PERSONAL DATA PROTECTION LAW DISCLOSURE STATEMENT

  1. PURPOSE AND SCOPE

As BKM BURSA KALIP MERKEZİ METAL FORM MAKİNE SAN. VE TİC. A.Ş. ( "Our Company"), protection of fundamental rights and freedoms, protection of privacy regarding private lives, ensuring and protecting information security, respect for ethical values are among our primary principles. Accordingly, the following explanations are presented for your information within the scope of fulfilling our obligation to inform arising from Article 10 of the Law on the Protection of Personal Data ("KVKK");

  1. DEFINITION
    In this clarification text;

Personal Data: Any information relating to an identified or identifiable natural person,

Personal Data Protection Law ("KVKK"): Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on April 7, 2016,

Data Processor: The natural or legal person who processes Personal Data on behalf of the data controller based on the authorization granted by the data controller,

Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

Relevant Person: Refers to the real person whose personal data is processed.

  1. DATA RESPONSIBLE

"Data Controller" in terms of your personal data; registered with the Bursa Trade Registry with the registration number 59219, 017806231500015 Mersis number, company headquarters "Işıktepe OSB Mah. Turkuaz Cad. No:65 Nilüfer Bursa / Turkey" BKM BURSA KALIP MERKEZİ METAL FORM MAKİNE SAN. VE TİC. A.Ş.

  1. PARTIES WHOSE DATA IS COLLECTED

Within the scope of the Law on the Protection of Personal Data, we collect the data of the following parties who have a business relationship with our company. These are

  • Employees and prospective employees,
  • Family members and relatives of our employees and employee candidates,
  • Our customers,
  • Our suppliers,
  • Our advisors,
  • Our business partners,
  • Shareholders,
  • Company officials,
  • Company proxies,
  • The person(s) with whom we have a contractual relationship and their employees
  • The person(s) who are the addressee(s) of legal proceedings,
  • Survey respondents,
  • Our visitors,
  1. DATA COLLECTED AND PROCESSED BY OUR COMPANY FROM THE PARTIES

Within the scope of Articles 5 and 6 of the Personal Data Protection Law, we collect and process the following data from the parties of our company. These are

  • Information on family and social life,
  • Education and training information,
  • Employment information,
  • Information on request/complaint management,
  • Information on legal affairs,
  • Knowledge of ethical values and compliance with the law,
  • Financial information,
  • Audit information,
  • Information on electronic media use,
  • Information on goods and services provided and procured,
  • Business activities information,
  • Information on trade and other licenses and permits,
  • Physical space safety information,
  • Visual and audio information (photographs, cameras, audio recordings),
  • Telecommunication records,
  • Email and information systems services usage records,
  • Entry records,
  • Health reports and health information,
  • Biometric data and
  • Criminal record information
  1. OUR COMPANY'S DATA COLLECTION PURPOSES

Within the scope of Articles 5 and 6 of the Law on the Protection of Personal Data, we collect and process data in order to realize our company purposes stated below, limited to the relevant purposes. These are;

  • Realization of our company's commercial activities,
  • Ability to fulfill business processes related to commercial activities,
  • Management and execution of relationships with business partners and/or suppliers,
  • Technical management of our company's websites,
  • Customer management and follow-up of complaints,
  • Product surveys and follow-up of the questions you send to our Company,
  • Carrying out the necessary work by our business units to ensure that you benefit from the products and services offered by our Company,
  • Planning and execution of sales, marketing and after sales processes of products and/or services,
  • Providing information about the content of products and services,
  • Sending commercial electronic messages by obtaining separate approval in accordance with the legal legislation,
  • Conducting competitions, events and other organizations,
  • Conducting legal and commercial relations with our Company and the persons who are in business relations with our Company and ensuring the security of these relations,
  • Administrative operations for communication carried out by our Company,
  • Employee administration and management,
  • Ensuring the physical security and supervision of the company's locations,
  • Planning of logistics activities,
  • Conducting reputation research processes,
  • Compliance with ethical values and the law and execution of legal affairs and procedures,
  • Follow-up of contract processes and/or legal requests,
  • Planning and execution of Human Resources and personnel recruitment processes and monitoring and realization of education and training activities,
  • Planning and/or execution of occupational health and/or safety processes,
  • Ensuring that our Company can benefit from incentives through the execution of research and development activities,
  • Planning and execution of corporate communication and corporate governance activities,
  • Carrying out information security management services,
  • Monitoring and auditing financial and/or accounting affairs and carrying out activities to identify financial risks of customers,
  • Determining and implementing our company's commercial and business strategies,
  • Creation and follow-up of visitor records,
  • For other purposes or purposes to be notified to the person concerned at the time of obtaining the information
  • To ensure that legal obligations are fulfilled as required or mandated by the relevant legislation,
  1. TRANSFER OF DATA COLLECTED AND PROCESSED BY OUR COMPANY WITHIN THE SCOPE OF ITS PURPOSES 

Your personal data collected by our company within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law may be shared with our affiliates, shareholders, business partners (only anonymously), legally authorized public institutions and private persons and other persons within our purposes detailed above.

