VISITOR PRIVACY NOTICE UNDER THE PROTECTION OF PERSONAL DATA
As the Data Controller, Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, we would like you to know that, taking into account other legislation and international conventions, and in particular Law No. 6698 on the Protection of Personal Data, we take the necessary measures for data security within the scope of our Personal Data Policy with the utmost care in order to protect your personal data.
Within our premises located at the address Mustafa Kemal Mahallesi 2118. Cad. C Blok No:4 C/175 Çankaya/ANKARA, the company Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş carries out 24/7 camera recording and, in some areas, audio recording; warnings regarding these recordings have been brought to the attention of you, our visitors and employees, by means of warning signs that can be seen in the relevant area. In addition, a shared network is used within our premises, and the IP information relating to this network and the information regarding the said IP matches are used securely in the LOG records in the manner specified in our destruction policy. Entry and exit records, and the signatures, license plates, identity information, information about the institution where the person works and other information and data obtained in these records, are kept in computerized systems and in the relevant record books.
Purposes of Processing Personal Data
As a data subject, your personal data is processed within the scope of Articles 5 and 6 of Law No. 6698 for the following purposes;
• Creating a record,
• Being able to provide internet service,
• The healthy provision and audit of our Company’s quality, information security and confidentiality policies and standards,
• The determination of entry and exit records,
• Confidentiality and security practices at the workplace,
• The management of internet access records,
• The fulfilment of obligations arising from legal legislation,
• Ensuring continuity and order in workplace activities,
• Fulfilling the requests of public institutions and organizations where required by legal regulations,
• The fulfilment of obligations relating to occupational health and safety,
• Being able to ensure the security of the Company, our employees and all third parties present at the workplace,
• Being able to be used as evidence in possible legal disputes,
• Conducting operations or commercial relationships with solution partners and parties to the contractual relationship
may be processed for these purposes.
Methods of Collecting Personal Data
Your personal data is collected verbally, in writing and electronically, from the information obtained within the scope of the dialogues and communication you establish with our company, through the website, e-mail, mobile communication, mobile applications, suggestion/complaint forms, various contracts, security cameras, and without being limited to these. This data is obtained and processed in line with our data policy and the Board’s decisions, taking into account the principles of Article 5 of the KVKK. In all these processes, it is aimed to prevent unnecessary data collection by taking into account the principles of proportionality and measurability.
Transfer of Personal Data
As the company Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş, taking into account the principles expressed in Article 4 of Law No. 6698[1],
• Where it is expressly provided for in the laws,
• Where it is compulsory for the protection of the life or physical integrity of the person themselves or of another person, who is unable to express their consent due to actual impossibility or whose consent is not legally valid,
• Provided that it is directly related to the establishment or performance of a contract, where the processing of personal data belonging to the parties of the contract is necessary,
• Where it is compulsory for the data controller to fulfil its legal obligation, where it has been made public by the data subject themselves,
• Where data processing is compulsory for the establishment, exercise or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, where data processing is compulsory for the legitimate interests of the data controller,
• The protection of public health, preventive medicine, the conduct of medical diagnosis, treatment and care services, and the planning and management of health services and their financing,
For these, transfers may be made to third parties and institutions provided that the conditions written in Articles 8 and 9 of the KVKK and the measures determined by the Board are taken. The provisions contained in other legislation are reserved.
[1] a) Being in compliance with the law and the rules of good faith.
b) Being accurate and, where necessary, up to date.
c) Being processed for specific, explicit and legitimate purposes.
ç) Being connected, limited and measured in relation to the purposes for which they are processed.
d) Being retained for the period foreseen in the relevant legislation or necessary for the purpose for which they are processed.
Personal Data Retention and Destruction Policy
Although our KVKK destruction policy is explained in detail at the address www.mutlucantuz.com.tr, your Personal Data will be retained for 6 (six) months and for the maximum period necessary for the purpose for which it is processed and in any case for the legal statute of limitations periods; it may also be retained beyond this period if required by other legal conditions such as a longer criminal statute of limitations. In the first destruction period following the end of the retention period, the data kept in electronic form will be destroyed by being deleted or anonymized, and other data by being burned, by the data controller through personnel exclusively assigned to this task, using the methods within the scope of the Law on the Protection of Personal Data and the relevant regulations. These destruction processes will be recorded in minutes.
Data Subject Rights
As the data subject whose data is processed, your rights are set out in Article 11 of Law No. 6698 as follows;
• You can learn whether we process personal data about you, and if we process or have processed it, you can request information regarding this.
