PERSONAL DATA PROTECTION
Informative Text on the Protection and Processing of Personal Data
Identity of the Data Controller
Erke Bilgi ve Yönetim Uygulamaları Anonim Şirketi (hereinafter referred to as “ERKE”) has the title of “Data Controller” for the personal data included in this disclosure text in accordance with subparagraph (ı) of paragraph 1 of Article 3 of the Protection of Personal Data Law No. 6698 (LPDD Law).
This Clarification Text has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”) in order to process personal data transparently in the processes of meeting the requests of visitors who want to get information about ERKE’s products and services through ERKE’s website or who want to participate in the trainings and services offered by ERKE.
Dear Visitors; In this Clarification Text; information is provided regarding the third parties with whom your personal data is shared, your rights and the methods by which you can contact ERKE, especially which of your personal data are processed and for what purposes these data are processed.
ERKE, in its capacity as the data controller, takes all necessary measures to prevent the unlawful use of data, to ensure its protection and to ensure the appropriate level of security in accordance with the legislation during the processing and transfer of personal data. Your personal data are processed primarily in accordance with the provisions of the Law on the Protection of Personal Data, the Law on Consumer Protection, the Turkish Code of Obligations, the Turkish Commercial Code and other relevant legislation.
Although your personal data may vary depending on the service, product or commercial activity provided by ERKE, it is processed in accordance with the principles written below in accordance with Article 4 of LPPD:
- a) In accordance with the law and good faith
- b) Accurate and, where necessary, up-to-date
- c) For specific, explicit and legitimate purposes
- d) Relevant, limited and proportionate to the purpose for which they are processed
- e) To be kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed
Which Personal Data Do We Process?
General information regarding the personal data processed by ERKE is as follows:
– Identity: Name, Surname
– Contact: Phone Number, Email, Address
– Personnel: Company Information, Position Information
– Customer Transaction: Request Information, General and Special Categories of Personal Data Subject to Your Request
– Audio and Visual Recordings: Photographs, Video Recorded Images
If you contact ERKE through the communication channels on our website, your name, surname, e-mail, telephone number, personal information, general or special quality personal data subject to your request are collected and processed. However, in order to meet your requests and to provide you with our services, your personal data that are available directly from you or in our systems and previously collected by ERKE may be processed through written or verbal communication channels.
Purpose and Legal Reason for Processing Your Personal Data
Your personal data written above are processed within the framework of the following purposes and legal reasons in accordance with the LPDD Law and secondary regulations:
▪ Improvement of Services and Customer Satisfaction: Your personal data may be processed for the establishment or performance of a contract specified in Article 5/2(c) of the LPDD Law and based on the legal reason of legitimate interest regulated in Article 5/2(f) of the LPDD Law, taking actions to increase customer satisfaction and service quality by evaluating your complaints and suggestions, answering your questions about ERKE’s certification programs and other programs it provides services, improving services, retrospective service quality monitoring, data backup and storage purposes.
Contract Processes: Your personal data may be processed for the purposes of making applications for participation in ERKE’s certification and other programs and carrying out the relevant processes, receiving workshop applications and carrying out organization processes, carrying out communication activities, presenting offers on products and services, establishing or executing contracts to which ERKE is a party, and providing information within the scope of ERKE products and services, based on the legal reason for the establishment or performance of a contract specified in Article 5/2(c) of the LPDD Law.
Legal Obligations: Your personal data may be processed for the purposes of fulfilling the legal obligations to which ERKE is subject, ensuring information security, ensuring the security of the commercial relationship between the parties, taking into account the provisions of the Law on the Protection of Personal Data, the Law on Consumer Protection, the Turkish Code of Obligations, the Turkish Commercial Code and other relevant legislation, based on the legal reason “It is clearly stipulated in the laws” specified in Article 5/2 (a) of the LPDD Law and “It is mandatory for the data controller to fulfill its legal obligation” specified in Article 5/2 (c) of the LPDD Law.
Dispute Resolution: Your personal data may be processed and shared with the relevant legal authorities in order to prove that the transactions are carried out in accordance with the law and that legal obligations are fulfilled and to ensure the resolution of disputes based on the legal reason for the establishment, use or protection of a right specified in Article 5/2(e) of the LPDD Law.
Processing of General and Special Categories of Personal Data Subject to Request: We kindly ask you to share your personal data in the explanation fields on ERKE’s website, primarily in line with your request. If the subject of your request requires the processing of your personal data of special nature, you consent to the processing of your personal data of special nature by submitting this data to ERKE. Within the scope of Article 6 of the LPDD Law, the processing of special categories of personal data without applying the exception provisions is only possible with explicit consent.
Processing of Audio and Visual Records: Photographs and video recordings may be made during events, meetings, ceremonies, etc. that are shared by ERKE and the company you work with via e-mail and/or social media accounts, or events, meetings, ceremonies, etc. organized by our Company and attended by you on behalf of your company. Visual and audio recordings; will be processed automatically and non-automatically for the purposes of promoting your company with all team members within the scope of the certification program and event you have participated in, informing the public about the awards you have received, announcing the achievements of your company you are working for, informing about your working environment, and if you give your consent, depending on the legal reason for explicit consent, and for the same purposes and legal reason, it can be shared publicly through ERKE’s website and social media accounts, indirectly transferred abroad or shared with other participants within the presentation of the organization you have attended.
