Seven İşleme İmalat Mak. San. Tic. A.Ş. Personal Data Processing Clarification
Here at Seven İşleme İmalat Mak. San. Tic. A.Ş. ("Company") we care for the security of your personal data with extreme sensitivity. With that mindset, we as the Company attach great importance to the proper processing and keeping of any and all kinds of personal data belonging to all persons associated with the Company, including those who benefit from our products and services, in line with the Personal Data Protection Law No. 6698 ("PDPL"), and to the transfer of such data in accordance with the law. With a full understanding of such responsibility and acting as Data Supervisor, we process your personal data in the manner explained here below and within the boundaries dictated by the legislation.
1. The Collection and Processing of Personal Data and Purposes of Processing
Your personal data may be collected on verbal, written or electronic media through such automated and non-automated methods and means as offices, web sites, social media platforms, software utilized in corporate operations, camera recordings and the like, as may be subject to variation in accordance with the service, product or trade activity offered by our Company. Your personal data may be processed by being built up and updated for the duration of your disposal of the products and services of our Company.
Moreover, your personal data may also be processed in cases where you access our web site for the purposes of employing the services of the Company or when you visit our Company or our web site.
Your personal data thus collected shall be processed within the framework of the conditions for and purposes of personal data processing as set forth under Articles 5 and 6 of the PDPL, with the intents of enabling our business departments' carrying out the necessary work for your enjoyment of the products and services provided by our Company, the customization and offering of such products and services provided by our Company in accordance with your needs and demands, ensuring the legal and commercial security of our Company and of persons engaged in business relationships with our Company (including communication-related administrative operations carried out by our Company, the physical security or supervision of Company owned locations, evaluation procedures for business partners/clients/suppliers (officers or personnel), legal settlement process, financial affairs etc.), determining the legal and commercial strategies of our Company and executing the human resources policies of our Company.
Within this scope, the following personal data listed in a categorical manner here below are collected:
Identity: This is the dataset including information on the person's identity.
Name, Surname, TR ID No, Tax Id No
Communication: This is the dataset which can be used to reach the relevant person.
Telephone number, E-mail address, Vendor Information (Name, Title, Tax Id No, E-Mail address etc.), Work address, Delivery address
Legal Process: This is the dataset including such data as Information from correspondences with legal authorities and Information from the case file.
Information of Fringe Benefits and Interests, Information on Legal Process and Settlement, Information on Demand/Grievance Management,
Client Transactions: This dataset encompasses such types of data as Call center records, Invoice, deed, cheque information, Information from teller receipts, Order information, Demand information etc.
Name, Title, Tax ID No, E-mail address etc., Summary of work carried out,
Security of Physical Environment: This dataset comprises of Personnel and visitor entry and exit information, Camera recordings and the like. Images, recordings,
Finance: This is the dataset housing the financial information on the person.
Bank Account No, IBAN, Cheque and Bond amounts,
Marketing: Information from shopping history, Surveys, cookies, campaigns.
Visual and Audio Recordings: This is the dataset containing visual and audio data belonging to the person.
Your collected personal data shall be processed within the scope of data security and the framework of the conditions for and purposes of personal data processing as set forth under Articles 5 and 6 of the Law No. 6698 for the following purposes with the intent of taking all technical and administrative measures necessary for the system and applications:
Enabling our business departments' carrying out the necessary work for the enjoyment of real and/or legal third persons, institutions and organizations (personnel, visitors, suppliers, business partners etc.) of the products and services provided by our Company,
Ensuring the safety of life and property and legal, commercial and business health security for real and/or legal third person institutions and organizations where Company business is conducted or which are located under Company affiliated headquarters and departments,
Storage of camera footage, ensuring discipline, security and supervision in cases where you are physically present in places where Company business is conducted or Company affiliated headquarters and departments,
Acting in line with the Turkish Code of Commerce No. 6102, Turkish Code of Obligations No. 6098, Consumer Protection Law No. 6502, Personal Data Protection Law No. 6698, and the Regulation on the Processing and the Protection of the Privacy of Personal Health Data.
