Customer Privacy Notice

CUSTOMER PRIVACY NOTICE UNDER THE PROTECTION OF PERSONAL DATA

As Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, acting as the Data Controller, we would like you to know that, taking into account primarily the Law No. 6698 on the Protection of Personal Data as well as other legislation and international conventions, we take all necessary measures for data security with the utmost care within the scope of our Personal Data Policy in order to protect your personal data. You may access the data security policies and destruction policies we follow in this process via the link www.mutlucantuz.com.tr.

Purposes of Processing Personal Data

Taking into consideration the restrictions set out in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data, all data required by the scope of the business and activities such as the obtained company name, company logo, full address, phone/fax/e-mail information, warehouse addresses, business partners and information relating to these partners, bank account information, signature circulars, guarantee agreements, authorization documents and information in various contracts, customer project files and their technical information, bank letters of guarantee, mailbox label information required for e-invoice submission, KEP information, customer suggestion/complaint form information, security camera footage, voice recording information and business card information, name and surname information of company personnel, full address, phone/fax/e-mail information, information belonging to lawyers, accountants and financial advisors who have a contractual relationship with the company, will be processed within the scope of the following purposes;

• Ensuring inter-company cooperation and communication,
• Maintaining corporate activities,
• Carrying out the company’s internal and external operations in the fields of accounting, finance and marketing,
• Fulfilling obligations arising from legal legislation,
• Carrying out the necessary work by business units to enable data subjects to benefit from the products and services offered by the company and conducting the relevant business processes,
• Carrying out the necessary work by the relevant business units to perform the commercial activities conducted by the company and conducting the related business processes,
• Enabling the products and services offered by the company to be customized according to the preferences, usage habits and needs of customers so as to offer customers more personalized products and services,
• Conducting activities or commercial relationships with business partners and parties to the contractual relationship,
• Being able to inform customers about products and services, measure their satisfaction through surveys, and enabling the quality unit within the company to carry out production evaluation,
• Being able to create and develop products and services in line with the requests of customers,
• Being able to ensure the security of the company and our employees,
• Being able to use it as evidence in potential legal disputes,
• Being able to ensure the legal, technical and commercial/business security of customers who are in a business relationship with the company

may be processed for these purposes.

Methods of Collecting Personal Data

Your personal data is collected verbally, in writing and electronically, from information obtained within the scope of the dialogues and communication you establish with our company, through the website, electronic mail, mobile communication, mobile applications, suggestion/complaint forms, various contracts, security cameras and by other means not limited to these. This data is obtained and processed in line with our data policy and the decisions of the Board, taking into account the principles of Article 5 of the KVKK. In all these processes, the principles of proportionality and measurability are taken into account with the aim of preventing unnecessary data collection.

Transfer of Personal Data

As Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, acting as the Data Controller, taking into account the principles expressed in Article 4¹of the Law No. 6698,

• Where it is expressly stipulated by laws,
• Where it is mandatory for the protection of the life or physical integrity of the person himself/herself or of another person who is unable to express his/her consent due to actual impossibility or whose consent is not deemed legally valid,
• Provided that it is directly related to the establishment or performance of a contract, where the processing of personal data belonging to the parties to the contract is necessary,
• Where it is mandatory for the data controller to fulfill its legal obligation, Where it has been made public by the data subject himself/herself,
• Where data processing is mandatory for the establishment, exercise or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, where data processing is mandatory for the legitimate interests of the data controller,
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing,

transfers may be made to third parties and institutions, provided that the conditions set out in Articles 8 and 9 of the KVKK and the measures determined by the Board are taken. The provisions in other legislation are reserved.

Retention and Destruction Policy of Personal Data

¹a) Being in compliance with the law and the rules of good faith.
b) Being accurate and up to date when necessary.
c) Being processed for specific, explicit and legitimate purposes.
ç) Being relevant, limited and measured in connection with the purposes for which they are processed.
d) Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Your personal data will be retained as long as our customer and company relationship continues, and following the termination of the said contractual or other legal relationship, it will be retained for 10 (ten) years, and where required by other legal conditions causing a longer limitation period, such as criminal statute of limitations, it may be retained beyond this period. In the first destruction period following the end of the retention period, data kept in electronic media will be deleted or anonymized, and other data will be destroyed by burning, using the methods within the scope of the Law on the Protection of Personal Data and the relevant regulations, by personnel exclusively assigned to this task by the data controller. These destruction operations will be recorded in minutes. Detailed explanations regarding the said destruction and retention policies can be accessed via the link ………..

