Method of Collection of Personal Data and Legal Justification

Your personal data can be collected partially or completely automatically or as part of any registration system via printed media, electronic media, software. This personal data is collected for the performance of the contractual relationship and legal regulations. We do not have any other personal data collection purposes and needs. Your personal data is collected and processed for the performance of a contract, if stipulated by law; in order to ensure a legal liability, for the legitimate interest of the data controller or for other legal legal reasons.

Is Your Personal Data Shared with Third Parties?

In accordance with the Personal Data Protection Law, your personal data cannot be shared with third parties without your explicit consent.

In cases where personal data can be processed without the need for the explicit consent of the personal data owner, it can also be transferred to third parties without the explicit consent of the relevant person. In parallel with this, by taking the necessary measures, special personal data other than health and sexual life can be transferred without the explicit consent of the relevant person in the cases stipulated by the laws and limited to these cases. Personal data related to health can only be transferred by persons or authorized institutions and organizations under the obligation of confidentiality without the explicit consent of the relevant person for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.

Your personal data used by our company may be shared with our business partners, suppliers, consultants, subcontractors and other third parties with whom we cooperate (transportation, cargo, courier companies, agencies, IT companies, travel agencies, etc. companies that provide services) for the purpose of ensuring the performance of our contracts.

In addition, in cases where it is necessary for the fulfillment of our legal obligations, your personal data may be shared with law enforcement agencies, courts, public legal entities such as the Personal Data Protection Authority, Ministry of Finance, Ministry of Customs and Trade, Ministry of Labor and Social Security, Information Technologies and Communication Authority, and official authorities and authorities consisting of public legal entities such as the Personal Data Protection Authority, Ministry of Finance, Ministry of Customs and Trade, Ministry of Labor and Social Security, Information Technologies and Communication Authority. Your personal data will not be shared with third parties for any commercial purpose and/or will not be transferred to third parties for such a purpose.

Your personal data is not transferred abroad.

What are your rights as a personal data owner?

Within the framework of the KVKK and other relevant legislation, you have the following rights as a personal data owner:

To learn whether your personal data has been processed,
To request information about your personal data if it has been processed,
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
To know the third parties to whom your personal data is transferred domestically,
To request correction of your personal data if it is processed incompletely or incorrectly,
To request deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
To request that the third parties to whom your personal data is transferred be notified when you request correction of incomplete or incorrect data and deletion or destruction of your personal data,
To object to the emergence of a result against you by analyzing the processed data through exclusive automated systems,
To request compensation for this damage if you suffer damage due to the processing of personal data in violation of the law,
You can submit your request regarding the exercise of these rights to our Company in writing or in accordance with this method if a separate method is determined by the Personal Data Protection Board.

Our mailing address for your requests:

www.vincsan.com

Our Registered E-Mail (KEP) Address:

vincsanvinc@hs01.kep.tr

In your applications regarding your requests, your requests must be written in a clear and understandable manner, your requests must be about you and your identity, address information and documents proving your identity must be attached to your application. In addition, you can send us any questions, opinions and suggestions regarding the use of personal data.

Vinçsan Vinç Sanayi ve Ticaret A.Ş. will evaluate the requests in question and finalize them within 30 days.

How Long is the Storage Period of Your Personal Data?

Your personal data is processed in accordance with the KVKK and other legislative regulations, and is destroyed if the reasons for processing are eliminated or upon your request. Destruction: refers to the deletion, destruction or anonymization of personal data.

In case of a periodic explicit consent, your personal data will be deleted, destroyed or anonymized at the end of the period.

Information collected verbally, in writing or electronically through the offer forms, communication forms, business cards you fill out in printed or electronic form, contracts you have signed with our Company or electronic mails, faxes and letters you have sent to our Company or written or verbal communications made with our Company, etc., will be stored for the duration of the contractual relationship and against legal and financial issues that may arise from the contractual relationship in question, with the legal limitation / limitation periods in the legislation.

Your personal data will be deleted, destroyed or anonymized during the first periodic destruction period following the end of the storage period.

In the event of a contractual relationship, personal data is stored until the end of the legal limitation periods.

In the event of the existence of legal periods such as labor law legislation, social security legislation, work safety legislation, tax legislation, customs legislation, etc., your personal data will be deleted, destroyed or anonymized after the end of the relevant legal periods.

Camera recordings at our company’s workplaces are stored for 25 days. After the end of the storage period, your personal data will be deleted, destroyed or anonymized during the first periodic destruction period following the end of the storage period.