Executing the duties of supervision and/or regulation to be performed by the competent public institutions and organizations of venue and by professional organizations having the quality of a public agency,
Fulfilling the requests for information and documents made by legal bodies and/or administrative authorities,
Being able to perform the appropriate market research, publicity and information sharing activities and to address grievances and recommendations pertaining to our products and services, and to establish direct communication through channels shared with the Company,
Conducting the entire Human Resources process and policies of the Company,
Planning, management and invoicing of all services rendered,
Training and development of all personnel,
Carrying out the necessary quality improvement activities.
2. To Whom Processed Personal Data May Be Transferred and for What Purposes
Your collected personal data may be transferred to our business partners, our suppliers, legally authorized public agencies and natural persons within the framework of the conditions for and purposes of personal data processing as set forth under Articles 5 and 6 of the PDPL, with the intents of enabling our business departments' carrying out the necessary work for your enjoyment of the products and services provided by our Company, the customization and offering of such products and services provided by our Company in accordance with your needs and demands, ensuring the legal and commercial security of our Company and of persons engaged in business relationships with our Company (including communication-related administrative operations carried out by our Company, the physical security or supervision of Company owned locations, evaluation procedures for business partners/clients/suppliers (officers or personnel), legal settlement process, financial affairs etc.), determining the legal and commercial strategies of our Company and executing the human resources policies of our Company.
2.i. DOMESTIC TRANSFER OF DATA
Our Company may transfer to third persons the personal data obtained for processing within the framework of the general principals set forth in the relevant Law, by obtaining the explicit consent of the relevant person as per Article 8 of the relevant Law. Besides this, we may also engage in data transfer activities where the transfer of personal data is allowed without the explicit consent of the relevant person being sought. Within this scope:
1-Conditions for the Domestic Transfer of Personal Data
If explicitly provided for in the law,
If it is imperative for the protection of life or bodily integrity of a person or another who is unable to express his/her consent due to physical inability or whose consent is not attributed with legal validity,
Provided that it is directly related to the establishment or performance of a covenant, if the processing of personal data belonging to the parties to such covenant is required,
If it is imperative for the data supervisor's fulfilling its legal obligations,
If made public by the relevant person,
If it is imperative for the establishment, enjoyment or protection of a right,
Provided that the fundamental rights and freedoms of the relevant person are not injured, if it is imperative for the legitimate interests of the data supervisor.
2-Conditions for the Domestic Transfer of Sensitive Personal Data
The Company may transfer personal data to third persons without seeking the explicit consent of the relevant person as long as;
The explicit consent of the relevant person is obtained,
If this is expressly provided for in the law concerning sensitive personal data except for those on the status of health and sexual life, and
As regards personal data pertaining to status of health and sexual life; within the scope of such data being processed by persons or authorized institutions and organizations under the obligation of confidentiality, for the purposes of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and management of healthcare services and financing.
Your Personal Data may be transferred, within the scope of the purposes specified here above and provided that all kinds of technical and administrative measures aimed at ensuring the appropriate level of security as per the PDPL and the relevant health legislation;
To persons/institutions and/or organizations allowed for by the other relevant provisions of law,
To private insurance companies, banks, funds, foundations, Private law real and legal persons,
To attorneys-at-Law or attorney partners for the follow up of legal procedures,
To financial consultants for the conduction of finance and accounting affairs,
To our group of companies,
To our business partners.
2.ii. INTERNATIONAL TRANSFER OF DATA
The Company can transfer personal data to foreign countries declared to have sufficient protection by the Board (Foreign Country with Sufficient Protection) or in the case where a sufficient protection is found to be lacking, to foreign countries for which data supervisors both in Turkey and in the relevant foreign countries guarantee in writing such sufficient protection and which are permitted by the Board (Foreign Countries with a Data Supervisor Guaranteeing Sufficient Protection). Accordingly, The Company acts in line with the arrangements set forth under Article 9 of the relevant Law.