Rights of the Data Subject

As the data subject whose data is processed, your rights are set out in Article 11 of the Law No. 6698 as follows;

• You can learn whether we process personal data about you, and if we do or have processed it, you can request information regarding this.
• You can learn the purpose of processing your personal data and whether they are used in accordance with their purpose.
• You can learn whether your personal data is transferred domestically or abroad and to whom it is transferred.
• You can request that your incorrect and incomplete personal data be corrected and that the recipients to whom this data has been or may have been transferred be informed.
• You can request that your personal data be destroyed (deleted, erased or anonymized) within the framework of the conditions stipulated in Article 7 of the KVKK. However, we will evaluate your destruction request and determine which method is appropriate according to the circumstances of the specific case. In this context, you can always request information from us as to why we chose the destruction method we selected.
• You can request that the third parties to whom your personal data has been or may be transferred be informed regarding your said destruction request.
• You can object to the results of the analysis of your personal data generated exclusively through an automated system if these results are contrary to your interests.
• You can request the remedy of the damage in case you suffer damage due to the unlawful processing of your personal data.

The requests contained in your application concerning a Personal Data Breach will be concluded free of charge within thirty days at the latest, depending on the nature of the request^[1]. However, if the operation requires an additional cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged.

[1] In the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9 regarding the Calculation of the Periods for Application to the Data Controller and Complaint to the Board, the following principles were included:

• In the event that the data controller provides a response within 30 days to the application made by the data subject, the data subject may file a complaint within 30 days following the response of the data controller; in this respect, in the said cases the data subject does not have a period of 60 days from the date of application to the data controller,
• In the event that the data controller does not provide a response to the application made by the data subject, the data subject may file a complaint with the Board within 60 days from the date of application to the data controller,
• In the event that the data controller provides a response after the 30-day period granted in the Law to the application made by the data subject, considering that the data subject is not obliged to wait for the response to be given after the 30-day period granted to the data controller in the Law and may file a complaint with the Board upon the expiry of the period granted to the data controller, the data subject may file a complaint with the Board within 60 days from the date of application to the data controller, not within 30 days from the date on which the data controller responded to it; these matters were deemed appropriate to be announced to the public by the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9.

• In writing and signed, through a notary or by registered return mail
• By e-mail to be sent from your registered electronic mail (KEP) address
• With a secure electronic signature or mobile signature
• With a notification to be made to the mail address
• With a notification to be made to the line numbered …..

For the above notifications, it is beneficial not to lose the registration numbers given to you for the purpose of file and transaction tracking, and feedback may be provided to the notifications made to us using the same method or by registered return mail.

THE DATA CONTROLLER INFORMATION NECESSARY FOR YOU TO MAKE YOUR APPLICATIONS IS AS FOLLOWS;

The information of the Data Controller is as follows:

COMPANY NAME	Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş
MERSIS NUMBER	626034057400018
ADDRESS	Mustafa Kemal Mahallesi 2118. Cad. C Blok No:4 C/175 Çankaya/ANKARA
PHONE	0312 323 71 48
FAX	0312 352 57 06
E-MAIL	info@mutlucantuz.com.tr
KEP (REGISTERED ELECTRONIC MAIL)

The number and phone line code included in the above information have been created exclusively for KVKK operations.

In the event that the said data is obtained unlawfully and contrary to procedures, it will be reported to the Board as soon as possible pursuant to Article 12 of the KVKK. What should be understood by as soon as possible^[1] is 72 hours.

[1] By the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/10;

It has been deemed appropriate to interpret the expression “as soon as possible” contained in the provision of paragraph (5) of Article 12 of the Law, which reads “In the event that the processed personal data is obtained by others through unlawful means, the data controller shall report this situation to the relevant person and the Board as soon as possible….”, as 72 hours, and in this context, that the data controller shall report this situation to the Board without delay and within 72 hours at the latest from the date it learns of it, and that following the determination by the data controller of the persons affected by the said data breach, the relevant persons shall also be notified within the reasonable shortest time, directly if the contact address of the data subject can be reached, and if not, by appropriate methods such as publication on the data controller’s own website,

You may access the complaint form you can submit to our company via this link;

You may access the complaint form you can submit to the Personal Data Protection Authority via this link;

You may access this privacy notice and the KVKK Policies via this link;

you may access them.

³By the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/10;
————————————————————————————————————–

Customer Privacy Notice

CUSTOMER PRIVACY NOTICE UNDER THE PROTECTION OF PERSONAL DATA

Corporate

Useful Links

Contact