KVKK

INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

EPRON INDUSTRIAL PANEL SYSTEM INC.

A) PURPOSE OF THE PROTECTION AND PROCESSING OF PERSONAL DATA POLICY

As EPRON ENDÜSTRİYEL PANEL SİSTEMLERİ A.Ş. (“Company”), we would like to provide you with this “Information” letter, which we have prepared in our capacity as the Data Controller in accordance with the Law No. 6698 on the Protection of Personal Data (“LPPD”), within the framework of Article 10 titled “Information Obligation of the Data Controller” and Article 11 titled “Rights of the Relevant Person” of the LPPD; the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data may be transferred, the method and legal reason for collecting your personal data, and your other rights listed in Article 11 of the LPPD:

As the Data Controller, we process, record, transfer, share and store your personal data as explained below and within the limits stipulated by official legislation.

Our Company reserves the right to update this “Information Text on the Protection of Personal Data” at any time within the framework of changes that may be made to the current official legislation.

B)  COLLECTION, PROCESSING AND PURPOSES OF PROCESSING PERSONAL DATA:

Our company, which operates in the fields specified in detail in the Company’s Articles of Association, collects and processes your verbal, written or electronic personal data due to the activities in question/contracts we have concluded. This personal data will be used to provide services related to our company’s fields of activity and to increase the quality of these services, to carry out our company’s sales, marketing and other activities, to comply with information storage, reporting and information obligations. In addition, your personal data may be used within the scope of the work to be carried out for sales and marketing activities and to increase the quality of the service we provide to you.

Your personal data will not be used for purposes other than those specified above without your explicit consent, and will not be shared or transferred to third parties except for legal obligations and official institutions/organizations. 

Our company will only process your personal data based on the explicit consent of customers or in accordance with the legislation we are subject to, primarily KVKK Art. In other cases stipulated in 5/f.2, in order to provide value-added services, opportunities and facilities to you, our customers, and to increase the quality of service, it may be shared with our domestic or foreign affiliates and direct or indirect affiliated companies and joint ventures or with public institutions or organizations authorized to request this data due to a legal obligation and, provided that sufficient measures are taken, with domestic or foreign institutions, suppliers, authorized dealers/dealers/business partners with whom we have agreements due to our activities.

Your personal data may vary depending on the services, products or commercial activities provided by our Company; It may be collected verbally, in writing or electronically through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar tools. As long as you benefit from our Company’s products and services, your personal data may be processed by creating and updating them.

In addition, with the intention of using our Company’s services;
a. When you use our call center or website,
b. When you visit our company, website or social media channels/media
c. When you participate in training, seminars or organizations organized by our company, your personal data may be processed.

Your personal data obtained from you with your consent or due to other legal compliance reasons stated in the laws of the Republic of Turkey;

(i)Our business units can carry out the necessary work to make you benefit from the products and services offered by our company;

(ii)The products and services offered by our company are customized according to your tastes, usage habits and needs and recommended to you;

(iii)Ensuring the legal and commercial security of our company and the people who have a business relationship with our company (administrative operations for communication carried out by our company, ensuring the physical security and control of the company’s locations, business partner/customer/supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.);

(iv) To improve the quality of the services provided by our Company and to develop our quality policy,

(v)To inform you about and benefit from the general and special campaigns, promotions, introductions, discounts and similar advantages offered by our Company;

(vi)To be able to process the data obtained together with your personal data, preferences, transactions and browsing time in the relevant channels when you log in with your user name and password in order to receive services from the channels offered by our Company in order to provide you with the information and services you have requested;

(vii)To be able to make notifications (renewal, termination etc.) regarding all kinds of loyalty cards issued and/or to be issued by our Company and its affiliated companies/organizations and website memberships of our Company and its affiliated companies/organizations, to inform you about all kinds of communication that can be established with you, new services and products to be offered, and changes, innovations and similar issues that may occur in personal data policies and membership conditions;

(viii)To inform you about the information, events and services you will request from our Company;

(ix)Determining and implementing our Company’s commercial and business strategies; (x) Ensuring the implementation of our Company’s human resources policies; and;

(xi)If it is clearly stated in the legislation or if necessary, in order to fulfill a legal obligation determined by the legislation, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law, our Company and its related companies/organizations.

C) METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA:

Your personal data is obtained for the purpose of continuing our activities and ensuring compliance with the legislation and also Company policies, so that our products and services can be offered within the determined legal framework as a Company and in this context, our Company can fully and accurately fulfill its responsibilities arising from the contract and the law.

Your personal data collected for the legal reasons explained are processed, recorded, transferred, shared and stored within the scope of the personal data processing conditions and purposes specified in Articles 5 titled “Conditions for Processing Personal Data” and 6 titled “Conditions for Processing Special Personal Data” of the Personal Data Protection Law, for the purposes detailed in Article (B) of this information text.

D) PROCESSING OF SPECIAL DATA:

According to the Personal Data Protection Law, data regarding the race, ethnicity, political opinion, philosophical belief, religion, sect or other belief, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures of individuals, as well as biometric and genetic data are special personal data. Our company also takes the measures determined by the Personal Data Protection Board at an adequate level in the processing of special personal data. In order to provide better service, our company will process special data of individuals only with the consent of the relevant person and only to serve the purpose of collection.

E) TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA PROCESSED MAY BE TRANSFERRED:

Your collected personal data may be transferred to our company EPRON ENDUSTRIAL PANEL SİSTEMLERİ A.Ş. as well as our shareholders, business partners, suppliers, legally authorized public institutions and private persons, in order to serve the purposes specified in Article (B), within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.

F) TRANSFER OF PERSONAL DATA ABROAD

Our company is authorized to transfer personal data abroad within the conditions determined by the Personal Data Protection Board in the Personal Data Protection Law, in accordance with other conditions in the law and after obtaining the explicit consent of the person for this purpose.

G) RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF THE PDPL: 

Within the scope of the PDPL, we accept that the relevant person has the right to be informed and to obtain approval before the processing, recording, transfer, sharing and storage of his/her personal data, and that he/she has the right to determine the fate of his/her data after the processing, recording, transfer, sharing and storage of the data.

In this context, if you submit your requests regarding your rights as personal data owners to our Company through the methods set out below in this “Information Text on the Processing of Personal Data”, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request.

According to the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Board,

1. If your application will be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages.
2. If the response to the application is given on a recording medium such as a CD or flash drive, the fee that may be requested by our Company as the data controller cannot exceed the cost of the recording medium.
   In this context, personal data owners have the right to;
3. Learning whether personal data is being processed,
4. Kişisel verileri işlenmişse buna ilişkin bilgi talep etme,
5. To request information regarding the processing of personal data,
6. To know the third parties to whom personal data is transferred, either domestically or abroad,
7. To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
8. To request the deletion, destruction or anonymization of personal data within the framework of the conditions stipulated in Article 7 of the Personal Data Protection Law and to request that the action taken within this scope be notified to third parties to whom personal data has been transferred,
9. To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
10. In case of damages due to unlawful processing of personal data, the Company has the right to demand compensation for the damages. However, individuals do not have any rights regarding anonymized data within the Company. Our Company may share personal data with relevant institutions and organizations in accordance with the business and contractual relationship, for the purpose of a judicial duty or state authority to exercise its legal powers.

D) PERIOD FOR WHICH YOUR PERSONAL DATA WILL BE PROCESSED: 

The Company stores personal data only for the period specified in the relevant legislation or necessary for the purpose for which they are processed. In this context, the Company first determines whether a period is foreseen in the relevant legislation for the storage of personal data, if a period is specified, it acts in accordance with this period, if no period is specified, it acts in accordance with this period, if no period is specified, it stores personal data for the period necessary for the purpose for which they are processed. In accordance with the PDP Law, your personal data processed for the purposes specified in this “Information Text on the Processing and Protection of Personal Data” will be deleted, destroyed or anonymized and continued to be used by us when the purpose requiring processing according to Article 7/f.1 of the PDP Law is eliminated and/or when the limitation periods required by us to process your data in accordance with the legislation expire. Personal data is not stored by the Company with the possibility of future use.

I) CASES WHERE OUR COMPANY MAY PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPRESS CONSENT AS REQUIRED BY LAW:

According to Article 5 of the PDP Law, in the following cases, our Company may process your personal data, which is specified above and received in accordance with the law, without your explicit consent:

1. Cases where it is clearly foreseen in the laws;
   If you are unable to give your consent as a data owner due to a de facto impossibility or if your consent is not legally valid and the processing of your personal data is mandatory to protect your life or the physical integrity of someone else,
2. If it is directly related to the establishment or performance of a contract you have concluded with our company and its affiliated companies/organizations, other real and/or legal persons specified in Article (C), it is necessary to process personal data of the parties to the contract,
3. It is mandatory for our company to fulfill a legal obligation,
4. Your personal data has been made public by you,
5. Data processing is necessary for the establishment, exercise or protection of a right,
6.  Provided that it does not harm your fundamental rights and freedoms,
7. Data processing is mandatory for the legitimate interests of our company.

According to Article 13, paragraph 1 of the Personal Data Protection Law, you can submit your request to our Company regarding the use of your rights specified above through the method(s) determined/to be determined by the Personal Data Protection Board.

According to the Personal Data Protection Law, you can submit your application regarding your rights as personal data owners by filling out the form on our website www.epron.com.tr and submit your detailed information and requests to our Company in writing.

You can always contact us by sending an e-mail to info@epron.com.tr to exercise these rights stipulated in Article 11 of Law No. 6698.

In matters related to your personal data, only the e-mail address info@epron.com.tr must be used, and requests and notifications received from channels other than this address will not be evaluated.

Rights regarding personal data can only be exercised regarding the data belonging to individuals. Requests regarding the data of persons other than the person who filled out the form and attached official documents identifying your identity will not be taken into consideration.

In matters related to your personal data, only the e-mail address info@epron.com.tr must be used, and requests and notifications received from channels other than this address will not be evaluated.

EPRON ENDÜSTRİYEL PANEL SİSTEMLERİ A.Ş