KVKK Information Notice
Information Notice on the Protection of Personal Data
As Yıldırım Ambalaj Tekstil Ltd. Şti., we do not regard the protection of personal data—which constitutes the basis of the right to privacy—merely as a matter of legal compliance. Rather, we place the value we attach to human dignity at the core of our approach. Acting with this awareness, we take all necessary administrative and technical measures to ensure that personal data are stored securely and to prevent their unlawful processing. Within this scope, we present below a summary information notice regarding the Turkish Personal Data Protection Law No. 6698, our personal data processing activities and related processes, and our statutory obligations.
What Is the Personal Data Protection Law and What Is Personal Data?
The Personal Data Protection Law No. 6698 (“Law”) was introduced into our legislation with the aim of protecting fundamental rights and freedoms of individuals—primarily the right to privacy—and regulating the obligations of natural and legal persons who process personal data. The Law applies to natural persons whose personal data are processed and to natural and legal persons who process such data.
Pursuant to the Law, personal data refers to any information relating to an identified or identifiable natural person. During our corporate activities, only data that fall within this definition are considered personal data.
What Is Personal Data Processing?
Personal data processing refers to any operation performed on personal data, whether wholly or partially by automatic means or, provided that it forms part of a data recording system, by non-automatic means, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or preventing the use of personal data.
As Yıldırım Ambalaj Tekstil Ltd. Şti., we process personal data shared with us via our website by obtaining them in electronic environments.
Who Is the Data Subject?
The data subject is the natural person whose personal data are processed within the scope of the data processing definition. If your personal data are processed within the scope of the personal data processing activities carried out by Yıldırım Ambalaj Tekstil Ltd. Şti., you are deemed to be the data subject.
Who Is the Data Controller and the Data Processor?
The data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. The data processor is the natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by the data controller.
In the personal data processing activities carried out on our website, the data controller is Yıldırım Ambalaj Tekstil Ltd. Şti.. The data processor may vary depending on the specific personal data processing activities carried out.
Conditions for Processing Personal Data
Personal data may be processed without the explicit consent of the data subject only if one of the following conditions exists:
– It is expressly stipulated by law,
– It is mandatory for the protection of the life or physical integrity of the person who is unable to give consent due to actual impossibility or whose consent is not legally valid, or of another person,
– It is directly related to the establishment or performance of a contract, provided that the processing of personal data belonging to the parties of the contract is necessary,
– It is mandatory for the data controller to fulfill its legal obligation,
– The personal data have been made public by the data subject,
– Data processing is mandatory for the establishment, exercise, or protection of a right,
– Data processing is mandatory for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the data subject.
If none of the above conditions are present, personal data are not processed without your explicit consent. As Yıldırım Ambalaj Tekstil Ltd. Şti., we carry out all personal data processing activities in compliance with the conditions for lawful processing set forth in the Law.
What Are the Information Notice and Explicit Consent Text?
The information notice is the text through which the data controller or the person authorized by it informs the data subject, at the time of obtaining personal data, about the identity of the data controller and its representative (if any), the purposes of processing personal data, the persons to whom and the purposes for which personal data may be transferred, the method and legal basis of data collection, and the other rights listed in Article 11 of the Law.
Explicit consent refers to consent given freely, based on adequate information, and relating to a specific matter. Under the Law, explicit consent constitutes a primary legal basis for the processing of both special categories of personal data and non-special categories of personal data.
On our website, information notices are placed at points where your personal data are processed, and we provide transparent and clear information in all our personal data processing activities. In cases where explicit consent is required for the processing of your personal data due to the absence of another legal basis under the Law No. 6698, we also present explicit consent texts prepared separately alongside the information notices. As part of your right of control over your personal data, we do not carry out personal data processing activities subject to explicit consent unless your approval is given. You may access these texts at any time at the relevant points where the personal data processing activity takes place.
For general and continuous personal data processing activities carried out on our website and the measures we take for the protection of personal data, our “Cookie Information Notice” prepared for informational purposes is presented to you via redirections to the relevant web page addresses below.
What Is a Data Subject Application?
Pursuant to the Law, by applying to the Data Controller, the data subject has the right to:
– Learn whether personal data are processed,
– Request information if personal data have been processed,
– Learn the purpose of processing personal data and whether they are used in accordance with such purpose,
– Know the third parties to whom personal data are transferred domestically or abroad,
– Request the correction of incomplete or inaccurate personal data,
– Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
– Request notification of the actions taken pursuant to the above items to third parties to whom personal data have been transferred,
– Object to the occurrence of a result against the person arising from the analysis of processed data exclusively through automated systems,
– Request compensation for damages in case of loss due to unlawful processing of personal data.
To obtain information regarding the personal data processing activities carried out about you, you may review our “KVKK Application Form Information” text and submit the “Personal Data Application Form” duly completed and sent to us as specified. Your application will be examined by us and responded to within thirty (30) days from the date it is received by us, in accordance with the Law and the relevant Communiqué, either in written form or electronically.