Under Personal Data Protection Law ("PDPL") No. 6698, your personal data will be processed by Sanikey Seramik Sağlık Gereçleri San. Tic. A.Ş. (Central Registration System No (CRSN): 0744046414600011) and BB (CRSN: 0548044168000011) ("COMPANY") in the capacity of Data Controller, depending on the business purpose, by using, collecting, storing, updating, transmitting, and/or classifying them in the framework described below.
In this regard, in accordance with the Laws and Regulations adopted by our company to protect the fundamental rights and freedoms of individuals, in particular privacy and the protection of personal data, our company takes all technical and administrative measures to prevent unlawful processing of your personal data, to prevent illegal access and processing and to ensure their retention to ensure an adequate level of security.
1. Personal Data Collection Method:
Your personal data held in Business Units at our company's headquarters and factory (Gebze/Kocaeli), Job Application Form, Employment Contract of Fixed/ Indeterminate Term, Supplier Agreement, documents submitted to our company during the application process, correspondence conducted through electronic e-mail addresses, information of all types of communication channels, including electronic e-forms, sales transactions, shipping transactions, sales support transactions (waybill, invoicing, acceptance of chargebacks), accounting transactions, purchasing transactions, freight shipments, and call center channels, Through automated or non-automated means, through training, seminars, trade shows, and verbal information, our social media accounts, the parties from whom our company receives complimentary or enhancing services, contracted organizations, business partners, Contracted Product and Service Providers, and other similar channels, may be collected in writing, verbally, or electronically.
2. Legal Reasons for Collecting Personal Data and Purposes of Processing:
Your personal data are processed through technical and procedural methods carried out by our company in different channels such as the website, mobile applications, call center, and physical media. They are collected based on legal bases based on the relevant laws, contracts, requirements, business practices, and honesty rules that have the possibility of being implemented to provide you with our commercial services through these channels and to carry out our commercial activities in this framework. Our company processes your data collected for these legal reasons under the conditions and purposes of personal processing data established in Articles 5 and 6 of the Law.
The objectives of processing your Personal Data are as follows;
- Fulfillment of our legal obligations arising from legislation,
- Present the company's products and services to you, to fulfill our obligations to you, to organize records and documents, to comply with information storage, reporting, information, tax, and other obligations imposed by local and international legal regulations,
- Fulfillment, execution, performance, evidence and development of transactions related to our obligations, reporting to customers, fulfillment of the requirements of the contracts you have entered into and/or concluded, statistics, customer satisfaction studies,
- Sending e-mails and SMS for advertising and promotional purposes to the parties whose express consent has been previously obtained and whose contact details are provided due to their commercial activities in accordance with Law No. 6563 regulating Electronic Commerce,
- Planning, auditing, and execution of information security processes,
- Creation and management of information technology infrastructure,
- Planning and execution of fringe benefits and employee benefits,
- Planning and/or conducting corporate communications for employees and/or corporate social responsibility activities and/or non-governmental organizations in which employees participate,
- Planning and executing employee access to information,
- Tracking and/or monitoring employees' business activities,
- Follow-up of financial and/or accounting work,
- Planning processes in human resources,
- Conduct efficiency/effectiveness and/or relevance analysis of business activities,
- Planning and executing of business activities,
- Management of relationships with business partners and/or suppliers,
- Planning and/or implementation of occupational health and/or safety processes,
- Planning and implementation of corporate communications, logistics and management activities,
- Planning and implementation of customer relationship management processes,
- Planning and/or implementing customer satisfaction activities,
- Follow-up of customer requests and/or complaints,
- Fulfillment of obligations arising from the recruitment, employment contract, and/or legislation for the company's employees,
- Planning and implementation of internal and external training and orientation activities,
- Planning and implementing operational activities necessary to ensure that corporate activities are conducted in accordance with corporate procedures and/or relevant laws,
- Planning and/or implementing the processes to build and/or increase loyalty to the products and/or services offered by the company,
- Planning and/or implementing the company's production and/or operational risk processes,
- Follow-up of contract processes and/or legal requests,
- Planning and implementation of supply chain management processes,
- Wage management,
- Planning and execution of operation processes,
- Planning and conducting market research activities for sales and marketing of products and services,
- Planning and implementation of sales and marketing processes of products and/or services,
- Ensuring that the data is correct and up to date,
- Issuance of information to authorized institutions based on legislation,
- Creation and tracking of visitor records,
-
3. Provisions that do not require explicit consent
In accordance with the PDPL, if any of the following conditions listed in the Act are present, it is possible to process general personal data without your explicit consent:
- If expressly provided for by law,
- It is mandatory for the protection of the life or physical integrity of the person or another person who, due to actual impossibility, is unable to express consent or whose consent is not legally valid,
- Insofar as it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the contracting parties,
- It is mandatory that our company complies with its legal obligation as data controller,
- The person concerned has been made public by himself,
- Data processing is mandatory for the establishment, exercise, or protection of a right,
- Data processing is mandatory for the legitimate interests of our company, provided that it does not adversely affect the fundamental rights and freedoms of the person concerned.
4. The Persons/Organizations to which Your Personal Data can be Transferred are as follows:
- Our company's business partners, shareholders, affiliates,
- Public bodies and organizations authorized by law, administrative and judicial authorities, and persons or organizations authorized by the provisions of other laws,
- In the context of product/service comparison, analysis, evaluation, and realization of the above purposes, they may be transferred to the real or legal persons with whom we receive contracted services and cooperate, to the contracted institutions that mediate the messages sent by us to our customers, to the freight and logistics companies that deliver the orders to you, in the context of the conditions and purposes of the processing of personal data referred to in Articles 8 and 9 of Law No. 6698.
5. Rights of Personal Data Owner:
You have the following rights concerning your personal data, according to Article 11 of the PDPL:
- Learning whether the personal data have been processed or not,
- If personal data have been processed, request information about it,
- Learn the purpose for which personal data are processed and whether they are used in accordance with that purpose,
- Knowing the third parties to whom his personal data are transferred domestically or abroad,
- Request for correction of personal data in case of incomplete or incorrect processing request for communication of transactions to third parties to whom personal data have been transferred,
- Requesting the deletion or destruction of personal data under the conditions set forth in the PDPL, requesting notification of the transactions carried out to the third parties to whom the personal data were transferred,
- Objection to the emergence of a result against the person himself by analyzing the data processed exclusively by automated systems,
- In case of damage due to unlawful processing of personal data claim compensation,