Personal Data Protection Information Notice (KVKK)
As Üçel Glass (“Company”), acting in the capacity of data controller, and in line with the principle of protecting individuals’ fundamental rights and freedoms—especially the privacy of private life—for the safety of our members and users, this text serves as our information notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It explains, in particular, the methods of obtaining personal data, the purposes of processing, legal grounds, and the rights of members.
Within this scope, all personal and/or special categories of personal data, corporate, commercial and other data, information and documents (“Personal Data”) that are transmitted to the Company by the member or obtained through the methods specified under the heading “Method of Collecting Personal Data”—including but not limited to identity, contact, legal transaction, username, API, financial, visual and audio records, demographic information, profession, income level, company and customer information, as well as legal data and health data—may be processed.
Purposes of Processing Personal Data
- Performing, managing, developing and improving the services and activities set out in the Membership Agreement; managing operational processes; complying with internal systems, risk monitoring and notification obligations; sharing with relevant authorities when necessary; conducting audits; ensuring sustainability and continuity of operations
- Ensuring that data is kept accurate and up to date
- Enabling communication regarding the Company’s services and products; making offers; planning and carrying out promotion, marketing and campaign activities
- Fulfilling the requirements of contracts concluded by members and/or the Company
- Intelligence, information research, planning and statistics
- Analyzing and improving Company software; maintaining application management operations; executing/planning information security processes; establishing, managing, auditing and implementing IT infrastructure
- Quality standards, security, fraud prevention, dispute resolution, recording and auditing communications and transactions
- Managing and performing customer relations; customer satisfaction activities; developing suitable services and products and maintaining continuity; market research; profiling, segmentation, scoring, risk analysis; CRM; recording notifications such as complaints, objections, requests, and suggestions; evaluating requests/complaints made via social media and proposing solutions
- Improving the Company’s reputation and business relationships; determining strategies; planning and executing business activities and operational processes; conducting corporate communication activities
- Conducting and following up litigation and enforcement proceedings and other legal processes to which the Company is a party
- Planning and carrying out support services and obligations
- Keeping logs in case internet access is used
- Providing better and more reliable services and maintaining them uninterruptedly
- Promoting and marketing other Company software
Method of Collecting Personal Data
- During the establishment of your legal relationship with our Company and throughout the continuation of such relationship
- Throughout the period you enter data after accepting the online membership system and once your membership is approved by us
- Via email
- Through social media accounts
Legal Grounds for Collecting/Processing Personal Data
Your Personal Data may be processed based on the legal grounds set out in KVKK, including but not limited to:
- Explicit consent (KVKK Art. 5/1 and 6/2)
- Being explicitly provided for by laws (Art. 5/2(a))
- Processing being mandatory to protect the life or physical integrity of a person who cannot express consent due to actual impossibility or whose consent is not legally valid (Art. 5/2(b))
- Processing being necessary for the establishment or performance of a contract (Art. 5/2(c))
- Personal data being made public by the data subject (Art. 5/2(d))
- Processing being necessary for the establishment, exercise or protection of a right (Art. 5/2(e))
- Processing being necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2(f))
- For special categories of personal data: processing in cases prescribed by law (Art. 6/3); and for health/sexual life data, processing only for purposes such as protection of public health, preventive medicine, medical diagnosis, treatment and care services, and planning/management of health services and financing (Art. 6/3)
Third Parties to Whom Personal Data May Be Transferred
Personal Data may be transferred and processed, within the framework of the conditions and purposes set forth in KVKK Article 8 (transfer of personal data) and Article 9 (transfer abroad), to:
- Companies and individuals within the Company’s group of companies
- Domestic or international institutions/organizations related to card payment systems under Law No. 6493 and other relevant legislation; system operators; e-money institutions; payment service providers; cloud computing service providers
- Legally authorized public institutions or private entities such as the Banking Regulation and Supervision Agency (BRSA), the Personal Data Protection Authority/Board, Revenue Administration, Undersecretariat of Treasury, Social Security Institution, ministries, and judicial authorities
- Courts, law offices, asset management companies for the purpose of following up and conducting legal processes
- Independent audit companies for auditing compliance with legislation
Members’ Rights Under Article 11 of KVKK
Members have the right to:
a) learn whether their personal data is processed,
b) request information if their personal data has been processed,
c) learn the purpose of processing and whether it is used in accordance with that purpose,
ç) know the third parties to whom personal data is transferred domestically or abroad,
d) request correction if personal data is incomplete or incorrectly processed,
e) request deletion or destruction of personal data under the conditions of Article 7,
f) request notification of the transactions carried out under (d) and (e) to third parties to whom personal data has been transferred,
g) object to an unfavorable outcome resulting from analysis exclusively through automated systems,
ğ) request compensation for damages in case of unlawful processing of personal data.
To exercise these rights, members may apply to the Company. These rights can be exercised as of 07.10.2016, the effective date of the regulation. Costs arising from fulfilling such requests may be charged to members in accordance with the tariff specified in KVKK Article 13 (“Application to the Data Controller”).
Cases Where Consent Is Not Required
Pursuant to Article 5/2 of KVKK, the Company, as data controller, may process personal data without explicit consent where:
- it is explicitly provided for by laws,
- it is necessary for the establishment or performance of a contract,
- it is necessary for the Company to fulfill its legal obligation,
- the data has been made public by the data subject,
- it is necessary for the establishment, exercise or protection of a right,
- it is necessary for the Company’s legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.
Contact
Company: Üçel Glass
Address: Organize Sanayi Bölgesi, 1st Street No:13, 09900 Nazilli / AYDIN
Email: info@borart.com.tr
Phone: +90 256 316 11 88
Fax: Not in use
