INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

1. Data Controller

This information text has been prepared by ÇELİKSAN TİCARİ ARAÇLAR SANAYİ VE TİCARET LİMİTED ŞİRKETİ (Company) as the data controller within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Information Obligation for our valued visitors, customers, suppliers, business contacts, and relevant persons with whom we have commercial or business relations. All personal data shared with our Company may be processed in accordance with the law, in connection with our activity and service purposes and in proportion.

2. Definitions

2.1. Personal Data: Any information related to an identified or identifiable natural person,
2.2. Processing of Personal Data: Any operation performed on data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, in whole or in part by automatic means or non-automatic means provided that it is part of any data recording system,

2.3. Recipient Group: The category of natural or legal persons to whom personal data is transferred by the data controller,
2.4. Relevant Person: The natural person whose personal data is processed,
2.5. Data Recording System: Any environment containing personal data processed in whole or in part by automatic means or non-automatic means provided that it is part of any data recording system,
2.6. Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,

3. Purpose of Processing Personal Data

Our company processes identity data (name and surname, copy of national identity card, Turkish identity number, signature, etc.), communication data (address, e-mail address, telephone number, etc.), personnel data (payroll information, disciplinary investigation, employment entry document records, etc.), customer transactions (call center records, invoice, promissory note, check information, information on teller receipts, order information, request information, etc.), physical location security (entry and exit record information, camera recordings, etc.), transaction security (IP address information, website entry and exit information, password and passcode information, etc.), finance (bank account information, etc.), professional experience (diploma information, courses attended, in-service training information, certificates, transcript information, etc.), health information (information on disability status, blood type information, personal health information, information on devices and prosthesis used, etc.). ) and your information is processed.

Our company processes your personal data for the purposes listed below:

Your Personal Data;

• Execution of Emergency Management Processes
• Execution of Information Security Processes
• Execution of Audit / Ethics Activities
• Execution of Access Authorizations
• Execution of Activities in Accordance with Legislation
• Execution of Finance and Accounting Affairs
• Ensuring Physical Space Security (via security cameras located at the entrance doors, building facades and service areas within our company and recording images to ensure building security, etc.)
• Execution of Assignment Processes
• Follow-up and Execution of Legal Affairs
• Receiving and Evaluating Suggestions for the Improvement of Business Processes
• Execution of Communication Activities
• Execution / Audit of Business Activities
• Execution of Occupational Health / Safety Activities
• Execution of Business Continuity Activities
• Execution of Internal Audit / Investigation / Intelligence Activities
• Execution of Logistics Activities
• Execution of Goods / Services Purchasing Processes Execution
• Execution of After-Sales Support Services for Goods/Services
• Execution of Goods/Services Sales Processes
• Execution of Goods/Services Production and Operation Processes
• Execution of Customer Relationship Management Processes
• Execution of Activities for Customer Satisfaction
• Organization and Event Management
• Execution of Marketing Analysis Studies
• Execution of Performance Evaluation Processes
• Execution of Advertising/Campaign/Promotion Processes
• Execution of Risk Management Processes,
• Execution of Storage and Archive Activities
• Execution of Contract Processes
• Execution of Strategic Planning Activities
• Tracking of Requests/Complaints
• Ensuring the Security of Movable Goods and Resources
• Execution of Supply Chain Management Processes
• Execution of Marketing Processes for Products/Services
• Ensuring the Security of Data Controller Operations
• Execution of Investment Processes
• Execution of Management Activities
• Execution of Visitor Records Creation and Tracking
• For the purposes of providing information to authorized persons, institutions and organizations, it will be processed in accordance with the processing conditions of personal data specified in Articles 5 and 6 of the PDPA.

4. Transfer of Personal Data

Our company acts in accordance with the regulations stipulated in the PDPA regarding the transfer of personal data.

