WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW
GENERAL INFORMATION AND CLARIFICATION TEXT
This information and disclosure text has been prepared by ECY Law & Consultancy for the purpose of informing and enlightening data owners during the lawful collection, acquisition, storage, sharing and protection of confidentiality of personal data, within the scope of the Personal Data Protection Law No. 6698 adopted on 24/3/2016 and other relevant legislation.
In this context, this information text is presented for your information and review in order to fulfill our obligation to inform, as required by Article 10 of the relevant law, regarding the conditions and purposes to be explained below and the data to be processed in accordance with the law.
Definition of Data Controller:
The data controller, as defined in Article 3 of Law No. 6698, is defined as “the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.”
In this context, ECY Hukuk also has responsibility as the Data Controller regarding the processing of personal data, and the fulfillment of the obligation to inform and enlighten is ensured by this enlightenment text.
Legal Basis and Reasons for Processing Personal Data:
In case of obtaining personal data clearly defined in the Law on the Protection of Personal Data No. 6698, these data are processed within the scope of Articles 5 and 6 of the relevant Law. In this context, your personal data will be processed based on the following legal reasons, and in cases other than the specified legal reasons, your explicit consent will be requested for the processing of your Personal Data.
According to the law, these legal purposes are;
• In order to provide information when requested from authorized public institutions and organizations, especially when requested by the Court and authorized public officials,
• To fulfill legal obligations and exercise rights arising from current legislation,
• When deemed necessary to fulfill obligations arising from the establishment, execution and conclusion of the contract,
• The processing of personal data by ECY Hukuk is mandatory for the establishment, exercise or protection of our or your or third party rights,
• Provided that the fundamental rights and freedoms of the individual are protected, it is necessary to process data for the legitimate interests of our office (conducting satisfaction evaluation activities of existing customers, organization and event management, carrying out finance-accounting transactions, carrying out audit processes, carrying out occupational health and safety activities, fulfilling the obligation to notify authorized public institutions such as the Court, etc. etc.)
• If it is necessary for the protection of the life or physical integrity of a person or someone else who is unable to give his consent due to a physical impossibility or whose consent is not legally valid,
• Personal Data has already been made public by the person concerned,
• These are cases where processing of data is mandatory for the establishment, exercise or protection of a right.
Personal Data other than the purposes listed above will be processed by obtaining the explicit consent of the data subject. Personal data obtained and to be processed within the framework of the law may differ depending on the legal relationship that will be established between ECY Hukuk and the data subject. Personal data may be collected by ECY Hukuk in accordance with the law through different platforms (manual means, verbal/written statements, electronic channels, forms on the www.ecyhukuk.com website or pages created by entering information such as name, surname, business or private e-mail address, website visit and use, within the scope of events and activities carried out by ECY Hukuk).
Personal Data acquired by ECY Hukuk may be obtained, stored, updated and processed as long as the above conditions are met and/or explicit consent is available.
Purpose of Collection and Processing of Personal Data
Your Personal Data obtained by us through our website or other means mentioned above will be processed by us for the following purposes, depending on their nature:
• As ECY Hukuk, our business units carry out the necessary planning, evaluation and studies to ensure that our customers benefit from the products and services we offer;
• Carrying out Marketing and Customer Relationship Management activities;
• Organizing corporate communications and other events, campaigns and invitations within this scope and providing information about them, conducting market research studies;
• To improve and personalize the digital platforms we offer to our customers, and if necessary, to use cookies for this purpose;
• Monitoring and evaluating requests, suggestions and complaints from relevant persons, customer management and planning within this scope, and conducting evaluation studies in all areas;
• Ensuring the sustainability of all activities carried out within the scope of ECY Law, making improvements and auditing the persons and companies with whom we have established contractual relations;
• Ensuring the legal and commercial security of the people with whom ECY Hukuk has a business-service relationship,
• Exercising legal rights using the information in question, using information regarding transaction history as evidence in case of dispute after the termination of the current legal relationship with the relevant person/institution;
• Within the scope of its activities, planning, reporting, visitor/customer statistics and similar reviews are carried out and/or compliance with relevant domestic legislation, provision of information requested by public institutions and organizations, and fulfillment of reporting obligations.
• Confirming the identity information of the persons and visitors who perform transactions through the website/mobile applications or on whose behalf transactions are made, and recording the address and other necessary information required for communication,
• Ensuring the security of the website and other electronic systems and physical environments established by ECY Hukuk
Data Owner’s Rights
The rights of real/legal persons whose personal data is processed, pursuant to Article 11 of the KVKK, are as follows:
• Learning whether personal data is being processed,
• To request information regarding the processing of personal data,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred, either domestically or abroad,
• To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
• Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting that the action taken within this scope be notified to third parties to whom personal data has been transferred,
• To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
• To request compensation in case of damages due to unlawful processing of personal data.
Evaluation of Data Owner’s Requests
In accordance with Article 13, Paragraph 1 of the Personal Data Protection Law No. 6698, after the requests regarding the exercise of the above-mentioned rights are submitted to ECY Hukuk in writing or through other methods determined by the Personal Data Protection Board, your application will be finalized as soon as possible and a response will be provided through the contact information you have provided to us.
Links to third party websites (links)
ECY Hukuk Web site may contain links to third party websites. ECY Hukuk does not accept any responsibility for the privacy policies of these sites and does not guarantee in any way whether the data protection practices in force of these websites comply with all relevant legislation and regulations.