CLARIFICATION TEXT UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

Information

Law No. 6698 on the Protection of Personal Data was adopted on March 24, 2016 and entered into force after being published in the Official Gazette on April 7, 2016.

The Law was adopted in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to regulate the obligations of real and legal persons who process personal data and the procedures and principles to be followed. With this text, visitors are informed and enlightened by the company.

The Company will process your name, e-mail address, work and home address, telephone number and other personal data submitted by visitors through the forms on this website only for the purpose of processing and within the limits specified in the clarification text and, if consent is given, in the explicit consent text.

DATA CONTROLLER AND CONTACT PERSON

As stated in this Clarification Text, the COMPANY is the data controller in accordance with KVKK.

Data Controller Information

Full Name: Alya Tekstil San. ve Tic. Ltd. Company

Short Name: COMPANY

Address:  Dudullu Organized Industrial Zone, DES Sanayi Sitesi, 101. Sokak B4 Blok No: 2, 34776 Ümraniye-Istanbul

website https://alyatekstil.com/tr/

cap address: alyatekstilsanayi@hs01.kep.tr

Our Reasons for Processing Your Data:

Your personal data is processed in accordance with Articles 5 and 6 of the Law for similar purposes, including but not limited to carrying out the necessary activities within the company in order to ensure that the products and services provided by our company can be offered to you, carrying out the necessary work with the relevant business unit and business partners in order to recommend products and services suitable for your current needs, ensuring the rights of natural persons by ensuring human resource management by our Company, taking the necessary steps for making, implementing and realizing commercial decisions by our Company, ensuring the legal security of the natural persons with whom we establish business relations and our Company arising from these relations, and similar purposes.

Your Personal Data may be processed by the Company as the Data Controller without seeking your explicit consent in the following cases:

a) It is clearly stipulated in the laws;

b) It is mandatory for the protection of the life or physical integrity of the person himself/herself or of another person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.

c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the performance of the contract.

ç) It is mandatory for the fulfillment of our legal obligations as a data controller;

d) It has been made public by the data subject himself/herself.

e) Data processing is mandatory for the establishment, exercise or protection of a right

f) Provided that it does not harm the fundamental rights and freedoms of the person concerned, it can be used for the purposes we will specify below, based on any of the conditions that data processing is mandatory for the legitimate interests of the data controller.

Your personal data may be processed for the following purposes;

*To communicate with you and others as part of the business.

*To send you important information about changes to our terms of service, changes to our electronic services and other administrative information.

*To provide quality, training and security improvement (for example, in relation to recorded or monitored telephone calls to our contact numbers)

*Resolve complaints and process data access or correction requests.

*Manage our infrastructure and business operations and comply with internal policies and procedures, including those relating to auditing, finance and accounting; billing and collections; IT systems; data and website hosting; business continuity and records, document and print management.

Your Personal Data that we process:

Identity Information: Your name, surname, Turkish ID number and other information provided by the Company with your explicit consent.

Contact Information: Your residence address, workplace address, telephone number and e-mail address and, if any, your mobile phone number, fax number or other communication channels that you have provided with your consent so that we can contact you.

To whom and for what purpose the processed personal data can be transferred

Your collected personal data may be transferred to our member workplaces, banks, financial institutions, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK for the purposes of ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company; carrying out the necessary work by our business units to benefit you from the products and services offered by our Company; customizing the services offered by our Company according to your needs and recommending them to you, determining and implementing the commercial and business strategies of our Company and ensuring the execution of our Company’s human resources policies. Our Company does not transfer data abroad.

Method and Legal Reason for Collecting Personal Data

Your personal data is collected by our Company through different channels and based on different legal reasons in order to carry out our commercial activities.

Your personal data is collected through the aforementioned communication channels in the event that personal data is sent to info@alyatekstil.com, the official e-mail address of the COMPANY, or to any e-mail address of the Company using the extension “@alyatekstil.com” through the contact form filled out over the internet, our whatsapp line.

Personal data are also collected by physically sending documents or physically filling out a document provided by the Company.

Your personal data is also collected automatically through cookies used in https://alyatekstil.com/tr/ address and its extensions. These cookies are only necessary cookies for the visitor to use the site with full efficiency and are used to remember the visitor’s preferences and do not provide any other personal data.

The Company does not engage in any personal data processing activities that do not fall within the scope of personal data processing conditions.

The personal data processing conditions in the KVKK are as follows;

        Explicit consent of the person concerned,

        Explicitly stipulated in the law,

        It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,

        It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract,

        It is mandatory for the data controller to fulfill its legal obligation,

        It has been made public by the data subject himself/herself,

        Data processing is mandatory for the establishment, exercise or protection of a right,

  Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Our company basically does not aim to process special categories of personal data. However, your personal data of special nature that we need to process due to our activities are also processed in a measured manner within the legislation.

