SUPPLIER PRIVACY NOTICE UNDER THE PROTECTION OF PERSONAL DATA
As Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, acting as the Data Controller, we would like you to know that, taking into account other legislation and international conventions, and in particular Law No. 6698 on the Protection of Personal Data, we take the necessary measures for data security with the utmost care within the scope of our Personal Data Policy in order to protect your personal data. You can access the data security policies and destruction policies that we follow throughout this process via the link at www.mutlucantuz.com.tr.
Purposes of Processing Personal Data
Taking into consideration the restrictions set out in Articles 5 and 6 of Law No. 6698 on the Protection of Personal Data, all data required by the scope of the business and activity, such as the company name, company logo, full address, telephone/fax/e-mail information, warehouse addresses, solution partners and information relating to these partners, bank account information, signature circulars, guarantee agreements, authorization documents and information contained in various contracts, customer project files and their technical information, bank letters of guarantee, mailbox label information required for e-invoice transmission, KEP information, customer suggestion/complaint form information, security camera footage, voice recording information and business card information, the identity and other contact information of the supplier company’s personnel-technical staff, contracted transportation and their employees, the name and surname information of company personnel, their full address, telephone/fax/e-mail information, and information relating to lawyers, accountants and financial advisors who have a contractual relationship with the company” will be processed within the scope of the following purposes;
• Ensuring cooperation and communication between companies,
• Maintaining corporate activities,
• Carrying out the company’s internal and external operations in the fields of accounting, finance and marketing,
• Fulfilling obligations arising from legal legislation,
• Carrying out the necessary work by business units and executing the relevant business processes in order to enable data subjects to benefit from the products and services offered by the company,
• Carrying out the necessary work by the relevant business units and executing the related business processes in order to carry out the commercial activities conducted by the company,
• Enabling the products and services offered by the company to be customized according to customers’ preferences, usage habits and needs so that more personalized products and services can be offered to customers,
• Conducting activities or commercial relations with solution partners and the parties to the contractual relationship
• Being able to inform customers about products and services, measure their satisfaction through surveys, and enable the internal quality unit to carry out production evaluations,
• Creating and developing products and services in line with customers’ requests,
• Ensuring the security of the company and our employees,
• Being able to use them as evidence in any legal disputes that may arise,
• Ensuring the legal, technical and commercial/business security of customers who are in a business relationship with the company
• Ensuring that the requested products are produced and delivered on time and at the requested quality
may be processed for these purposes.
Methods of Collecting Personal Data
Your personal data is collected verbally, in writing and electronically, from the information obtained within the scope of the dialogues and communication you establish with our company, through the website, electronic mail, mobile communication, mobile applications, suggestion/complaint forms, various contracts, security cameras, and by means not limited to these. This data is obtained and processed in accordance with the principles of Article 5 of the KVKK, in line with our data policy and the decisions of the Board. Throughout all these processes, it is aimed to prevent the collection of unnecessary data by taking into account the principles of proportionality and measure.
Transfer of Personal Data
As the Data Controller ……….Company, taking into consideration the principles set out in Article 4 of Law No. 6698[1],
• Where it is expressly provided for by law,
• Where it is necessary for the protection of the life or bodily integrity of the person themselves or of another person, in cases where the person is unable to express their consent due to actual impossibility or whose consent is not legally valid,
• Provided that it is directly related to the conclusion or performance of a contract, where the processing of the personal data of the parties to the contract is necessary,
• Where it is mandatory for the data controller to fulfil its legal obligation, Where it has been made public by the data subject themselves,
• Where data processing is mandatory for the establishment, exercise or protection of a right,
• Where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing,
• Data may be transferred to third parties and institutions provided that the conditions set out in Articles 8 and 9 of the KVKK and the measures determined by the Board are met. The provisions contained in other legislation are reserved.
[1] a) Being processed in compliance with the law and rules of good faith.
b) Being accurate and, where necessary, up to date.
c) Being processed for specific, explicit and legitimate purposes.
ç) Being relevant, limited and proportionate to the purposes for which they are processed.
d) Being retained for the period stipulated in the relevant legislation or for the period required for the purpose for which they are processed.
