ONUR DOLAMİT MADENCİLİK SAN.VE DIŞ TİC. A.Ş
PERSONAL DATA PROTECTION LAW – PRIVACY NOTICE FOR NATURAL PERSONS, SUPPLIERS, CUSTOMERS, BUSINESS PARTNERS AND REPRESENTATIVES OF NATURAL PERSONS
At Onur Dolamit Madencilik San.ve Dış Tic. A.Ş. (hereinafter the “Company”), protecting the privacy of the private lives of our business partners, customers, suppliers and lessors – first and foremost their fundamental rights and freedoms – and ensuring and maintaining information security are among our priority principles; accordingly, we wish to inform you about the “Protection of Personal Data”. Onur Dolamit Madencilik San.ve Dış Tic. A.Ş. reserves the right to update this Privacy Notice on the Protection of Personal Data at any time in line with any amendments to the legislation in force.
As your personal data may be collected pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the European Union data protection rules (“GDPR”), we are under an obligation to inform you of the method and legal grounds for collecting personal data, the purposes for which your personal data are processed by our Company, the third parties to whom your personal data are disclosed/transferred and the purposes of such disclosure, and the rights you may exercise as a data subject.
This notice is addressed to all natural persons whose personal data are processed by our Company, other than our Company’s employees and candidates who have applied for employment with our Company.
Personal Data Processed:
Identity Information: Identity (name and surname, Turkish national ID number, etc.)
Contact Information: Contact (address, e-mail address, correspondence address, registered electronic mail address (KEP), telephone number, etc.)
Legal Transactions: (Such as information in correspondence with judicial authorities and information in case files)
Customer Transactions: (Such as call centre records, invoice, promissory note and cheque details, information on bank counter receipts, order information and request information)
Physical Premises Security Information: (Such as visitor entry and exit records and camera recordings)
Transaction Security: (Such as IP address information and website log-in and log-out information)
Risk Management: (Such as information processed to manage commercial, technical and administrative risks)
Financial Information: (Invoice details, cheques, promissory notes, bank details, IBAN number, etc.)
Visual and Audio Recordings: (Camera Recordings)
Categories of Data Subjects:
-
Shareholder
-
Prospective Purchaser of Products or Services -
Supplier Employee -
Supplier Representative -
Purchaser of Products or Services -
Visitor
Processing of Your Personal Data:
Under Law No. 6698 on the Protection of Personal Data (hereinafter the “Law”), published in Official Gazette No. 29677 dated 07.04.2016, any operation performed on data – such as obtaining, recording, storing, retaining, altering, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether by fully or partly automated means or by non-automated means provided that they form part of a data filing system – is deemed “processing of personal data”. Your personal data that you have shared with our Company, whether in the context of a Supplier Relationship or Customer Communication, or under Agreements signed with Onur Dolamit Madencilik San.ve Dış Tic. A.Ş. as lessor for services such as product financing, will be stored, recorded and updated by our Company in compliance with the Law, may be transferred – as permitted by the legislation – to third parties such as the business partners with whom we have a contractual relationship and legally authorised public institutions and organisations, and may be processed in the ways set out in the Law.
Erasure, Destruction or Anonymisation of Personal Data
Pursuant to Article 7 of the KVKK Law, although personal data have been processed in accordance with the relevant legislation, where the reasons requiring their processing cease to exist, the personal data shall be erased, destroyed or anonymised by the Company either ex officio or upon the request of the data subject. The procedures and principles in this respect shall be carried out in accordance with the KVKK Law and the Regulation on the Erasure, Destruction or Anonymisation of Personal Data published in Official Gazette No. 30224 dated 28.10.2017. Personal data shall be erased, destroyed or anonymised within 3 months following the date on which our obligation to erase, destroy or anonymise them arises. When you apply to our Company requesting the erasure or destruction of your personal data:
a) If all of the conditions for processing personal data have ceased to exist, the personal data subject to the request shall be erased, destroyed or anonymised. Your request shall be concluded within 30 days at the latest and you shall be informed accordingly.
b) If all of the conditions for processing personal data have ceased to exist and the personal data subject to the request have been transferred to third parties, the Company shall notify such third parties of this and ensure that the necessary actions are taken under the Regulation.
c) If not all of the conditions for processing personal data have ceased to exist, your request may be rejected with the reasons stated, pursuant to paragraph 3 of Article 13 of the KVKK Law, and the rejection shall be notified to you in writing or electronically within 30 days at the latest.
Method of Collecting Your Personal Data:
Your personal data are stored by various methods – verbally, in writing or electronically – through various channels, such as information you provide to us via our corporate websites, by e-mail or by other means, or in the course of our business relations, at the stage of signing commercial agreements and/or during the commercial relationship, by filling in the contact form when you visit our website, and via physical forms (for example, at a trade fair).
Your personal data are processed on the basis of the explicit consent of our customers and the legal grounds set out in Article 5 of Law No. 6698 on the Protection of Personal Data.