The conditions listed in the KVKK for the processing of special categories of personal data are as follows;

        Explicit consent of the person concerned,

        Explicitly stipulated in the law,

  It is necessary for the protection of the life or bodily integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not recognized as legally valid, himself/herself or someone else,

        It is related to the personal data made public by the data subject and is in accordance with the will of the data subject to make it public,

        Necessity for the establishment, exercise or protection of a right,

        It is necessary for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning, management and financing of health services by persons under the obligation to keep secrets or authorized institutions and organizations,

    It is mandatory for the fulfillment of legal obligations in the areas of employment, occupational health and safety, social security, social services and social assistance,

    Foundations, associations and other non-profit organizations or formations established for political, philosophical, religious or trade union purposes, provided that they comply with the legislation to which they are subject and their purposes, are limited to their fields of activity and are not disclosed to third parties; for current or former members and members or persons who are in regular contact with these organizations and formations

There may be one or more personal data processing conditions that make a personal data processing activity lawful at the same time.

In order to realize our aforementioned purposes, it is necessary to process your data mentioned above. While transferring identity information to our company, data that are not actually within our processing purposes may also be transferred to us. Within the scope of administrative and technical measures, we delete and/or anonymize such data at the end of the periods stipulated in the legislation, but it is not possible to ensure this situation under all circumstances. In this case, it is necessary to apply for your explicit consent for the purpose of processing such data. 

Rights of the Data Subject listed in Article 11 of the LPPD

As personal data owners, if you submit your requests regarding your rights to our Company by the methods set out below in this Clarification Text, our Company will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, personal data owners;

Learn whether personal data is being processed,

Request information if their personal data has been processed,

To learn the purpose of processing personal data and whether they are used for their intended purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

How Can You Exercise Your Rights?

You can fill out the “application form” that you can download by using the link https://alyatekstil.com/tr/ilgili-kisi-basvuru-formu/ in line with your request / complaint and send the form to us via info@alyatekstil.com or you can physically fill out the form and send it to Dudullu Organized Industrial Zone, DES Industrial Site, 101. Sokak B4 Blok No: 2, 34776 Ümraniye-İstanbul via cargo / mail.

If you submit your request to us by using one of the methods shown above, your request will be evaluated within 30 days at the latest and you will be informed about the issue in accordance with Article 13/2 of the KVKK. If your request is accepted, the necessary actions will be taken immediately by the data controller COMPANY. 

As a rule, requests are met free of charge; however, if fulfilling the requirements of the request requires costs, the fee stipulated in Article 7 of the “Communiqué on the Procedures and Principles of Application to the Data Controller. If the application of the data subject is to be answered in writing, no fee is charged up to 10 pages. 1 TL transaction fee may be charged for each page over 10 pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by the data controller cannot exceed the cost of the recording medium.” In accordance with the provision, a fee may be requested by the COMPANY.

DEFINITIONS

Explicit Consent: Consent regarding a specific subject, based on information and expressed with free will.

Company: Refers to the Alya Tekstil company located at Dudullu Organized Industrial Zone, DES Industrial Site, 101. Sokak B4 Blok No: 2, 34776 Ümraniye-İstanbul.

Cookie: Small files that are saved on users’ computers or mobile devices and help to store preferences and other information on the web pages they visit.

Related User: Persons who process personal data within the organization of the data controller or in accordance with the authorization and instruction received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data.

Destruction: Deletion, destruction or anonymization of personal data.

Contact Person: The real person notified by the data controller during registration to the Registry for communication with the Authority regarding the obligations of legal entities resident in Turkey and non-resident legal entity data controller representative within the scope of the Law and secondary regulations to be issued based on this Law. (The contact person is not authorized to represent the Data Controller. As it can be understood from its name, it is only the person assigned to ensure “contact” between the data controller and the relevant persons and the Authority).

Law/KVKK: Law on the Protection of Personal Data dated March 24, 2016 and numbered 6698 published in the Official Gazette dated April 7, 2016 and numbered 29677.

Recording Medium: Any medium in which personal data processed by fully or partially automated or non-automated means, provided that it is part of any data recording system.

Personal Data: Any information relating to an identified or identifiable natural person.

Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.

Anonymization of Personal Data: Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data.

Deletion of Personal Data: Deletion of personal data; making personal data inaccessible and non-reusable in any way for the Relevant Users.

Destruction of Personal Data: The process of making personal data inaccessible, unrecoverable and unusable by anyone in any way.

Board: Personal Data Protection Board.

Sensitive Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.

Periodic Destruction: The process of deletion, destruction or anonymization to be carried out ex officio at recurring intervals specified in the personal data storage and destruction policy in the event that all of the conditions required for the processing of personal data disappear.

Policy: The personal data protection policy created by the Company.

Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller.

Data Recording System: The recording system where personal data is structured and processed according to certain criteria.

Data Owner/Related Person: The real person whose personal data is processed.

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Source: Law No. 6698 on the Protection of Personal Data – Regulation on Deletion, Destruction or Anonymization of Personal Data – Regulation on the Registry of Data Controllers – Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Disclosure Obligation – Communiqué on the Principles and Procedures of Application to the Data Controller Communiqué on the Principles and Procedures of Application to the Data Controller