………………………………………. COMPANY
INFORMATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA
This Information Text has been prepared by …………………………….. Company ("Zukutu") to inform the customers of the Company about the processing of their personal data by the Company in accordance with the Personal Data Protection Law No. 6698 ("GDPR").
You can find detailed information about the processing of your personal data within the scope of this Information Text from the Company’s Personal Data Protection and Processing Policy available at [www.zukutu.com].
a) Methods and Legal Reasons for Obtaining Personal Data
Your personal data are collected electronically or physically. Personal data collected based on the legal reasons stated in this Information Text can be processed and shared within the framework of the conditions specified in Articles 5 and 6 of the Law.
b) Purposes of Processing Personal Data
Your personal data may be processed for various purposes, including but not limited to customizing and recommending products and services provided by the Company according to the preferences, usage habits, and needs of individuals, planning and executing activities required for benefiting from the products and services provided by the Company, performing commercial activities by the Company, planning and executing the commercial and/or business strategies of the Company, and ensuring the legal, technical, and commercial-business security of both the Company and the persons who have a business relationship with the Company.
c) Parties to Whom Personal Data Can Be Transferred and Purposes of Transfer
Your personal data can be shared with the Company's business partners, suppliers, legally authorized institutions, and private legal entities within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the Law for various purposes, including recommending and promoting products and services, executing business processes, and ensuring legal, technical, and commercial-business security.
d) Rights of Data Owners and Exercise of These Rights
As a personal data owner, if you submit your requests regarding your rights specified below to the Company, your requests will be evaluated and concluded by our Company within 30 (thirty) days at the latest.
Pursuant to Article 11 of the Law, you have the right to:
- Learn whether your personal data is processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom personal data is transferred in-country or abroad,
- Request correction if your personal data is processed incompletely or incorrectly and request that third parties to whom personal data has been transferred be informed,
- Request the deletion or destruction of personal data in case the reasons for processing no longer exist, even though it has been processed in accordance with the provisions of the Law and other relevant laws, and request that third parties to whom personal data has been transferred be informed,
- Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
- Request the compensation of damage in case you incur damage due to illegal processing of personal data.
According to Article 28, paragraph 2 of the Law, data owners cannot use these rights in cases where:
- Processing is necessary for the prevention of crime or investigation of a crime,
- Processing of personal data that has been made public by the data owner,
- Processing is necessary for the execution of supervisory or regulatory duties by competent public institutions and professional organizations in the nature of a public institution,
- Processing is necessary to protect the economic and financial interests of the state concerning budgetary, taxation, and financial matters.
In the cases specified in Article 28, paragraph 1, personal data will not fall within the scope of the Law, and the requests of data owners will not be processed in these cases.
Exercising Rights by Data Owners
Data owners may use the "Personal Data Owner Application Form to be Submitted to the Data Controller," available at [www.zukutu.com].
Applications can be made in one of the following ways, along with documents identifying the relevant data owner:
- Delivering a wet-signed copy of the form by hand, via notary, or via registered mail to [………………………………………………………..-Turkey],
- Sending it with a secure electronic signature to [……………………..@hs02].kep.tr,
- Following the method prescribed by the Personal Data Protection Board.
The Company, within the limits prescribed by the Law, will respond to the data owners wishing to exercise these rights within a maximum of thirty (30) days. Third parties wishing to submit applications on behalf of data owners must present a notarized special power of attorney issued by the data owner.
While data owner applications are processed free of charge, a fee may be charged based on the fee schedule determined by the Personal Data Protection Board[1].
[1] According to the Communiqué on the Procedures and Principles of Application to the Data Controller published in the Official Gazette dated 10.03.2018 and numbered 30356, no fee is charged for written responses of up to ten pages. A processing fee of 1 Turkish Lira per page may be charged for responses exceeding ten pages. If the response to the application is provided on a storage medium such as CD or flash drive, the fee will not exceed the cost of the medium.
