TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş. Information Notice on the Protection and Processing of Personal Data As TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş., we attach importance to the security of all types of personal data belonging to all persons associated with our Company and to the processing and retention of personal data in accordance with Personal Data Protection Law No. 6698.
The TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş. Information Notice on the Protection and Processing of Personal Data has been prepared pursuant to Article 10 of Personal Data Protection Law No. 6698 (“the Law”) and other relevant legislation for the purpose of informing and providing clarification to natural persons at the time their personal data are obtained.
1-) IDENTITY OF THE DATA CONTROLLER
Within the scope of Personal Data Protection Law No. 6698, our Company, TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş., has the capacity of a “data controller” as defined under the Law.
2-) PROCESSING OF PERSONAL DATA AND PURPOSES OF PROCESSING
Your personal data shall be processed for the purposes of enabling you and/or the institutions and organisations you represent to benefit from the products and services offered by our Company, determining and implementing our Company’s commercial and business strategies, carrying out the necessary activities, including marketing activities and business development and planning activities, conducting administrative operations relating to communications carried out by our Company, ensuring the physical security and supervision of the locations used by our Company, establishing relationships with business partners/customers/suppliers and their authorised representatives or employees, fulfilling contractual requirements and ensuring financial reconciliation in relation to products and services offered jointly with our business partners, suppliers or other third parties, implementing our Company’s human resources policies, calling our Company’s call centre, ensuring that the caller is addressed correctly, verifying the call and determining the number of calls for statistical purposes, using audio recordings of calls and conversations as evidence in disputes that may arise in the future, using the website and/or participating in training sessions, seminars or events organised by our Company, in accordance with the personal data processing principles set out in Article 4 of the Law, by being used, recorded, retained, updated, transferred and/or classified, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. You shall be responsible for ensuring that the personal data you submit to our Company are accurate, complete and up to date and for providing the necessary notification in the event of any change.
3-) TRANSFER OF PERSONAL DATA
Your personal data may, within the limits established by laws and other legislative provisions and solely for the purposes of achieving the objectives specified above and fulfilling the obligations imposed by the relevant legislation, be transferred to the affiliated companies and subsidiaries of TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş., Company officials and our shareholders, companies authorised by us and operating in the name and on behalf of our Company, our representatives, regulatory and supervisory authorities, public institutions or organisations expressly authorised to request your personal data under the laws to which they are subject, business partners, supplier and contractor companies, banks, credit risk and financial institutions and other natural or legal persons within the scope of the specified purposes, tax and similar advisers, persons, institutions and organisations whose involvement is mandatory in relation to legal proceedings, third parties from whom we receive consultancy services, including auditors, business partners, third-party service providers, authorised persons and organisations, legally authorised public institutions and private persons, for the purposes specified above and within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law.
4-) METHOD AND LEGAL BASIS FOR COLLECTING PERSONAL DATA
Your personal data may be collected through various channels, verbally, in writing or electronically, by automatic or non-automatic means through offices, branches, the call centre, the website, social media platforms, mobile applications and similar means. Your personal data shall be retained in electronic and/or physical environments. The necessary business process designs and technical and security infrastructure developments are implemented to prevent your personal data from being subject to unauthorised access, manipulation, loss or damage in the environments in which they are retained by our Company. Provided that your personal data are not used outside the purposes and scope notified to you, they shall be processed by taking all necessary information security measures and shall be retained and processed for the statutory retention period or, where no such period is stipulated, for the period required by the purpose of processing. Upon expiry of this period, your personal data shall be removed from our Company’s data flows through deletion, destruction or anonymisation methods. Your personal data collected on this legal basis may also be processed and transferred for the purposes specified in Articles (2) and (3) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.
5-) RIGHTS OF THE DATA SUBJECT
The rights of the Data Subject regulated under Article 11 of the Personal Data Protection Law are as follows:
ARTICLE 11- “(1) Everyone shall have the right to apply to the data controller and;
a) Learn whether or not their personal data have been processed,
b) Request information if their personal data have been processed,
c) Learn the purpose of the processing of their personal data and whether such data have been used in accordance with that purpose,
ç) Know the third parties to whom their personal data have been transferred domestically or abroad,
d) Request the rectification of their personal data if they have been processed incompletely or inaccurately,
e) Request the deletion or destruction of their personal data within the framework of the conditions stipulated in Article 7 of the Law where, despite having been processed in accordance with the Personal Data Protection Law and other relevant provisions of law, the reasons requiring their processing cease to exist,
f) Request that the operations carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom their personal data have been transferred,
g) Object to the occurrence of a result against the person arising from the analysis of the processed data exclusively through automated systems,
ğ) Claim compensation for damages in the event that the person suffers damage due to the unlawful processing of personal data.”
Pursuant to paragraph 1 of Article 13 of the Law, you may submit your request regarding the exercise of your rights specified above to our Company in writing or by other methods determined by the Personal Data Protection Board. Depending on the nature of your request, our Company shall conclude your request free of charge within thirty days at the latest. However, where the transaction requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board shall be charged. The channels and procedures through which you may submit your written applications to our Company within the scope of Article 11 of the Law are explained below.
In order to exercise your rights specified above, you may submit your wet-signed petition;
together with documents identifying you, in person by hand to BÜYÜK TÜYSÜZ MAH. ALİ İLBEYLİ CAD. NO:18 TOPRAKKALE/OSMANİYE, or send it through a notary public to the same address, BÜYÜK TÜYSÜZ MAH. ALİ İLBEYLİ CAD. NO:18 TOPRAKKALE/OSMANİYE, or submit it to info@tosyaliholding.com with a secure electronic signature. Our Company reserves the right to update this Information Notice on the Protection and Processing of Personal Data at any time within the framework of any amendments that may be made to the applicable legislation and any changes that may occur in the TOSYALI HARSCO GERİ KAZANIM TEKNOLOJİLERİ A.Ş. Policy on the Processing and Protection of Personal Data.