Privacy notice on the processing of personal data
As Kocaeli Kaya Elektromekanik Teknik Yapı İnşaat San. Tic. A.Ş., owner of the Racksis® brand, this notice explains how we process your personal data and your rights under Turkish Personal Data Protection Law No. 6698.
Introduction
In accordance with Article 10 ("Data Controller's Obligation to Inform") of Law No. 6698 on the Protection of Personal Data ("KVKK" or the "Law"), published in the Official Gazette No. 29677 of 7 April 2016 to protect fundamental rights and freedoms, in particular the privacy of private life, and with the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, published in the Official Gazette No. 30356 of 10 March 2018, this Privacy Notice aims to inform you about the personal data we process.
Under the KVKK, your personal data, including any information that identifies or can identify you and your special categories of personal data, may be processed by Kocaeli Kaya Elektromekanik Teknik Yapı İnşaat San. Tic. A.Ş. (the "Company") as data controller. Racksis® is a registered trademark of the Company.
Definitions
What is personal data?
Any information relating to an identified or identifiable natural person, such as name, surname, date and place of birth, information on physical, family, economic and other characteristics, telephone number, vehicle registration plate, social security number or passport number. Examples: name and surname, Turkish ID number, phone number, e-mail address, blood type, IBAN, vehicle plate.
What is special category personal data?
Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sex life, criminal convictions and security measures, as well as biometric and genetic data.
What does processing of personal data mean?
Any operation performed on personal data, such as obtaining, recording, storing, preserving, changing, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of data, wholly or partly by automated means, or by non-automated means as part of a data filing system.
Who is the data controller?
The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.
Who is the data processor?
A natural or legal person outside the data controller's organisation who processes personal data on its behalf, under the authority and instructions given by the data controller through a data processing agreement.
What is a data filing system?
A filing system in which personal data is structured and processed according to specific criteria. Such systems may be electronic or physical.
What is automated processing?
Processing carried out automatically, without human intervention, by devices with processors such as computers, phones and watches, using algorithms prepared in advance through software or hardware features.
What is anonymisation?
Rendering personal data impossible to associate with an identified or identifiable natural person, even when matched with other data.
What is making data public?
Making data "known to everyone". Under Article 5 of the KVKK, personal data made public by the data subject, with the intention of making it public, may be processed without explicit consent, limited to the purpose of making it public and in line with the general principles in Article 4.
Who is the data subject?
The natural person whose personal data is processed.
Personal data we process
When you visit our website, the following personal data may be processed:
| Category | Data |
|---|---|
| Identity | Name and surname, date of birth |
| Contact | Address, e-mail address, phone number |
| Request and customer transaction | Company name, subject of request, product group of interest and message you share in our quote and contact forms |
| Transaction security | IP address, username and password, log records, internet access records, traffic data |
Purposes of processing
When you visit our website, your personal data may be processed in accordance with the applicable legislation for the following purposes:
- Planning and carrying out corporate communication activities,
- Planning, auditing and executing information security processes,
- Carrying out sponsorship activities,
- Planning and carrying out events and training activities,
- Announcing advertisements or newsletters,
- Managing marketing and sales activities,
- Conducting analysis and reporting,
- Managing relationships with customers, suppliers and business partners,
- Evaluating and responding to suggestions, requests and complaints, and making improvements accordingly,
- Developing and diversifying the Company's business processes,
- Carrying out quality and standards audits,
- Monitoring finance and accounting matters,
- Contract management, establishing legal transactions and following up legal processes,
- Evaluating job applications made through our website, if you are a job applicant,
- Carrying out communication activities,
- Fulfilling obligations arising from Law No. 5651,
- Retaining information required by legislation; copying and backing up to prevent data loss; checking data consistency; taking the technical and administrative measures needed to secure our networks and your data,
- Fulfilling legal obligations required by regulatory and supervisory authorities and legislation, and conducting legal proceedings.
Transfers of personal data
Within the scope of the KVKK provisions on data transfers and to the extent required by this Privacy Notice, your personal data may be shared with public institutions and organisations, our domestic suppliers and the companies within Kocaeli Kaya Group.
