Sema Plastik Kalıp ve Makine San. and Tic. Ltd. Ltd. We continue to carry out our work regarding the Protection of Personal Data, which we have attached great importance to since the day we were founded, with an approach parallel to the “Personal Data Protection Law 6698 (KVKK)”. In this context, some terms expressed in the law and information about our data processing processes to fulfill our obligations are presented below.
What is KVKK?
The Personal Data Protection Law (KVKK) was accepted by the Turkish Grand National Assembly on 24.03.2016 and came into force by being published in the Official Gazette dated 07.04.2016 and numbered 29677.
The law is based on the compliance of all data processing individuals and institutions within the framework of basic purposes such as ensuring the confidentiality and protection of personal data and preventing unauthorized use. Our company, like all organizations, is obliged to comply with this Law and personal data processed in all processes of our Company are within this scope.
What is Personal Data?
All data or data sets that directly or indirectly identify a person are considered personal data.
These;
Name,
Last name,
Place/date of birth,
Phone number,
Resume,
Photograph,
Voice recording etc.
Descriptive information directly belonging to the person or created on behalf of the person can be given as examples.
Data that identifies a person, such as the Registry registration number produced for Company HR and Accounting transactions, is also considered Personal Data.
What is Data Processing?
Any operation performed on personal data is considered “data processing”. Therefore, archiving, storing, altering, reorganizing, disclosing, transferring, analyzing and classifying data falls within the scope of data processing.
Who is the Relevant Person / Data Owner?
One of the expressions frequently used in the law and our corporate policies is “relevant person” or “data owner”. It refers to real persons whose personal data is processed.
Who is the Data Controller?
Data controller is the natural or legal person who determines the purposes and methods of processing personal data and is responsible for establishing and managing the data recording system.
At this point, our company;
Our customers,
Our suppliers,
Our visitors,
Our employees,
He is the Data Controller in terms of his data.
In accordance with the Personal Data Protection Law No. 6698, we will use your personal data in accordance with the relevant legislation as the Data Controller.
Who is the Data Processor?
Data processors are natural or legal persons who process data on behalf of the data controller. These persons may also be a separate natural or legal person authorized by the data controller to process personal data.
Data Processing Terms
All data controllers have the right to process data only if the following conditions are met or the data subject gives explicit consent:
It is clearly stipulated in the laws (Labor and Employer Law, Occupational Safety Law, etc.)
Being directly related to the establishment or execution of a contract,
Ability of the data controller to fulfill its legal obligation,
It has been made public by the person concerned,
Data processing is mandatory for the establishment, exercise or protection of a right,
Legitimate interest of the data controller.
Obtaining, recording, storing, preserving, changing and rearranging your personal data that you share with our company through the Data Owner Request Form that you have filled out as a customer, visitor or employee, by fully or partially automatic or non-automatic means as part of any data recording system. Any action carried out on data such as disclosure, transfer, acquisition, making available, classification or preventing its use may be carried out by us under the following conditions.
Meeting Data Owner Requests
KVKK gives relevant persons the right to request which personal data is processed in which processes and the current status of these data. As a company, we are obliged to respond to requests from data owners within 30 days.
In accordance with Article 13 of the Personal Data Protection Law No. 6698, which regulates ‘Application to the Data Controller’, the relevant person/data owner must submit their requests regarding the implementation of the Law to the data controller in writing. Therefore, in order for your request to be evaluated, you must apply to our HR unit in writing. For your detailed applications, the Data Subject Request Form can also be used under the Information and request forms on our website.
Institutions and individuals who are data controllers or process data are obliged by the Law to inform data owners about the personal data they process.