Carrier Privacy Notice

CARRIER PRIVACY NOTICE UNDER THE PROTECTION OF PERSONAL DATA

As Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, acting as the Data Controller, we would like you to know that, taking into account primarily the Law No. 6698 on the Protection of Personal Data as well as other legislation and international conventions, we exercise the utmost care in taking the necessary measures for data security within the scope of our Personal Data Policy in order to protect your personal data. You may access the data security policies and destruction policies we follow in this process via the link with the extension www.mutlucantuz.com.tr.

Purposes of Processing Personal Data

Taking into consideration the restrictions set out within the scope of Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data, all data required by the scope of the business and activities, such as the company name, company logo, full address, telephone/fax/e-mail information, warehouse addresses, customer and company addresses and location information, solution partners and information relating to these partners, bank account information, signature circular, surety agreement, authorization documents and information in various agreements, mailbox label information required for e-invoice submission, KEP information, full address and location information of the fields of activity, vehicle location information, identity and company information of the carrier and the person delivering-receiving, security camera footage, voice recording information and business card information, name-surname information of company personnel, their full address, telephone/fax/e-mail information, information belonging to lawyers, accountants and financial advisors in a contractual relationship with the company,” obtained in this manner, shall be processed within the scope of the following purposes;

• Ensuring cooperation and communication between companies,
• Sustaining corporate activities,
• Conducting the company’s internal and external operations in the areas of accounting, finance and marketing,
• Fulfilling obligations arising from legal legislation,
• Carrying out the necessary work by the business units in order to enable the relevant persons to benefit from the products and services offered by the company and executing the relevant business processes,
• Carrying out the necessary work by the relevant business units in order to perform the commercial activities conducted by the company and executing the related business processes,
• Enabling the company to offer more personalized products and services to customers by customizing the products and services offered by the company according to the tastes, usage habits and needs of the customers,
• Conducting activities or commercial relations with solution partners and the parties to the contractual relationship,
• Informing customers about products and services, measuring their satisfaction by means of surveys, and enabling the quality unit within the company to carry out production evaluations,
• Creating and developing products and services in line with the requests of customers,
• Carrying out security, control and time evaluations of the vehicle and products subject to transportation,
• Ensuring the safety of the company and our employees,
• Enabling their use as evidence in any legal disputes that may arise,
• Ensuring the legal, technical and commercial/business security of customers who are in a business relationship with the company

may be processed for the aforementioned purposes.

Methods of Collecting Personal Data

Your personal data are collected verbally, in writing and electronically, including but not limited to information obtained within the scope of the dialogues and communication you establish with our company, the website, electronic mail, mobile communication, mobile applications, suggestion/complaint forms, various agreements, and security cameras. These data are obtained and processed within the framework of our data policy and the decisions of the Board, taking into account the principles of Article 5 of the KVKK. Throughout all these processes, it is aimed to prevent the collection of unnecessary data by taking into account the principles of proportionality and measurability.

Transfer of Personal Data

As Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, acting as the Data Controller, taking into account the principles set out in Article 4 of the Law No. 6698[1],

• Where it is expressly provided for by the laws,
• Where it is necessary for the protection of the life or physical integrity of the person himself/herself or of another person who is unable to express his/her consent due to actual impossibility or whose consent is not legally valid,
• Provided that it is directly related to the establishment or performance of a contract, where it is necessary to process the personal data of the parties to the contract,
• Where it is mandatory for the data controller to fulfill its legal obligation, Where the data has been made public by the data subject himself/herself,
• Where data processing is mandatory for the establishment, exercise or protection of a right,
• Where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing,
• Transfer to third persons and institutions may be made provided that the conditions set out in Articles 8 and 9 of the KVKK and the measures determined by the Board are taken. The provisions in other legislation are reserved.


[1] a) Being in compliance with the law and the rules of good faith.

b) Being accurate and, where necessary, up to date.

c) Being processed for specified, explicit and legitimate purposes.

