This Data Privacy and Security Policy (“Policy”), Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. While fulfilling the data protection obligations implemented by the Personal Data Protection Law No. 6698 and other relevant legislation and additionally processing personal data, within Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. and/or Akyol Mobilya Orman Ürünleri San.ve Tic. LLC. It determines the principles to be followed by.
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. It undertakes to apply a sufficient and reasonable level of security for the personal data it holds, to respect the confidentiality of personal data and to comply with this Policy and the tools, programs and processes to be implemented in accordance with the Policy.
The main purpose of this Policy is to set forth the principles regarding the protection of personal data and personal data processing activities carried out in accordance with the law by Akyol Mobilya Orman Ürünleri San. .
This Policy; It covers all departments and employees of Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti..
This Policy; Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti.. will cover all activities in which it processes personal data and will be applied in all kinds of events and actions.
This Policy will not apply to data that has been anonymized or is not personal data.
In case it is determined by new legislation, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. It will provide a higher level of security on personal data in compliance with new legislation and comply with regulatory requirements.
This Policy applies to Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. In cases where it is determined that there is a legal obstacle in its implementation, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. It will re-determine the steps it will take, in consultation with the Board, if deemed necessary.
The definitions used in this Policy are listed below:
Explicit consent | Consent regarding a specific issue, based on information and expressed with free will |
Anonymization | Making personal data impossible to associate with an identified or identifiable natural person in any way, even by matching it with other data |
Personal data | Any information regarding an identified or identifiable natural person |
Processing of personal data | Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system. Any action taken on the data, such as preventing its use or |
KVK Law | Personal Data Protection Law No. 6698 |
KVK Board | Personal Data Protection Board |
KVK Authority | Personal Data Protection Authority |
Personal data of special nature | Data regarding people's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data |
Data processor | Natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller. |
Personal data owner | Personal data owner is the natural person whose personal data is processed, who is considered as the "relevant person" in the KVK Law. |
Data controller | The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. |
Data Controllers Registry | (VERBİS) kept by the Presidency under the supervision of the Personal Data Protection Board. |
Data Inventory | Personal data processing activities carried out by Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. depending on its business processes; The inventory created and detailed by associating it with the personal data processing purposes, the recipient group to which the personal data is transferred, and the relevant personal data owner group. |
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. before; In line with the legitimate and lawful personal data processing purposes of Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti., the processing of personal data is based on and limited to one or more of the personal data processing conditions specified in Article 5 of the KVK Law. By complying with the general principles specified in the KVK Law and all obligations regulated in the KVK Law, including the principles specified in Article 4 regarding the Personal Data Protection Law, and personal data owners within the scope of this Policy (Customers, Potential Customers, Employees, Employee Candidates, Supplier Employees with whom we cooperate, Supplier Limited to Authorities, Reference, Shareholder/Partner, Employee Relative, Reference) ;
Fulfilling the requirements of the commercial activities carried out by our company and ensuring that the relevant persons benefit from the products and services offered by our company through the performance of the service,
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. It has created a personal data inventory in accordance with the Data Controllers Registry Regulation issued by the Personal Data Protection Authority. This data inventory includes data categories, data source, data processing purposes, data processing process, recipient groups to which the data is transferred and storage periods.
In this context, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. It includes, but is not limited to, the following types of data categories:
Identity information, contact information, personnel information, legal transaction information, customer transaction information, physical location security information, transaction security information, financial information, marketing sales information, visual and audio recording information, race and ethnic origin information, religious information (in the old ID ), health information, criminal convictions and security measures information and other information (signature) data category.
Our company carries out its personal data processing activities in accordance with the law and the rules of honesty, in accordance with the Constitution, the Personal Data Protection Law and the relevant legislation.
Our company; It ensures that the personal data it processes are accurate and up-to-date, taking into account the fundamental rights of personal data owners and its own legitimate interests, and takes the necessary measures in this regard. In this context, data regarding all categories of persons are tried to be kept up-to-date, and all kinds of administrative and technical measures are taken to ensure accuracy and up-to-dateness. (Each unit and data processing personnel are responsible for ensuring that the data they process is up-to-date.)
Our company; It processes personal data only for clearly and precisely determined legitimate purposes and does not engage in data processing activities other than these purposes. The purpose for which personal data will be processed by our company is determined before the processing activity and is processed in the "Personal Data Inventory".
