Personal Data Protection Notice
Information on the processing and transfer of personal data and the rights of data subjects.
Under the Law, personal data means any information relating to an identified or identifiable natural person. Special categories of personal data, which constitute a specific type of personal data, include data relating to race, ethnic origin, political opinion, philosophical belief, religion, religious denomination or other beliefs, appearance and clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.
Processing of personal data means any operation performed on personal data, such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means provided that the operation forms part of a data recording system.
Data Controller and Collection of Personal Data
Your personal data may be processed by Kon-Tek Kontrol Teknolojileri ve Otomasyon San. Tic. A.Ş. (the Data Controller), acting as the data controller, within the scope described below pursuant to Turkish Personal Data Protection Law No. 6698 (the Law).
Depending on the services provided and the commercial activities of the Data Controller, your personal data may be collected by automated or non-automated means, verbally, in writing or electronically, in compliance with the Law.
Your collected personal data may be processed by the Data Controller for the purposes specified below, in accordance with the fundamental principles set out in the Law and on the basis of the personal-data processing conditions and legal grounds provided in Articles 5 and 6 of the Law. The tables below explain the categories of personal data concerned, how the data is collected and the purposes and legal grounds for processing.
Identity Data
| Data | Collection Method | Purpose of Processing | Legal Ground |
|---|---|---|---|
| First name and surname | Information technology data recording system Forms and documents | Conducting communication activities Managing customer relations processes Following up requests and complaints | Legitimate interests of the Data Controller |
Contact Data
| Data | Collection Method | Purpose of Processing | Legal Ground |
|---|---|---|---|
| Address number Email address Contact address Telephone number and similar details | Information technology data recording system Forms and documents | Conducting communication activities Managing customer relations processes Following up requests and complaints | Legitimate interests of the Data Controller |
Transaction Security Data
| Data | Collection Method | Purpose of Processing | Legal Ground |
|---|---|---|---|
| IP address information Website login and logout information | Information technology data recording system Forms and documents | Conducting communication activities Managing customer relations processes Following up requests and complaints Conducting information-security processes Conducting activities in compliance with legislation | Legitimate interests of the Data Controller Expressly provided for by law |
Marketing Data
| Data | Collection Method | Purpose of Processing | Legal Ground |
|---|---|---|---|
| Cookie records | Information technology data recording system Forms and documents | Conducting information-security processes Conducting activities in compliance with legislation | Expressly provided for by law Legitimate interests of the Data Controller |
Transfer of Personal Data
In accordance with the fundamental principles set out in the Law and the conditions governing the transfer of personal data under Articles 8 and 9, your personal data may be transferred by the Data Controller to the domestic and overseas recipient groups listed below, solely for the purposes stated above.
| Recipients | Purpose | Data Categories | Domestic | Overseas | Legal Ground |
|---|---|---|---|---|---|
| Authorized public institutions and organizations | Compliance with legal obligations | Identity Contact Transaction security Marketing | Within the scope of applicable legislation | None | Applicable legislation |
Rights of Data Subjects
Pursuant to Article 11 of the Law, data subjects have the right to:
- Learn whether their personal data is being processed.
- Request information if their personal data has been processed.
- Learn the purpose of processing their personal data and whether it is being used in accordance with that purpose.
- Know the third parties in Türkiye or abroad to whom their personal data has been transferred.
- Request correction of personal data that has been processed incompletely or inaccurately, and request that the correction be communicated to third parties to whom the personal data has been transferred.
- Request deletion or destruction of personal data where the reasons requiring its processing no longer exist, even though the data has been processed in accordance with the Law and other applicable legislation, and request that the action taken be communicated to third parties to whom the personal data has been transferred.
- Object to a result arising against them through the analysis of processed data exclusively by automated systems.
- Claim compensation for damage suffered as a result of the unlawful processing of personal data.
Applications Concerning Your Rights
If you submit a request concerning your rights using one of the methods set out below, the request will be concluded free of charge as soon as possible and, in any event, within thirty days, depending on its nature.
To exercise your rights, complete and sign the data-subject application and request form available at https://kontekenerji.com.tr/ or obtainable in person from the Data Controller's address. You may submit that form, or an original signed petition prepared to exercise your rights, by one of the following methods:
- Deliver it in person, together with documents verifying your identity, to the administrative office at Kemalpaşa Caddesi, 7405 Sokak No: 8, Pınarbaşı, İzmir, Türkiye, which is the address of the Data Controller.
- Send it to the address above through a notary public or by registered mail with return receipt requested.
Thank you for reading this Personal Data Protection Notice.
Kon-Tek Kontrol Teknolojileri ve Otomasyon San. Tic. A.Ş.