INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

1. Data Controller, Categories of Personal Data and Collection Methods

Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data such as identity, contact, customer transaction, legal transaction, and transaction security data are collected from you or third parties, either fully or partially automatically or non-automatically, in physical or electronic environments, in written or verbal form, provided they are part of a data recording system. These personal data are processed by Demsa İç ve Dış Ticaret Anonim Şirketi (“Company”) as the data controller within the scope detailed below.

2. Purposes and Legal Grounds for Processing Personal Data

Your personal data collected by us are processed based on the following purposes and legal grounds:

Purpose of Data ProcessingData CategoryLegal Ground
Execution of sales and after-sales supportIdentity, Contact, Customer Transaction, Legal TransactionArticle 5/2-c of Law No. 6698: Necessary for the establishment or performance of a contract
Execution of goods/services production and operations processesIdentity, Contact, Customer TransactionArticle 5/2-c of Law No. 6698: Necessary for the establishment or performance of a contract
Execution of contract processesIdentity, Contact, Customer TransactionArticle 5/2-c of Law No. 6698: Necessary for the establishment or performance of a contract
Conducting activities in compliance with legislationIdentity, Contact, Customer Transaction, Transaction SecurityArticle 5/2-a of Law No. 6698: Explicitly stipulated by law
Execution of information security processesTransaction SecurityArticle 5/2-ç of Law No. 6698: Necessary for the data controller to fulfill legal obligations
Conducting communication activitiesIdentity, Contact, Customer TransactionArticle 5/2-f of Law No. 6698: Necessary for the legitimate interests of the data controller without harming fundamental rights and freedoms of the data subject
Execution of customer satisfaction processesIdentity, Contact, Customer TransactionArticle 5/2-f of Law No. 6698: Necessary for the legitimate interests of the data controller without harming fundamental rights and freedoms of the data subject
Execution of storage and archiving activitiesIdentity, Contact, Customer Transaction, Transaction SecurityArticle 5/2-a and 5/2-f of Law No. 6698

3. Transfer of Personal Data

Your personal data may be transferred to third parties under the following conditions:

Legal Ground for TransferPurpose of TransferRecipient of Transfer
Article 8/2-a of Law No. 6698: Necessary for the establishment or performance of a contractTransfer of necessary information to our business partners to fulfill our obligations under the service contractBusiness Partners
Article 8/2-a of Law No. 6698: Necessary for the legitimate interests of the data controller without harming fundamental rights and freedoms of the data subjectTransfer of necessary information to our business partners for the execution of goods/services production and operation processesBusiness Partners
Article 8/2-a of Law No. 6698: Necessary for the data controller to fulfill legal obligationsConducting activities in compliance with legislationAuthorized Public Institutions and Authorized Private Entities

4. Application Procedures and Principles

As a data subject, you can submit your requests regarding your rights under Article 11 of Law No. 6698 by filling out the Personal Data Protection Application Form available on our website or by applying with a request that meets the minimum requirements set out in the Regulation on the Procedures and Principles of Application to the Data Controller through the methods below. The Company will conclude your application free of charge as soon as possible and within thirty days at the latest depending on the nature of your request. However, if the process requires an additional cost, a fee determined by the Personal Data Protection Board will be charged.

Application MethodApplication Address
Electronic communication via KEPdemsa@hs03.kep.tr
Communication sent from your registered e-mail address in our system or signed with a secure electronic signature or mobile signaturekisiselveri@demsagroup.com
Written application submitted in person or via notaryKısıklı Cad. No:41 Altunizade 34662 Üsküdar/İSTANBUL