INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA (THIRD PARTIES)
Data Controller: Kadıköy Terminal Real Estate Services Trade Joint Stock Company (“Company”)
(Kazım Özalp Neighborhood, Koza Avenue No:22, Çankaya, Ankara)
This information notice has been prepared in order to inform you about the processing of your personal data within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”).
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Article 5 of the Law regulates the conditions for the processing of personal data, and Article 6 regulates the conditions for the processing of special categories of personal data.
Accordingly, personal data that is not classified as special category personal data may be processed under the following conditions:
– The explicit consent of the data subject exists
– Processing is explicitly prescribed by law
– Processing is mandatory for the protection of the life or physical integrity of the data subject or another person where the data subject is unable to give consent due to actual impossibility or where consent is not legally valid
– Processing is necessary for the establishment or performance of a contract to which the data subject is a party
– Processing is mandatory for the data controller to fulfill its legal obligation
– Personal data has been made public by the data subject
– Processing is mandatory for the establishment, exercise, or protection of a right
– Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Personal data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, biometric and genetic data are classified as special categories of personal data, and the conditions for processing such data are regulated under Article 6 of the Law:
– The explicit consent of the data subject exists
– Except for data related to health and sexual life, processing of special categories of personal data is prescribed by law
– Data related to health and sexual life may be processed by persons or authorized institutions and organizations under confidentiality obligation for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of health services and their financing
Personal data belonging to natural persons who qualify as third parties is processed by the Company for the following purposes:
– Planning and execution of press and media activities
– Planning, execution, and supervision of information security processes
– Establishment and management of information technology infrastructure
– Event management
– Monitoring of finance and/or accounting operations
– Ensuring legal security
– Website management
– Planning and execution of business activities
– Planning and/or execution of occupational health and safety processes
– Planning and/or execution of business continuity activities
– Ensuring transaction security
– Planning and execution of corporate communication activities
– Planning and execution of corporate governance activities
– Ensuring physical space security
– Management of customer relations
– Updating customer contact information
– Evaluation of customer complaints and requests
– Fulfillment of financial obligations
– Ensuring operational security
– Conducting advertising and promotional activities
– Risk management
– Planning and/or execution of after-sales support services
– Planning and execution of sponsorship, donation, and aid processes
– Monitoring of contract processes and/or legal claims
– Planning and execution of supply chain management processes
– Determination and implementation of commercial strategies
– Planning and execution of production and/or operational processes
– Planning and/or execution of processes to create and/or increase loyalty to products and/or services
– Planning and execution of sales and marketing processes for products and/or services
– Providing information to authorized institutions
The Company processes personal data lawfully and in good faith, accurately and where necessary kept up to date, for specific, explicit, and legitimate purposes, in a manner that is relevant, limited, and proportionate to the purposes, and retains such data for the period stipulated in the relevant legislation or required for the purpose of processing.
WHICH PERSONAL DATA DO WE PROCESS?
Data Category | Description |
Identity Information | Name, surname, Turkish ID number, ID serial number, passport number, photograph, place and date of birth, age, place of registry |
Contact Information | Address, address number, e-mail address, phone number |
Customer Information | Profession, customer number, order information |
Visual and Audio Records | Photographs, camera recordings, audio recordings |
Request / Complaint Information | All kinds of request and complaint records |
Legal Transaction Information | Correspondence with judicial authorities, lawsuit files, enforcement files, correspondence with administrative authorities |
Marketing Information | Surveys, reports, analyses, cookie records reflecting habits, needs, and preferences |
Transaction Security Information | IP address, website access logs, passwords |
Physical Space Security Information | Visitor records, camera recordings |
Financial Information | Bank account number, credit card number |
Vehicle Information | License plate, vehicle brand |
Personal data required to achieve the purposes stated above may be collected verbally, physically, and/or electronically from websites, social media platforms, mobile applications, marketing activities, event and raffle forms, membership or card applications, security cameras, customer request and complaint forms, camera recordings, Company records, directly from individuals, existing records, and call center records.
Personal data is stored in electronic and physical environments, in secure e-mail systems and software accessible only by authorized persons, and in locked cabinets.
Personal data is collected without obtaining explicit consent pursuant to subparagraphs (c), (ç), (d), (e), and (f) of Article 5/2 of the Law.
DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
Personal data that is not classified as special category personal data may be shared by the Company under the conditions set out in the Law.
Within this scope, personal data may be transferred to the Company’s parent company and group companies, suppliers, business partners, authorized public institutions, and legally authorized private persons or organizations.
No transfer of personal data abroad is carried out.
FOR WHAT PURPOSES MAY WE TRANSFER YOUR PERSONAL DATA?
Personal data may be transferred for the purposes of enabling individuals to benefit from the products and services offered by the Company, conducting business processes, promoting products and services, analyzing needs and preferences, ensuring legal, physical, and commercial security, and fulfilling obligations arising from legislation and administrative procedures.
WHAT ARE YOUR RIGHTS REGARDING THE PROTECTION OF YOUR PERSONAL DATA?
Pursuant to the Law, you have the right to:
– Learn whether your personal data is processed
– Request information regarding the processing of your personal data
– Learn the purpose of processing and whether it is used in accordance with that purpose
– Learn the third parties to whom personal data is transferred domestically or abroad
– Request correction of incomplete or inaccurate personal data
– Request deletion or destruction of personal data under the conditions stipulated by law
– Request notification of correction, deletion, or destruction to third parties to whom personal data has been transferred
– Object to a result against you arising from analysis solely through automated systems
– Request compensation for damages arising from unlawful processing
HOW CAN YOU EXERCISE YOUR RIGHTS?
You may submit your requests by:
– Sending an e-mail from your registered e-mail address to info@terminalkadikoy.com.tr
– Applying in person to the Company with a valid ID
– Sending a wet-signed application form together with a copy of your ID to Kazım Özalp Neighborhood, Koza Avenue No:22, Çankaya, Ankara
– Sending an e-mail to info@terminalkadikoy.com.tr signed with mobile signature or secure electronic signature
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, applications must include the applicant’s name and surname, signature if in writing, Turkish ID number (or nationality, passport number, or ID number for foreign applicants), address for notification, e-mail address, phone number, fax number if available, and details of the request.
Applications must clearly and explicitly state the requested right and include supporting documents.
If the application is made on behalf of another person, a duly authorized power of attorney must be submitted. Unauthorized applications made on behalf of third parties will not be evaluated.