Your Personal Data;

• Institutions or organizations permitted by the Law on Regulation of Publications Made on the Internet and Combating Crimes Committed through Such Publications, the Turkish Commercial Code, the Tax Procedure Law, the Law on the Protection of Personal Data No. 6698 and other legislative provisions; Public legal entities such as the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Customs and Trade, the Ministry of Labor and Social Security, the Information Technologies and Communication Authority; • Natural or private law legal entities that we receive services from, cooperate with, and are jointly responsible for taking data security measures such as protecting all kinds of personal data, preventing unauthorized access and preventing unlawful processing in order to carry out our activities as a company

• Our shareholders,
• Supplier companies and institutions such as Law, OSGB, Tax, Financial Advisor, Independent Audit Companies, Banks, etc. from which our company receives services;

may be transferred within the framework of the procedures and principles stipulated in the relevant legislation and in accordance with the conditions and purposes of transferring personal data specified in Articles 8 and 9 of the PDPA.

Personal data may be transferred abroad if it is necessary for the performance of the employment contract and in other cases stipulated by law, provided that there is sufficient protection in the foreign country to which it will be transferred, and if there is no sufficient protection, the data controllers in Turkey and the relevant foreign country undertake in writing to provide sufficient protection and comply with Law No. 6698 and the relevant legislation.

Method of Collection of Personal Data and Legal Reason

Your personal data; During the establishment and execution of a business relationship with our company, your personal data can be obtained through all kinds of documents, forms, reports, etc. sent to us by our visitors, customers, suppliers, business contacts, relevant persons with whom we have a commercial or business relationship, and through non-automatic methods, provided that they are part of a data recording system. At the same time, your personal data can be obtained or collected through automatic or partially automatic systems.

The legal reasons for the processing of your personal data by the Company are;
• It is clearly provided for in the laws
• It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of the contract.
• It is mandatory for our company to fulfill its legal obligation.
• Data processing is mandatory for the establishment, exercise or protection of a right.
• Data processing is mandatory for the legitimate interests of our company, provided that it does not harm your fundamental rights and freedoms.
• In cases other than the above legal reasons, your explicit consent is required.
Based on legal reasons, it is collected and processed by our Company for the purposes specified in this disclosure text.

5. Rights of the Relevant Person

We hereby inform you that you have the following rights as the Relevant Person in accordance with Article 11 of the Law:

• To learn whether your personal data is processed,
• To request information if your personal data has been processed,

• To learn the purpose of processing your personal data and whether your personal data is used in accordance with the purpose of processing,

• To know the third parties to whom your personal data is transferred domestically or abroad,

• To request correction of your personal data if it is processed incompletely or incorrectly,

• To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the relevant legislation,

• To request that the correction, deletion and destruction processes carried out in accordance with the relevant legislation be notified to third parties with whom your personal data is shared,

• To object to the emergence of a result against you by exclusively analyzing your processed personal data through automated systems,

• To request compensation for the damages if you suffer damages due to the processing of your personal data in violation of the law.

You can apply for your rights listed above on our website You can fill out the Related Person Application Form and forward it to our company. If your requests regarding your rights in question are sent to our company in writing, celiksanticariaraclar@hs06.kep.tr, secure electronic signature, mobile signature or, if any, to info@celiksantreyler.com via the e-mail address you have previously notified to our company and registered in our company's system, they will be evaluated and finalized within 30 (thirty) days. Requests sent by the related person must include the name, surname of the related person, signature if the application is in writing, Turkish identity number or nationality if foreign, passport number or identity number if any, place of residence or business address for notification, e-mail address for notification, telephone and fax number and the subject of the request.

In case a written response is to be given regarding the requests, the right to request a fee for the responses is reserved according to the fee schedule stipulated by the legislation. If the response to the application is given on a recording medium such as CD or flash memory, our Company may request a fee from the relevant person making the request in the amount of the cost of the recording medium.

Changes in the Text

Our Company may change the provisions in this Text at any time by publishing it. The provisions changed by our Company shall enter into force on the date of publication.

PDPA PDF