Retention and Destruction Policy of Personal Data
Your personal data will be retained for as long as our customer and company relationship continues, and will be retained for 10 (ten) years following the termination of the relevant contractual or other legal relationship; if required by other legal conditions leading to a longer statute of limitations, such as the criminal statute of limitations, it may be retained beyond this period. In the first destruction period after the end of the retention period, data kept in electronic media will be deleted or anonymized by personnel exclusively assigned to this task by the data controller, using the methods within the scope of the Law on the Protection of Personal Data and the relevant regulations, and other data will be destroyed by burning. These destruction operations will be recorded in a report. Detailed explanations regarding these destruction and retention policies can be accessed via the link at …………
Rights of the Data Subject
As the data subject whose data is processed, your rights are set out in Article 11 of Law No. 6698 as follows;
• You can learn whether we process personal data about you, and if we are processing or have processed it, you can request information regarding this.
• You can learn the purpose of processing your personal data and whether it is used in accordance with its purpose.
• You can learn whether your personal data is transferred domestically or abroad and to whom it is transferred.
• You can request the correction of your incorrect and incomplete personal data and the notification of the recipients to whom this data has been or may have been transferred.
• You can request the destruction (deletion, obliteration or anonymization) of your personal data within the framework of the conditions set out in Article 7 of the KVKK. However, we will evaluate your destruction request and determine which method is appropriate according to the circumstances of the specific case. In this context, you can always request information from us regarding why we chose the destruction method we selected.
• You can request that third parties to whom your personal data has been or may be transferred be informed about your destruction request.
• You can object to the results of the analysis of your personal data generated exclusively through an automated system if these results are contrary to your interests.
• You can request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.
The requests contained in your application concerning a Personal Data Breach will be concluded free of charge within thirty days at the latest, depending on the nature of the request[1]. However, if the transaction requires an additional cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged.
You can submit your application regarding matters related to the processing of your personal data by filling out the application form available on the Company’s website, or by the following methods, provided that you comply with the procedures and principles set out in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller:
• In writing and with a signature, through a notary or by registered mail with return receipt
• By e-mail sent from your registered electronic mail (KEP) address
• By secure electronic signature or mobile signature
• By notification to the e-mail address
• By notification to the line numbered …..
[1] In the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9 on the Calculation of the Periods for Application to the Data Controller and Complaint to the Board, the following principles are set out:
• If the data controller responds to the application made by the data subject within 30 days, the data subject may file a complaint within 30 days following the data controller’s response; accordingly, in such cases, the data subject does not have a period of 60 days from the date they applied to the data controller,
• In the event that the data controller does not respond to the application made by the data subject, the data subject may file a complaint with the Board within 60 days from the date they applied to the data controller,
• Considering that if the data controller responds to the application made by the data subject after the 30-day period granted under the Law, the data subject is not obliged to wait for the response to be given after the 30-day period granted to the data controller under the Law and may file a complaint with the Board upon expiry of the period granted to the data controller, it has been deemed appropriate to announce to the public, by the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9, that the data subject may file a complaint with the Board not within 30 days from the date the data controller responded to them, but within 60 days from the date they applied to the data controller.
For the above notifications, it is beneficial not to lose the registration numbers given to you for the purpose of tracking files and transactions, and feedback may be provided to us regarding the notifications made to us by the same method or by registered mail with return receipt.
THE DATA CONTROLLER INFORMATION REQUIRED FOR YOU TO SUBMIT YOUR APPLICATIONS IS AS FOLLOWS;
The Data Controller’s information is as follows:
| COMPANY NAME | Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş |
| MERSIS NUMBER | 0626034057400018 |
| ADDRESS | Mustafa Kemal Mahallesi 2118. Cad. C Blok No:4 C/175 Çankaya/ANKARA |
| PHONE | 0312 323 71 48 |
| FAX | 0 312 352 57 06 |
| info@mutlucantuz.com.tr | |
| KEP (REGISTERED ELECTRONIC MAIL) |
The number and telephone line code in the above information have been created exclusively for KVKK transactions.
In the event that the said data is obtained in violation of the procedures and laws, it will be reported to the Board as soon as possible pursuant to Article 12 of the KVKK. What is meant by as soon as possible[1] is 72 hours.
You can access the complaint form you can submit to our company via this link;
You can access the complaint form you can submit to the KVK Authority via this link;
You can access this privacy notice and the KVKK Policies via this link;
you can access them.