With the information provided in this Disclosure Text, we have informed you and provided our Disclosure Obligation within the scope of the Personal Data Protection Law.

In What Cases Can Your Personal Data Be Processed?

In accordance with Article 5 of the Law on the Protection of Personal Data, titled “Conditions for Processing Personal Data”, although the explicit consent of the data owner is required for the processing of personal data, it is possible to process personal data without the explicit consent of the person concerned in the following cases and situations :

i) It is clearly provided for in the law.
ii) It is necessary for the protection of the life or physical integrity of the person who is unable to give his consent due to a de facto impossibility or whose consent is not legally valid, or of another person.
iii) It is necessary to process personal data belonging to the parties to a contract, provided that it is directly related to the establishment or performance of a contract.
iv) It is necessary for the data controller to fulfill its legal obligation.
v) It is made public by the relevant person.
vi) Data processing is necessary for the establishment, exercise or protection of a right.
vii) Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Sensitive personal data consists of data regarding individuals’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, appearance and dress, membership of associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.

While it is prohibited to process special personal data without your explicit consent, personal data other than health and sexual life may be processed without the explicit consent of the relevant person in cases stipulated by law. Personal data related to health and sexual life may only be processed by persons or authorized institutions and organizations under a confidentiality obligation without the explicit consent of the relevant person for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing. Our company shows utmost sensitivity by taking the necessary measures during the processing of personal data.

Information on the Law on the Protection of Personal Data No. 6698

With this Information Text on the Protection and Use of Personal Data, we would like to inform and enlighten you about the principles of protection and use of your personal data within the framework of the Law on the Protection of Personal Data No. 6698 [“KVKK”].

First of all, we would like to state that our Company attaches great importance to keeping the personal data and information of the people it communicates with, such as customers, suppliers, personnel, etc. confidential and not sharing this information with third parties except in the event of fulfillment of our legal and contractual obligations or with explicit consent.

All your personal data that you share with our Company may only be processed, stored, transferred, updated, transferred to third parties in Turkey and abroad and processed in other ways listed in the KVKK in accordance with the KVKK regulations and the principles of this Information Text, in connection with our activities and within the framework of fulfillment of our obligations to you.

Your personal data, including but not limited to; printed or electronically filled offer forms, contracts, communication forms, business cards, contact information and other information, data sent to our Company by phone, contracts you have signed with our Company or electronic mails, faxes and letters you have sent to our Company or written or verbal communications made with our Company, etc. can be collected verbally, in writing or electronically. These data are not categorized and subject to systematic archiving, and can only be stored for contact purposes. Our purpose of contact is also related to the execution of contracts between you and us, compliance with our legal obligations and the existence of your explicit consent.

What are the Purposes of Processing Your Personal Data?

First of all, we would like to state that all personal data you share with our Company will be processed in accordance with the law and the rules of honesty, in connection with the purposes of processing, in a limited and measured manner, accurately and up-to-date, and for certain clear and legitimate purposes.

Within the framework of this basic principle and based on your explicit consent, your personal data may be processed for the purposes of improving our communication with you, sending offers, establishing our contracts or being necessary for the execution of the contract, recording other necessary information such as address for communication, organizing the records and documents of the transactions you have carried out, providing information about our commercial activities, using them in various marketing activities, informing about our services, monitoring financial activities, ensuring company and individual security, monitoring the performance of employees, creating a personnel file, fulfilling our obligations regarding occupational health and safety rules, reporting illnesses, developing human resources strategy, improving communication with customers and suppliers, increasing their satisfaction, performing statistical analysis, fulfilling our legal obligations, fulfilling our other obligations stipulated by the legislation, and ensuring workplace safety

Disclosure Text (Information Text)
Data Controller Information:

During the activities carried out by our Company, our Company is considered as the “Data Controller” within the framework of the legislation regarding the personal data we receive from you, our customers.

Our title and contact information as the Data Controller are as follows:

Title: Vincsan Vinc Sanayi ve Ticaret A.S. [“Vinçsan”]

Address: Velibaba Mah. Naim Süleymanoğlu Cad. No: 10. Pendik / İstanbul

Electronic Mail: vincsan@vincsan.com

KEP:vincsanvinc@hs01.kep.tr

Chamber of Commerce Information: Istanbul Trade Registry Directorate

MERSIS No: 0925001671200014