1-Transfer of Personal Data Abroad
The Company can transfer personal data to Foreign Countries with Sufficient Protection or a Data Supervisor Guaranteeing Sufficient Protection in line with legitimate and lawful personal data processing purposes, with the explicit consent of the person whose personal data are being processed or in the case where no such explicit consent is obtained from the relevant person, in the presence of any of the circumstances specified here below.
If the law contains an explicit arrangement to the sense that personal data shall be transferred,
If it is imperative for the protection of the life or bodily integrity of the personal data owner and the personal data owner is unable to express his/her consent due to physical impossibility or his/her consent is not legally found valid,
Provided that it is directly related to the establishment or performance of a covenant, if the transfer of personal data belonging to the parties to such covenant is required,
If the transfer of personal data is imperative for the Company's fulfillment of its legal obligations,
If the personal data have been publicized by the owner of such personal data,
If the transfer of personal data is imperative for the establishment, enjoyment or protection of a right,
Provided that the fundamental rights and freedoms of the personal data owner are held harmless, if the transfer of personal data is imperative for the legitimate interests of the Company.
3. Method and Legal Justification of Personal Data Collection
Your personal data are obtained over any and all kinds of verbal, written or electronic media in line with the intentions set forth here above for the purposes of our Company's being able to offer its products and services within the stipulated legal framework and accordingly fulfilling its obligations stemming from the contract and the law in a complete and accurate manner. With this legal justification, your collected personal data may also be processed and transferred for purposes specified under clauses (1) and (2) herewith, within the scope of the conditions for and purposes of personal data processing as set forth under Articles 5 and 6 of the PDPL.
4. Rights of the Personal Data Owner as Specified under Article 11 of the PDPL
In the event that you submit your requests concerning your rights as personal data owners to our Company using the venues specified here below, our Company will conclude such request within thirty days at the latest depending on the nature of the request. However, in the event that a certain fee is stipulated by the Personal Data Protection Board, you will be charged for such fee set in the tariff determined by our Company.
Persons whose personal data are processed shall have the following rights:
a. To learn whether the personal data have been processed,
b. If the personal data have been processed, to request information pertaining thereto,
c. To learn the purpose of personal data processing and whether such data are being utilized for the due purposes,
d. To know the third persons to whom personal data are transferred domestically or abroad,
e. In the event that personal data are processed in an incomplete or incorrect manner, to request their adjustment and notification of the transaction performed within this scope to third persons to whom personal data are transferred,
f. Even though processed in accordance with the PDPL and other relevant provisions of the law, in the event that the reasons warranting the processing thereof are removed, to request the deletion or disposal of personal data and notification of the transaction performed within this scope to third persons to whom personal data are transferred,
g. In the event that the processed data are analyzed exclusively through automated systems and an outcome against the person is reached, to object to such outcome,
h. In the event of incurring losses due to unlawful processing of personal data, to request compensation for such losses.
As per the first paragraph of Article 13 of the PDPL, you may submit your request pertaining to your enjoyment of the rights specified here above in writing or through other means as determined by the Personal Data Protection Board. Your application needs to be submitted to our Company in writing as per the PDPL.
In order for third persons to be able to make an application request on behalf of the relevant persons whose personal data are processed, a special power of attorney issued by the relevant person through a notary public to the name of the person to make the application needs to be presented.
In order to exercise your rights specified here above, you can submit your request containing your declaration that you request to exercise one or several of the rights specified under Article 11 of PDPL along with your necessary identification information by filling in the form found at http://www.sevenmakina.com/ and handing in one signed copy thereof personally at Başkent OSB Mah. 11. Cadde No:12 Malıköy-Sincan-ANKARA with the necessary identification information, or through a notary public or other methods as specified under the PDPL, or you may send said form to info@sevenmakina.com with a safe electronic signature affixed.