Marketing/Advertising: ERKE may use your personal data for the execution of advertising and marketing activities of our products and services, based on the explicit consent legal ground specified in Article 5/1 of the LPDD Law, if you give your explicit consent. In this context, your personal data may be processed for the purposes of creating potential customer records, informing you about campaigns and opportunities, conducting profiling, targeting and advertising activities, presenting you with the most suitable offers for your past preferences and tastes, and communicating within the scope of offering products and services. Your personal data will not be processed for such purposes in cases where you do not consent to marketing activities or withdraw your consent.
Sending Commercial Electronic Messages: ERKE may process your personal data for purposes such as sending commercial electronic messages (SMS, E-mail, Phone Call, etc.) for the purposes of promotion, communication, advertising, marketing, sales, surveys, campaigns related to the products and services within the scope of ERKE’s commercial activities; birthday, national and religious holiday, new year, etc. special day celebration content, such as sending commercial electronic messages (SMS, E-mail, Phone Call, etc.) based on the explicit consent legal reason specified in Article 5/1 of the LPDD Law with the commercial electronic message consent obtained through physical or digital channels. Your personal data are stored for as long as the commercial communication permission is valid and for reasonable periods stipulated in the legislation after the permission is withdrawn.
Methods of Collection of Personal Data
ERKE collects and processes your personal data primarily through the contact and application forms on the website within the scope of the services it offers to you in accordance with the LPDD Law and the provisions of the relevant legislation and the data processing purposes and legal reasons stated in this clarification text.
However, your personal data collected through the following channels may also be processed in order to meet your requests and to provide our services to you:
▪ Personal data collected by e-mail, verbal communication, written or electronic media, automatic or non-automatic methods.
Electronic storage areas, software and programs, accounting programs where your personal data are recorded and stored.
Documents required for the performance of the service and printed documents, identity documents.
Personal data collected through social media, customer interviews, SMS channels, verbal, written and electronic media through the company you work for.
Transfer of Personal Data
Your personal data will not be given, disclosed, sold or otherwise shared with third parties except in the cases described herein or otherwise specified at the time the personal data is collected.
Your personal data collected may be shared with the relevant public institutions and organizations upon request within the scope of fulfilling the legal obligations arising from the legislation we are subject to. We may disclose your personal data to selected third parties, such as law enforcement authorities, regulatory authorities and our professional advisors, in order to comply with any legal obligation or where it is in our legitimate interests to do so, or to enforce or apply our website Terms of Use and other relevant agreements with you or your company.
Within the scope of fulfilling legal obligations and sending commercial electronic messages to you and conducting our advertising and marketing activities, the permissions received from you, telephone number or e-mail address, permission date, communication channel, recipient type and permission source information must be recorded in the Message Management System. For this reason, we may transfer your personal data to our service suppliers and business partners in order to carry out registration procedures. For detailed information about IYS, you can visit https://iys.org.tr.
However, based on the explicit consent legal reason regulated in Article 8/1 of the LPDD Law, we may share your personal data with our service providers for various purposes listed below. If the servers of our service providers are located abroad, data transfer may also take place abroad.
– To provide website management services or to help us troubleshoot problems,
– For the execution of marketing, profiling and advertising activities,
– To utilize corporate e-mail services, to carry out communication activities, to provide electronic or physical storage services or systems.
ERKE, which has global business partners and stakeholders, may transfer your personal data to its business partners and stakeholders abroad for the purposes of ensuring business continuity, providing necessary information, and receiving support within the scope of the performance of the services provided.
We will only share your information under these conditions if it is necessary for our service providers to fulfill a specific service for us. These service providers are not authorized to store or use your personal data for any other purpose and will be under an obligation to keep your personal data secure and confidential at all times.
Storage of Your Personal Data
Your personal data is stored based on one of the data processing conditions specified in Article 5 of the LPDD Law and in accordance with the general principles specified in Article 4 of the LPDD Law, in particular for the period stipulated in the relevant legislation or required for the purpose, taking into account the periods specified in the Retention and Destruction Policy regulated in accordance with Article 7 of the LPDD Law and destroyed within the destruction period.
Your Rights as Data Subject
Data Subject Everyone,
- To learn whether his/her personal data is being processed,
- Request information if personal data has been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing,
- To request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data disappear and there is no further legal obligation to store the data,
- To request notification of the transactions made pursuant to Articles 5 and 6 to third parties to whom personal data are transferred,
- To object to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
- In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.
Application to the Data Controller
To exercise your written rights;
– By sending an e-mail to our e-mail address,
– You may send your written application to our Company in writing by registered mail to the address of our Company headquarters or through a notary public.
Your duly made applications will be responded within 30 days at the latest within the scope of Article 13 of the LPDD. You may submit your requests within the scope of Article 11 of the Law “regulating the rights of the data subject” to our Company in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” at Göztepe Mah. Rüzgarlı Çıkmazı No:8 Beykoz/İstanbul 34815 in writing or to [email protected] via your e-mail address registered in our Company.