Personal data is processed by our company to the extent necessary to achieve the specified purposes. Data processing is not carried out with the assumption that it can be used later. . In this context, processes are constantly reviewed and the principle of reducing personal data is tried to be implemented.
Our company retains personal data only for the period specified in the relevant legislation or necessary for the purpose for which they are processed. In this context, our Company first determines whether a period of time is foreseen for the storage of personal data in the relevant legislation, and if a period is determined, it acts in accordance with this period, in this context, it takes into account the civil and criminal statute of limitations and stores personal data for the period necessary for the purpose for which they are processed. If the period expires or the reasons requiring processing disappear, personal data is deleted, destroyed or anonymized in accordance with our Company's "Data Destruction Policy".
Personal data can only be collected, processed or used within the scope of the legal bases specified below.
Protection of personal data is a Constitutional right, and fundamental rights and freedoms can only be limited by law, without affecting their essence, based on the reasons specified in the relevant articles of the Constitution. In accordance with the third paragraph of Article 20 of the Constitution, personal data can only be processed in cases stipulated by law or with the explicit consent of the person. Our company processes personal data without seeking the express consent of the relevant person only if the following conditions are met;
Processing of Special Personal Data
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. All personal data processed within the scope of the law are confidential. Employees may carry out collection, processing, transfer, use, deletion, destruction and anonymization activities on personal data only within the authority defined for them. Otherwise, employees are prohibited from carrying out these activities. Additionally, employees may not use personal data for individual or commercial purposes.
The security of personal data is determined by the employee, department and Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti respectively. is your responsibility. Personal data must be protected against loss, unlawful processing, misuse, and all kinds of processing by unauthorized persons. These security measures cover all personal data stored electronically and physically.
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. In order to ensure the lawful processing of personal data, it takes technical and administrative measures according to technological possibilities and implementation costs.
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. In order to protect your personal data, it has taken all kinds of technical and technological security measures and protects your personal data against possible risks. For example;
If the processed personal data is obtained by others through illegal means, our Company will notify the relevant data owner and the Board as soon as possible (within a maximum of 72 hours).
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. for the purpose of ensuring security and other purposes specified in this Policy; Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. Internet access can be provided to our Visitors upon request during their stay in our buildings and facilities. In this case, log records regarding your internet access are kept in accordance with the mandatory provisions of Law No. 5651 and the legislation issued in accordance with this Law; These records can only be sent to Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti if requested by authorized public institutions and organizations. It is processed in order to fulfill our relevant legal obligation during the audit processes to be carried out.
In accordance with Article 138 of the Turkish Penal Code, Article 7 of the KVK Law and the "Regulation on Deletion, Destruction and Anonymization of Personal Data" issued by the Institution; Even though it has been processed in accordance with the provisions of the relevant law, in case the reasons requiring processing disappear, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. Personal data is deleted, destroyed or made anonymous based on its own decision or upon the request of the personal data owner. Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. A Policy has been created in accordance with the provisions of the regulation on this subject, and in accordance with this Policy, the data is destroyed according to its nature. In accordance with this regulation, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. Periodic destruction dates have been determined by the company, and a calendar has been created according to which periodic destruction will be carried out at various intervals with the beginning of the obligation (every 6 months).
Each employee working at Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. has the right to report any action or event that he/she thinks is contrary to the restrictions specified within the scope of the Personal Data Protection Law No. 6698 and this Policy, to the department managers in writing as soon as they become aware of the situation. is responsible for. If the transfer is not made, the damage and penal liability that may arise may be recourse to the employee.
As a result of the information provided, Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. 's KVKK committee is obliged to notify the relevant person or authorized institution (KVKK) regarding violation actions or events, taking into account the legislation.
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. Responsibilities are listed as employee and department respectively. In this context;
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. is responsible for the implementation of this Policy. A management structure has been established to ensure compliance with the KVK Law regulations and the implementation of the Personal Data Protection and Processing Standard.
Akyol Mobilya Orman Ürünleri San.ve Tic.Ltd.Şti. Personal Data Protection Committee ("Committee") has been established in accordance with the decision of the Company's senior management to manage this Policy and other Policies affiliated and related to this Policy.
This Policy entered into force on…/…/.2020.