Legal grounds and collection method
Your personal data is processed by automated or non-automated means, during your visit to our website and throughout our relationship, from you or from third parties based on your declaration, or from electronic channels through cookies, for the purposes listed above and on the legal grounds set out in Articles 5, 8 and 9 of the Law and listed below.
If you visit a Kocaeli Kaya Group company campus, your personal data is collected, stored and processed physically, in writing, verbally or via CCTV cameras for the purposes above and on the legal grounds in Articles 5 and 8 of the KVKK listed below.
Legal grounds
- It is expressly provided for by law,
- It is necessary to process the personal data of the parties to a contract, provided it is directly related to the conclusion or performance of that contract, including to provide the products and services requested and perform the contracts you enter into,
- It is necessary to fulfil a legal obligation,
- The data has been made public by the data subject,
- It is necessary to establish, exercise or protect a right,
- It is necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.
See our Cookie Policy for details on cookies.
Protection, retention and destruction
Your personal data is processed by the Company for as long as the purpose of processing requires and is in any case retained until the end of the legal retention period. When the retention period ends, your personal data is deleted, destroyed or anonymised from electronic and physical media in line with our Personal Data Retention and Destruction Policy and the data protection legislation.
The Company takes all technical and administrative measures required by the data protection legislation to prevent unauthorised access to your personal data, its incorrect processing, disclosure, or unlawful alteration or deletion, and to ensure its protection and security.
If your personal data is damaged and/or obtained or disclosed by third parties as a result of attacks on the Company's physical archive, servers or other systems, the Company will notify you and the Personal Data Protection Board without delay.
Rights of the data subject
Under Article 11 of the Law, you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether data is used accordingly,
- Know the third parties in Türkiye or abroad to whom personal data is transferred,
- Request correction if personal data is incomplete or inaccurate,
- Request deletion or destruction of personal data,
- Request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
- Object to a result against you arising from analysis of the processed data exclusively by automated systems,
- Claim compensation for damages suffered due to unlawful processing of personal data.
How to submit a request
You may submit requests regarding these rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with the official documents needed to verify your identity, by the following methods:
- In person or through a notary: by delivering a written petition to our head office at Sanayi Mh. Hayrettin Uzun Cd. No:26 41001 İzmit/Kocaeli,
- By registered mail with return receipt: by sending the completed Data Subject Request Form to the same address, writing "Kişisel Verilerin Korunması Kanunu Bilgi Talebi" (Personal Data Protection Law Information Request) on the envelope,
- Electronically: from the e-mail address registered in our systems or via registered electronic mail (KEP) to kocaelikayaelektromekanik@hs02.kep.tr, with "Kişisel Verilerin Korunması Kanunu Bilgi Talebi" in the subject line.
Applications made in person are accepted after identity verification. Requests are concluded as soon as possible and within 30 days at the latest, depending on their nature. If a written response is given, no fee is charged for up to 10 pages; for each page above 10, the processing fee in Article 7 of the Communiqué may be charged. If the response is provided on a recording medium such as a CD or flash drive, a fee equal to the cost of the medium may be requested.
If information or documents requested in the application form are missing, we will contact you; the 30-day evaluation period is suspended until they are provided.
Data controller contact details
Under the Law, Kocaeli Kaya Elektromekanik Teknik Yapı İnşaat San. Tic. A.Ş. is the "Data Controller". You can reach the Data Controller through the following contact details:
Company: Kocaeli Kaya Elektromekanik Teknik Yapı İnşaat San. Tic. A.Ş.
Address: Sanayi Mh. Hayrettin Uzun Cd. No:26 41001 İzmit/Kocaeli, Türkiye
Phone: +90 262 321 0 123
Website: kayaelektromekanik.com.tr
KEP address: kocaelikayaelektromekanik@hs02.kep.tr
Last updated: [dd.mm.yyyy]. This notice may be updated to reflect changes in legislation or our processing activities; the current version is always published on this page. This English text is a translation; in case of any discrepancy, the Turkish version prevails.