling out the form and attaching their official identity verification documents will not be considered. Forms submitted without official identity verification documents will also not be considered. Even if data deletion requests are fulfilled, we inform you that we are obligated to share data with official authorities upon their request.
Let me know if you need any adjustments or further assistance!