• You can learn the purpose of processing your personal data and whether it is used in accordance with its purpose.
• You can learn whether your personal data has been transferred domestically or abroad and to whom it has been transferred.
• You can request the correction of your incorrect and incomplete personal data and the notification of the recipients to whom this data has been or may have been transferred.
• You can request the destruction (deletion, elimination or anonymization) of your personal data within the framework of the conditions foreseen in Article 7 of the KVKK. However, by evaluating your destruction request, which method is appropriate will be assessed by us according to the circumstances of the specific case. In this context, you can always request information from us regarding why we chose the destruction method we selected.
• You can request that the third parties to whom your personal data has been or may be transferred be informed regarding your said destruction request.
• You can object to the results of your personal data analysis created exclusively using an automated system, if these results are against your interests.
• In the event that you suffer damage due to the unlawful processing of your personal data, you can request the compensation of the damage.
The requests contained in your Application regarding a Personal Data Breach will be concluded free of charge within thirty days at the latest, depending on the nature of the request[2]. However, in the event that the process requires an additional cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged.
[2] The following principles are set out in the Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/9 regarding the Calculation of the Periods for Application to the Data Controller and Complaint to the Board:
• In the event that a response is given by the data controller within 30 days to the application made by the data subject, the data subject may file a complaint within 30 days following the data controller’s response; accordingly, in such cases, the data subject does not have a 60-day period from the date of application to the data controller,
• In the event that no response is given by the data controller to the application made by the data subject, the data subject may file a complaint with the Board within 60 days from the date of application to the data controller,
• In the event that a response is given by the data controller after the 30-day period granted in the Law to the application made by the data subject, considering that the data subject is not obliged to wait for the response to be given after the 30-day period granted to the data controller in the Law and may file a complaint with the Board once the period granted to the data controller expires, the data subject may file a complaint with the Board not within 30 days from the date the data controller responded to them, but within 60 days from the date of application to the data controller,
You can make your application regarding matters relating to the processing of your personal data by filling out the application form available on the Company’s website, or by the following methods, provided that you comply with the procedures and principles specified in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller:
• In writing and signed, through a notary or by registered mail with return receipt
• By e-mail to be sent from your registered electronic mail (KEP) address
• With a secure electronic signature or mobile signature
• By notification to be made to the e-mail address
• By notification to be made to the …..line
It is beneficial not to lose the registration numbers given to you for the above notifications in terms of file and process tracking, and feedback to the notifications made to us may be provided using the same method or by registered mail with return receipt.
THE DATA CONTROLLER INFORMATION NECESSARY FOR YOU TO MAKE YOUR APPLICATIONS IS AS FOLLOWS;
The information of the Data Controller is as follows:
| COMPANY NAME | Mutlucan Tuz Madencilik İnş.Tur.Otom.Pet.Nak.San. ve Tic. Aş |
| MERSIS NUMBER | 0626034057400018 |
| ADDRESS | Mustafa Kemal Mahallesi 2118. Cad. C Blok No:4 C/175 Çankaya/ANKARA |
| PHONE | 0312 323 71 48 |
| FAX | 0 312 352 57 06 |
| info@mutlucantuz.com.tr | |
| KEP (REGISTERED ELECTRONIC MAIL) |
The number and telephone line code contained in the above information have been created exclusively for KVKK processes.
In the event that the data in question is obtained unlawfully and in violation of the procedures and laws, it will be reported to the Board as soon as possible pursuant to Article 12 of the KVKK. The phrase “as soon as possible”[3] is to be understood as 72 hours.
[3] By Decision of the Personal Data Protection Board dated 24.01.2019 and numbered 2019/10;
it was decided that the phrase “as soon as possible” in the provision of paragraph (5) of Article 12 of the Law, which states “In the event that the processed personal data is obtained by others through unlawful means, the data controller shall report this situation to the relevant person and to the Board as soon as possible….”, be interpreted as 72 hours; that within this scope the data controller report the situation to the Board without delay and within 72 hours at the latest from the date it becomes aware of it; and that, following the determination by the data controller of the persons affected by the data breach in question, notification also be made to the relevant persons within the shortest reasonable time, directly if the relevant person’s contact address can be reached, and if not, through appropriate methods such as publication on the data controller’s own website,
The complaint form you can submit to our company is available at this link;
The complaint form you can submit to the Personal Data Protection Authority is available at this link;
This privacy notice and the KVKK Policies are available at this link;
you can access them.