ÖZGÜL TERMAL TURİZM İNŞAAT GIDA SANAYİ VE TİCARET A.Ş.
www.ozgultermal.com.tr KVKK INFORMATION TEXT
DATA CONTROLLER
In accordance with the Personal Data Protection Law No. 6698 (KVKK), some of your personal data is processed by ÖZGÜL TERMAL TURİZM İNŞAAT GIDA SANAYİ VE TİCARET A.Ş. as the “Data Controller”. The Information Text prepared in accordance with KVKK Article 10 and the “Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Information Obligation” is presented below for the information of the relevant persons. Any personal data you have provided to our Company may be obtained, recorded, stored, preserved, updated, changed, rearranged in order to continue the services, disclosed to third parties, transferred, conveyed, shared, classified, anonymized and processed in other ways specified in the law, in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and other relevant legislation, by our Company, as the Data Controller and/or Data Processor, within the scope explained in the relevant legislation and in accordance with the conditions and limits explained below.
PERSONAL DATA PROCESSED
Identity data (Name and surname, nationality, ID number, place of birth, date of birth, information on the ID card, etc.)
Location data (The region you choose, the city you live in, etc.)
Contact data (Address, telephone number, e-mail address, etc.)
Customer transaction information (Data regarding the services provided to you, etc.),
Financial information (Credit/debit card and bank account information that will be registered upon payment and approval, etc.),
Marketing information (Marketing SMS, e-mails sent based on the commercial electronic message permission you have given, etc.)
Legal transaction information (Start and end time of the service provided, type of service utilized, amount of data transferred, commercial electronic message permission you have given electronically, membership agreement you have approved, other legal texts and agreements that enable the use of the services provided by the Data Controller, etc.),
Transaction security information (IP address information, website login/exit/digital trace information, call center phone number records, commercial communication permission, etc.),
Other data shared with us in person in line with requests and complaints.
PURPOSES OF PROCESSING PERSONAL DATA
Personal data is processed limited to the purposes listed below:
Fulfillment of the requirements of the contracts concluded with you and the services committed,
Performance of your payments, refund if necessary, e-invoicing, e-archive invoicing,
Sharing information-communication with you through the communication channel you prefer within the scope of the service provided, determination of transaction information,
Creating a membership record at ozgultermal.com.tr upon your request and preserving your record,
Transferring your complaints/requests to our Company and following up,
Backing up/archiving, storing and keeping the transaction records made, complying with the information storage, reporting, information obligations under the relevant legislation and fulfilling our legal obligations,
If you have given permission for communication; to present special campaigns and promotional activities related to our services/products, to analyze your processed data within the framework of statistical and planning activities,
To manage customer satisfaction and complaints; to fulfill requests sent through channels such as call center, social media, our website, etc.; to conduct customer satisfaction surveys,
To develop products and services and to purchase services from external sources such as technology and infrastructure services,
In accordance with the relevant legislation; to organize mandatory information and documents within the framework of operation, to store and share information requested by public institutions and organizations, to fulfill notification obligations and to fulfill other legal obligations,
To take all necessary technical and administrative measures in order to ensure the security of our systems and applications,
To share information and documents that are essential for the performance of the business with our business partners within the framework of the presentation and development of our products and services, and for other similar purposes.
In addition, your personal data may be processed in accordance with the Turkish Code of Obligations No. 6098, Law No. 634 on Property Ownership, Turkish Commercial Code No. 6102, Law No. 6502 on the Protection of Consumers, Law No. 6563 on the Regulation of Electronic Commerce and the secondary legislation provisions related to the above-mentioned laws, obligations arising from tax legislation and situations imposed by other authorized public authorities and other relevant legislation provisions, and may be transferred to our Company's physical and/or electronic archive and information systems and kept in both digital and physical environments.
LEGAL REASON FOR PROCESSING PERSONAL DATA
These personal data are processed based on the legal reasons of Article 2 of Law No. 6698;
(a) clause (explicitly provided by law);
(c) clause (necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract);
(ç) clause (mandatory for the data controller to fulfill its legal obligation);
(e) clause (data processing is mandatory for the establishment, exercise or protection of a right);
(f) clause (data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person).
METHOD OF COLLECTION OF PERSONAL DATA
These personal data are processed through digital and physical platforms, call centers, sales channels, social media or computers, partially automatically or automatically, or non-automatically, provided that they are part of a data recording system, based on the legal reasons stated above.
TRANSFER OF PERSONAL DATA
All these personal data are processed within the scope of the Law and relevant legislation and for the purposes listed above;
To business partners, representatives, shareholders and other business partners,
To service providers and business partners that provide infrastructure and software support whose services are used and with whom we cooperate,
To official institutions and organizations such as regulatory and supervisory authorities,
To relevant banks, relevant online payment systems, payment service providers, depending on your preferred payment method,
To relevant institutions/organizations and infrastructure providers within the scope of e-invoicing/e-archive invoicing transactions,
To relevant server hosting, archiving, storage and software service providers that we work with domestically and internationally for the backup/storage/archiving/storage of transaction records,
To the main shareholder of our Company, if necessary, and to the relevant domestic/international affiliates directly/indirectly, if necessary; For the resolution of your complaints or a problem that has arisen or for the fulfillment of our legal obligations, it may be transferred to the relevant employees of our Company, legal, financial and tax advisors, relevant auditors and the relevant persons, institutions and organizations permitted by the provisions of the legislation, within the permitted scope and only to the extent necessary.
The situations that do not require explicit consent, as regulated in Article 5/2 of the KVKK, are separate and reserved.
All processed personal data shall be preserved by taking administrative and technical measures in accordance with the provisions of the KVKK
RIGHTS OF THE RELEVANT PERSON
Within the scope of the Article of the Law "regulating the rights of the relevant person", by applying to the data controller;
To learn whether personal data has been processed,
To request information if personal data has been processed,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data if it is processed incompletely or incorrectly,
To request deletion or destruction of personal data within the framework of the conditions specified in the article of the Law,
To request notification of the transactions made pursuant to clauses (d) and (e) to third parties to whom personal data is transferred,
To object to the emergence of a result against you by analyzing the processed personal data exclusively through automated systems,
ğ) To request compensation for the damages in case of damages due to the processing of personal data in violation of the law.
“In Accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller”;
Relevant persons must submit these requests in Turkish.
Requests must be sent in writing or via e-mail using the e-mail address previously notified to the Data Controller by the relevant person and registered in the Data Controller's system.
Applications must contain the mandatory elements listed in the second paragraph of the above-mentioned circular. Otherwise, applications will not be evaluated.
DATA CONTROLLER CONTACT INFORMATION
Address for Written Application: Hoşnudiye Mah. 732. Sokak No:44/12 Tepebaşı/ESKİŞEHİR
E-Mail: ozgul@ozgultermal.com.tr
Tel: 0 222 211 26 26