PDPL

PDPL

Personal Data Protection Clarification Text

Data Controller and Purposes of Processing of Personal Data

This clarification text was prepared by Ermaksan Makina as data controller under Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communique On Principles And Procedures To Be Followed In Fulfilment Of The Obligation To Inform.

Your Personal Data collected by Ermaksan Makina as Data Controller will be processed on a limited basis for the Application Processes of Employee Candidates, Follow-up and Execution of Legal Affairs, Carrying out Internal Audit / Investigation / Intelligence Activities, Execution of Assignment Processes, Execution of Vested Benefits and Benefit Processes for Employees, Execution of Access Authorities, Providing Information to Authorized Persons, Institutions, and Organizations, Conducting Training Activities, Execution of Performance Evaluation Processes, Execution of Remuneration Policy, Execution of Activities in Compliance with the Legislation, Execution of Emergency Management Processes, Execution of Training Activities for Employee Satisfaction, Execution of Goods / Services Purchasing Processes, Creation and Tracking of Visitor Records, Ensuring the Physical Security of the Company, Recording Images in Open Areas of the Company, Ensuring the Security of Movable Properties and Resources, Execution of Access Authorities, Execution of Information Security Processes, Execution of Occupational Health / Safety Activities, Execution of Goods / Services Sales Processes, Execution of Goods / Services After-Sales Support Services, Execution of Customer Relationship Management Processes, Execution of Activities for Customer Satisfaction, Execution of Marketing Analysis Studies, Execution of Finance and Accounting Activities, Execution of Management Activities, and Fulfilling Obligations Related to the Legislation.

To Whom Personal Data Will Be Transferred and For What Purposes

These personal data is locally collected and can be transferred to Lawyers, Banks, Insurance Companies, Public Procurement Agency, Real persons or private law legal entities, Authorized Public institutions and organizations, Suppliers, Customers, "Customers and Dealers" buyer groups for the following purposes: Execution of Processes in accordance with the Legislation, Performing Legal Obligations, Execution of Assignment Processes, Informing Authorized Persons, Institutions and Organizations, Performing Activities in Compliance with the Legislation, Execution of Occupational Health / Safety Activities, Execution of Finance and Accounting Affairs, Execution of Goods / Service Purchase Processes.

These personal data are not shared with the third parties abroad.

Personal Data Collection Methods and Terms of Processing

Your personal data are collected with non-automatic methods in paper form; through digital media such as internet, e-mail, card readers, software applications, cameras, through automated or partially automated methods based on the conditions of processing personal data; of Explicit Consent, Establishment, Protection, Use of the Rights, Provisions of Law, Performance of the Contract, Legitimate Interest of the Data Controller, Legal Responsibility of the Data Controller.

Your Rights Regarding Your Personal Data

Data subjects are obliged to first apply to the data controller in order to exercise their rights regarding their personal data. According to Article 14 of the Law, no direct complaint can be made to the Personal Data Protection Board.

In accordance with the law, you can exercise the following rights regarding your personal data by applying to the data controller.

a) Learn whether your personal data is processed
b) Request information if your personal data has been processed
c) Learn the purpose of processing of your personal data and whether your data are used in accordance with such purpose
d) Receive information about the third parties to whom your personal data has been transferred
e) Request correction if your personal data is incomplete or incorrectly processed
f) Request the deletion or destruction of your personal data in case the reasons requiring processing lose validity
g) Request notification of the transactions made pursuant to sub-paragraphs (e) and (f) to the third parties to whom your personal data has been transferred
h) Object to the emergence of any consequence that is not in favour of yourself if your processed data has been exclusively analysed through automated systems
i) Request the compensation of the damage in case you suffer due to unlawful processing of personal

The Method of Application to Data Controller

Please send your application in writing to;

You can find more detailed information on the procedures and principles to be followed when making an application in the "Communique On Principles And Procedures To Be Followed In Fulfilment Of The Obligation To Inform" of the Personal Data Protection Authority.