Supplier GDPR Clarification Text



TELEFONCULAR ÇELİK SAN. VE TİC. LTD. ŞTİ. ("The Company") attaches great importance to the processing of your personal data in a safe and transparent manner, in compliance with the law and good faith rules; This Information Text is prepared to explain how and for what purposes your personal data is processed and how you can manage your preferences in this regard.

Below, you can find detailed explanations about the purposes for which your personal data are processed and transferred within the scope of the marketing activities offered to you by our Company, which is the data controller in accordance with the Personal Data Protection Law of No.6698 ("Law"), and your rights regarding your personal data. 

a) What types of personal data does our company collect and what are the data collection methods?

Your personal data provided to our company within the scope of our contractual relationship by you or the representatives of your company that may be processed by us are as follows:

Official identity data; name, surname, nationality number, date of birth, copy of identity card,

Communication data; e-mail address, address

Financial data; Bank account information, balance sheet information, financial performance information, credit and risk information if required for risk management in case of commercial trading

Professional experience data, company he/she works for, department, type of work, profession, title, signature circular

Physical Space Security and visual and audio data; Photos and sound recordings of the natural person

Location Data; Location information in case tracking is required at the procurement stage

To fulfil our legal obligations as a company, the performance of the contract between you and / or you, the reasons stipulated by the law and the legitimate interest of the Company, we request your personal data from you and / or other representatives / employees representing your company, by you and / or other representatives of your company / verbally, physically or electronically by our employees and physically or electronically through cameras placed in the Company buildings.

b) For what kind of legal reasons does our company obtain your personal data?

Your personal data obtained with above listed methods, in line with the realization of this information text objectives in accordance with the law, may be processed and transferred. Personal data, as specified in Article 5 and 6 of the PPD Law; is collected based on legal reasons in the form of; 

•     It is expressly provided for by the laws.

•     It is mandatory for our company to fulfil our legal obligation,

•     Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.,

•     Processing is compulsory for the legitimate interest of our Company, provided that it does not harm your fundamental rights and freedom,

•     It is publicized by the data owner,

•    Data processing is necessary for the establishment, exercise or protection of any right.

c) For what purposes does our company process your personal data?

Your personal data listed above which is obtained based on article 5 of the PPD Law and which is subject to the activities listed below, is processed in a limited and proportioned manner in line with the following processing purposes. 

Your personal data obtained in accordance with the law is processed by our Company for the following purposes and reasons without damaging your rights within the scope of the Company's legitimate interests: 

Your personal data may be processed by the Company in line with the following processing purposes ("Purposes") and legal reasons. 

To coordinate and execute works and communications regarding goods and services provided to the Company by you or the company you represent, and to control quality and evaluate of service / contract fulfilment of service / contract performance. 

To communicate and manage relations between suppliers, business partners, external service providers and customers 

To follow-up reception activities

To get support from supplier employees 

To make payments, to fulfil various transactions related to aforementioned services, to carry out and develop operations

To provide the requirements of the contracts concluded with customers, suppliers and business partners and ensuring the legal, technical and commercial-business security of the Company and the relevant persons in business relations with the Company,

To plan and execute the necessary operational activities and risk management to ensure that the company activities are carried out in accordance with the company procedures and / or the relevant legislation, 

•          To carry out and plan the Company's financial and / or accounting policy and marketing strategy and execute the Company's human resources policies and processes,

To execute event management activities,

To plan and execute operational activities the necessary operational activities and risk management to ensure that the company activities are carried out in accordance with the company procedures and / or the relevant legislation,

To fulfil legal obligations such as ensuring and supervising occupational health and safety in the company's workplace and building,

processed in accordance with the principles of processing personal data specified in Article 4 of the Law.  Your personal data will be stored for the period laid down by relevant legislation or the period required for the purpose for which the personal data are processed.

d) To Whom and For Which Purpose Your Processed Personal Data Can Be Transferred by our company?

Your personal data provided to our company within the scope of legally authorized private persons and organizations and legally authorized public institutions within the scope of this information text and the personal data protection and processing policy of the Company and the relevant legislation in line with the realization of the aforementioned Objectives.

e) Rights of Personal Data Owner Enumerated in Article 11 of Law 

Each person has the right to request to the data controller about him/her;

• to learn whether his/her personal data are processed or not,

• to demand for information as to if his/her personal data have been processed,

• to learn the purpose of the processing of his/her personal data and whether these personal

• data are used in compliance with the purpose,

• to know the third parties to whom his personal data are transferred in country or abroad,

• to request the rectification of the incomplete or inaccurate data, if any and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,

To request the deletion or destruction of personal data in the case that the reasons for its processing disappear, and to request notification of the transaction made within this scope to third parties to whom personal data has been transferred, although it has been processed in accordance with the provisions of Law and other relevant laws.

•            To object to the occurrence of a result against the person himself/herself by analysing the data processed solely through automated systems.

•             To claim compensation for the damage arising from the unlawful processing of his/her personal data with violation of the PPD Law.

The Company will finalize the requests of personal data owners as soon as possible and not later than 30 (thirty) days depending on the nature of the request. Up to ten pages will not be charged in the given response. A transaction fee of 1 Turkish Lira will be charged for each page above ten pages. If the response to the application is provided in a memory device such as CD, flash memory, the fee that may be requested by the Company will not exceed the cost of the memory device.

You can transmit your request for exercising the rights stated above, in accordance with paragraph 1 of Article 13 of PPD Law No. 6698 and the Communiqué on the Procedures and Principles of Application to Data Supervisor No: 30356 and dated 10.03.2018, Registered e-mail address (KEP) using electronic signature, mobile signature or by using the e-mail address previously delivered and registered in our system. The Company reserves the right to verify your identity before responding.

Your application.

a) Your name, surname and signature if the application is in writing,

b) For the citizens of the Republic of Turkey your nationality ID number, for foreigners passport number, if any, or ID number, if applicable,

c) Your personal address or business address subject to notification,

d) Your e-mail address, phone and fax number, if any,

e) Your request subject, if any, information and documents related to the subject 

should be attached to the application.

You are expected to use the PPD Application Form (KVKK Başvuru Formu) in our website for your applications. You can submit the applications in writing, to the Company's 

BÜYÜKKAYACIKOSB MAHALLESİ 12 NOLU SOKAK NO: 34/1 SELÇUKLU KONYA address as the “Data Controller” by adding the necessary documents.

You can make your applications to the e-mail address that you want to make via e-mail registered in the company system.

You can make your applications via KEP-Registered e-mail address (secure e-mail address provided by official institutions (by a valid electronic signature) to our KEP-Registered e-mail address.

According to the nature of your request, relevant information and documents must be provided completely and accurately.

In case the requested/relevant information and documents are not provided properly, there may be problems in the full and qualified execution of the researches to be made by the Company based on your request. In this case, the Company declares that it reserves its legal rights. For this reason, your application must be sent completely and accurately containing the required information and documents according to the nature of your request