ç) Being relevant, limited and measured in relation to the purposes for which they are processed.

d) Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Retention and Destruction Policy of Personal Data

Your personal data will be retained as long as our customer and company relationship continues, and will be retained for 10 (ten) years following the termination of the aforementioned contractual or other legal relationship, and where required by other legal conditions such as the criminal statute of limitations that gives rise to a longer statute of limitations, it may be retained beyond this period. In the first destruction period following the end of the retention period, the data kept electronically will be deleted or anonymized by personnel exclusively assigned to this task by the data controller, using the methods within the scope of the Law on the Protection of Personal Data and the relevant regulations, while other data will be destroyed by burning. These destruction operations will be recorded in minutes. Detailed explanations regarding the aforementioned destruction and retention policies may be accessed via the link with the extension www.mutlucantuz.com.tr.

Rights of the Data Subject

As the data subject whose data is processed, your rights are set out in Article 11 of the Law No. 6698 as follows;

• You may learn whether we process personal data about you, and if we process or have processed it, you may request information about it.
• You may learn the purpose of processing your personal data and whether they are used in accordance with their purpose.
• You may learn whether your personal data are transferred domestically or abroad and to whom they are transferred.
• You may request the correction of your incorrect and incomplete personal data and the notification of the recipients to whom these data have been or may have been transferred.
• You may request the destruction (deletion, erasure or anonymization) of your personal data within the framework of the conditions set out in Article 7 of the KVKK. However, by evaluating your destruction request, we will determine which method is appropriate according to the circumstances of the specific case. In this context, you may always request information from us regarding why we chose the destruction method we selected.
• You may request that the third persons to whom your personal data have been or may be transferred be informed about your aforementioned destruction request.
• You may object to the results of the analysis of your personal data carried out exclusively by means of an automated system if these results are contrary to your interests.
• In the event that you suffer damage due to the unlawful processing of your personal data, you may request that the damage be remedied.

Your requests included in your application subject to a Personal Data Breach will be concluded free of charge within thirty days at the latest, depending on the nature of the request[1]. However, if the transaction requires an additional cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged.


[1] The following principles are set out in the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9 Regarding the Calculation of the Periods for Application to the Data Controller and Complaint to the Board:

• In the event that the data controller responds within 30 days to the application made by the data subject, the data subject may file a complaint within 30 days following the response of the data controller; accordingly, in such cases, the data subject does not have a 60-day period from the date of application to the data controller,
• In the event that the data controller does not respond to the application made by the data subject, the data subject may file a complaint to the Board within 60 days from the date of application to the data controller,
• In the event that the data controller responds after the 30-day period granted in the Law to the application made by the data subject, considering that the data subject is not obliged to wait for the response to be given after the 30-day period granted to the data controller in the Law and may file a complaint to the Board upon the expiry of the period granted to the data controller, the fact that the data subject may file a complaint to the Board within 60 days from the date of application to the data controller, and not within 30 days from the date on which the data controller responds, has been deemed appropriate to be announced to the public by the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9.

Regarding the matters related to the processing of your personal data, you may submit your application by filling out the application form on the Company’s website or, provided that you comply with the procedures and principles specified in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller, by the following methods:

• In writing and signed, via notary or by registered return mail
• By e-mail to be sent from your registered electronic mail (KEP) address
• By secure electronic signature or mobile signature
• By notification to be made to the e-mail address
• By notification to be made to the line numbered …..

It is beneficial not to lose the record numbers given to you for the above notifications in terms of file and transaction tracking, and feedback on the notifications made to us may be provided by the same method or by registered return mail.

THE DATA CONTROLLER INFORMATION REQUIRED FOR YOU TO SUBMIT YOUR APPLICATIONS IS AS FOLLOWS;

The information of the Data Controller is as follows:

COMPANY NAME Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş
MERSIS NUMBER 0626034057400018
ADDRESS Mustafa Kemal Mahallesi 2118. Cad. C Blok No:4 C/175 Çankaya/ANKARA
PHONE 0312 323 71 48
FAX 0 312 352 57 06
E-MAIL info@mutlucantuz.com.tr
KEP (REGISTERED ELECTRONIC MAIL)

The number and telephone line code included in the information above have been created exclusively for KVKK transactions.

In the event that the aforementioned data are obtained in a manner contrary to the procedures and laws, it will be reported to the Board as soon as possible pursuant to Article 12 of the KVKK. What should be understood by as soon as possible[1] is 72 hours.

You may access the complaint form you can submit to our company via this link;

You may access the complaint form you can submit to the Personal Data Protection Authority via this link;

You may access this privacy notice and the KVKK Policies via this link;

via the aforementioned links.