Legal Grounds for Processing Your Personal Data:
The processing of personal data of the parties to a contract being necessary, provided that it is directly related to the conclusion or performance of that contract; the fulfilment of our legal obligations;
Your personal data may be processed on the basis of the grounds set out in Articles 5 and 6 of Law No. 6698 on the Protection of Personal Data – including where data processing is necessary for the legitimate interests of the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject – and the grounds of lawfulness listed below.
Being expressly provided for by law
• Turkish Commercial Code No. 6102,
• Tax Procedure Law No. 213,
• Law No. 6698 on the Protection of Personal Data,
• Turkish Civil Code No. 4721,
• Code of Obligations No. 6098,
• Mining Law No. 3213,
• Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications
Data processing being necessary for the legitimate interests of the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject.
The processing of personal data of the parties to a contract being necessary, provided that it is directly related to the conclusion or performance of that contract (personal data provided by customers to whom we provide independent audit services fall within this scope),
Providing the products and services requested and performing the contracts you have entered into,
Processing being mandatory for the fulfilment of a legal obligation,
Data processing being mandatory for the establishment, exercise or protection of a right,
Purposes of Processing Your Personal Data:
Your personal data collected may be processed by the Company in accordance with the fundamental principles laid down by the Law and within the personal data processing conditions and purposes set out in Articles 5 and 6 of the Law, for the following purposes:
• Conducting Emergency Management Processes
• Conducting Information Security Processes
• Managing Access Authorisations
• Conducting E-Waybill Transactions,
• Conducting Activities in Compliance with the Legislation
• Conducting Finance and Accounting Affairs
• Ensuring Physical Premises Security
• Conducting Assignment Processes
• Monitoring and Conducting Legal Affairs
• Conducting Communication Activities
• Conducting / Auditing Business Activities
• Conducting Business Continuity Activities
• Conducting Goods / Services Procurement Processes
• Conducting Goods / Services Sales Processes
• Conducting Goods / Services Production and Operation Processes
• Conducting Risk Management Processes
• Conducting Storage and Archiving Activities
• Conducting Contract Processes
• Following Up Requests / Complaints
• Ensuring the Security of Movable Property and Resources
• Conducting Supply Chain Management Processes
• Ensuring the Security of Data Controller Operations
• Providing Information to Authorised Persons, Institutions and Organisations
• Conducting Management Activities
• Creating and Monitoring Visitor Records
• Fulfilling legal obligations such as ensuring and supervising occupational health and safety at the Company’s workplace and premises.
Transfer of Your Personal Data:
Where one of the conditions set out in paragraph 2 of Article 5 of the Law exists, personal data may be transferred by the Company, limited to the purposes stated in the fourth section of this notice and in line with the purposes set out above, directly or indirectly to our shareholders, business partners and suppliers in Türkiye, to Company employees for the purpose of conducting business processes, and to legally authorised public institutions and organisations and legally authorised private-law persons, within the framework of the conditions set out in Articles 8 and 9 of the Law and provided that the necessary security measures are taken.
Where none of the conditions set out in paragraph 2 of Article 5 of the Law exists, the transfer of Personal Data is subject to the explicit consent of the data subject.
Your Rights as a Data Subject:
By applying to Onur Dolamit Madencilik San.ve Dış Tic. A.Ş. as the data controller with regard to the processing of your Personal Data, pursuant to Article 11 of Law No. 6698 on the Protection of Personal Data, you have the right to:
a. Learn whether your personal data are processed,
b. Request information if your personal data have been processed,
c. Learn the purpose of processing your personal data and whether they are used in line with that purpose,
ç. Know the third parties in Türkiye or abroad to whom your personal data are transferred,
d. Request the rectification of your personal data if they have been processed incompletely or inaccurately,
e. Request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,
f. Request that the operations carried out pursuant to sub-paragraphs (d) and (e) above be notified to third parties to whom your personal data have been transferred,
g. Object to any outcome to your detriment arising from the analysis of the processed data exclusively by means of automated systems, and
ğ. Claim compensation for damages if you suffer loss as a result of the unlawful processing of your personal data.
To exercise the rights listed above, you may complete the Application Form in accordance with the instructions written on it and deliver a signed copy of the form, together with documents proving your identity, by hand to Onur Dolamit Madencilik San.ve Dış Tic. A.Ş at Çamlık Mah. Şenol Güneş Blv. Dinç Sok. No:4 Muyar Plaza K:12 D:70 Ümraniye/İSTANBUL, or send it via a notary public or by the other methods specified in the Law. Your application will be concluded free of charge as soon as possible, depending on the nature of your request, and within thirty days at the latest; however, should an additional cost arise, the Company reserves the right to charge you a fee in accordance with the tariff to be determined by the Personal Data Protection Board.
DATA CONTROLLER CONTACT DETAILS
ONUR DOLAMİT MADENCİLİK SAN.VE DIŞ TİC. A.Ş
Mersis No: 0643079694400001
E-mail: info@onurmaden.com
KEP Address: dolamitmadencilik@hs02.kep.tr
Website: https://www.onurmaden.com/
Address: Çamlık Mah. Şenol Güneş Blv. Dinç Sok. No:4 Muyar Plaza K:12 D:70 Ümraniye/İSTANBUL