  1. MANAGEMENT OF DATA COLLECTION BY OUR COMPANY AND LEGAL REASON

Personal data are collected, used, recorded, stored and processed by our company by verbal, written and/or electronic means by providing verbal, written and/or electronic information to personal data owners in a clear and understandable manner and obtaining their explicit consent when necessary, in accordance with the law and good faith, in connection with and limited to the legitimate purposes clearly stated above, within the framework of the principle of proportionality.

We assure you that your personal data will not be processed by our company for purposes other than those specified in this disclosure document, and will not be transferred and stored to third parties in Turkey and abroad.

  1. STORAGE PERIOD OF THE DATA COLLECTED BY OUR COMPANY

Your personal data are stored for the retention periods specified in the relevant legal regulations, and if no period is specified in the relevant legal regulations, your data are stored in accordance with the practices and customs of our Company's practices and commercial life or for the period required by the above-mentioned processing purposes, and then deleted, destroyed or anonymized in accordance with Article 7 of the Law on the Protection of Personal Data.

  1. SECURITY OF YOUR DATA COLLECTED AND PROCESSED BY OUR COMPANY 

In order to ensure that your personal data are not exposed to unauthorized access, lost and damaged in the environments where they are processed and stored, the technical and administrative measures of the Information Security Management System (ISO 27001 Standard and good practice booklet 27701) promoted by our management, the requirements of the Personal Data Protection Management System (Bureau Veritas - Data Protection Technical Standard, BS 10012 Data Protection Personal Information Management System Standard) and the requirements of the Personal Data Security Guide published by the KVKK board are continuously operated and developed within the scope of continuous improvement.

  1. RIGHTS OF THE DATA SUBJECT WHOSE DATA IS COLLECTED AND PROCESSED

Pursuant to Article 11 of the Law on the Protection of Personal Data, anyone may apply to the data controller and request the data controller to provide information about him/her;

  1. Learn whether personal data is being processed,
  2. Request information if their personal data has been processed,
  3. To learn the purpose of processing personal data and whether they are used for their intended purpose,
  4. To know the third parties to whom personal data are transferred domestically or abroad,
  5. To request correction of personal data in case of incomplete or incorrect processing,
  6. 7. to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
  7. To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,
  8. To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
  9. In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.
  1. APPLICATION METHODS WITHIN THE FRAMEWORK OF THE RIGHTS OF THE PERSON CONCERNED

In accordance with paragraph 1 of Article 13 of the Personal Data Protection Law, you can make your request to exercise your rights mentioned above with the following methods and information in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" published on March 10, 2018, No. 30356.

  1. INFORMATION REQUIRED IN THE APPLICATION 
  1. Name and surname of the applicant.
  2. If the applicant is a citizen of the Republic of Turkey, his/her Turkish ID Number, if not, his/her nationality and passport number or ID number, if any.
  3. The applicant's residential or business address for notification.
  4. Applicant's e-mail address, telephone or fax for notification.
  5. Applicant, Subject of the request.
  6. Information and documents related to the subject of the applicant's request.
  1. APPLICATION METHODS
  1. Applicant, in person BKM BURSA KALIP MERKEZİ METAL FORM MACHINE SAN. VE TİC. A.Ş. by filling out the "Application Form" and hand-delivering it to the counseling office with a closed envelope and a note on the envelope as "Information Request Pursuant to the Law on the Protection of Personal Data".
  2. The applicant, through a Notary Public BKM BURSA KALIP MERKEZİ METAL FORM MACHINE SAN. VE TİC. A.Ş. address, but the note "Information Request in accordance with the Law on the Protection of Personal Data" should be added on the notification envelope.
  3. With the "Secure Electronic Signature" defined in the Electronic Signature Law No. 5070, the applicant can personally send the application to our company's Registered Electronic Mail bkmbursa@hs01.kep.tr with the note "Request for Information Pursuant to the Law on the Protection of Personal Data" in the subject section.

*Address: Isiktepe OSB Mah. Turkuaz Cad. No:65 Nilüfer Bursa / Turkey

For detailed information on the application and complaint process regarding your above-mentioned rights

To our application form regarding your rights mentioned above from here you can reach.