Personal Data Protection and Processing Policy
Information About Privacy And Personal Data Protection For Website Visitors
Kanat Boyacılık Tic. San. A.Ş. (Kanat Boya) values protecting the fundamental rights and freedoms of individuals, especially the right to privacy, which is regulated in Article 20 of the Constitution. Therefore, it values protecting and processing personal data according to law and acts with this understanding in all of its planning and activities.Kanat Boya does not only consider the protection of personal data, which is the basis of the right to privacy, and its processing under the law only within the scope of compliance with the legislation, but also values the person as an approach to data protection. Acting with this awareness, takes all necessary administrative and technical measures to prevent the illegal processing of personal data and storing the personal data security.
In this context, information about the processing and transfer conditions of personal data produced or shared during the use of the website “http://www.kanatboya.com/en/“ under the Personal Data Protection Law No: 6698.
1. Definitions
Website
www.kanatboya.com.tr
Law
Personal Data Protection Law No: 6698
Personal Data
Any information related to an identified or identifiable natural person.
Online Visitor/Data Subject:
Any person who access the website. Included as “Visitor” category in relevant company policies.
Board
Personal Data Protection Board
Şirket
Kanat Boyacılık Tic. San. A.Ş.
Hosting Provider
Natural or legal persons who provide or operate systems that host services and content on the Internet.
2. Processed Personal Data
Processed personal data of Online Visitor depending on the access to the Website and the transactions performed on the Website are presented below:
For Online Visitors who visit the Website,
– Process Security Information (IP address, website traffic information, etc.)
For Online Visitors who fill in the forms on the Website,
– Identity Information (first name, last name)
– Contact Information (e-mail address, phone number)
In addition to those above, it is possible to process other data that may be mandatory for the operation, development, and security of the Website under the Law.
3. Method and Cause of Action of Collecting Personal Data
Personal data is collected by using the Website or filling out the communication form to store it for the time required for processing by wholly or partly automated means.
Personal data is processed based on the explicit consent of the Online Visitor. However; under the Article 5(2) of the Law, personal data may be processed without the explicit consent of the data subject if it is (i) expressly permitted by any law, (ii) necessary for the data controller to comply with legal obligations, (iii) necessary for the institution, usage or protection of a right, (iv) necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
Personal data is processed depending on the transactions made by Online Visitor on the Website, in the case of expressly permitted by any law or under the other conditions specified in the Article 5(2) of the Law for the following purposes;
Personal data is processed depending on the transactions made by Online Visitor on the Website, in the case of expressly permitted by any law or under the other conditions specified in the Article 5(2) of the Law for;
Conducting business activities, managing customer relationship management process, pursuing demands/complaints and conducting communication activities in case of filling out the “Identity and Contact Details” form,
Managing Information Security Process where “Website Traffic Information” is processed. However, according to the Law No. 5651 and other related laws, the Hosting Service Provider must record and store site traffic information.
Processing personal data to send commercial electronic messages is subject to the explicit consent of the Online Visitor.
Third-party cookies are not used on the Website. However, cookies that are necessary for the operation and security of the site can be used. Online Visitors do not have to accept cookies, or they can choose to receive a notification by changing their browser settings. However, certain functions of the Website may not work properly when the cookies are disabled.
The following links give information on how to manage (and disable) cookies in some common browsers:
Chrome Browser
https://support.google.com/accounts/answer/61416?hl=tr
Internet Explorer
https://support.microsoft.com/tr-tr/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox
https://support.mozilla.org/tr/products/firefox/protect-your-privacy/cookies
Safari
https://support.apple.com/tr-tr/guide/safari/manage-cookies-and-website-data-sfri11471/mac
4. Recipients and Purposes of Personal Data Transfers
Personal data processed by Kanat Boya in accordance with the Law may be transferred to our affiliates and authorized public institutions and organizations if requested.
5. The Rights of the Data Subject Under the Article 11 of the Law
Under Article 10 of the Law, Kanat Boya informs the data subjects about their rights and provides guidance on how to exercise these rights and performs the necessary internal procedures, administrative and technical arrangements for all these.
According to the Article 11 of the Law, the Data Subjects have the right to;
• Learn whether their data is processed,
• Request related information if their data is processed,
• Learn the purposes for the processing of personal data and whether it is used accordingly,
• Know the third parties to whom their data is transferred domestically or abroad,
• Request the rectification of their data if it is processed incompletely or improperly,
• Request the deletion or destruction of personal data under the Article 7 of the Law,
• Request the third parties who received the personal data of the Data Subject to be notified about the transactions made (rectification and destruction) under Article 11(d) and (e) of the Law,
• Object to the outcome against the persons themselves by analyzing the processed data exclusively through automated systems,
• Claim for damages if personal data is damaged due to illegal processing.
Requests and applications regarding the enforcement of the law can be submitted in person or can be sent via notary to the address “………………………………………………………………………..” by filling out the Data Subject Application Form. They can also be sent the registered electronic mail address (…………………………), or using a secure electronic signature or mobile signature.
Requests and applications can also be sent to ……………….. if there is an e-mail address previously reported to by the data subject and registered in Kanat Boya’s system.
The following information is obligatory in requests and applications:
• First name, last name, and signature if the application is in writing,
• Turkish National Identity Number for the citizens of the Republic of Turkey; nationality and passport number (national identification number if applicable) for other nationalities.
• Permanent address or business address for notifications,
• E-mail address, phone and fax number if applicable to the notification
• Subject
Information and related documents should be attached to the application.
Kanat Boya shall respond to the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, in case the action in question requires an additional cost, the fee in the tariff determined by the Board may be charged.
Kanat Boya may accept the request or reject it by explaining the reason and informs the data subject in written or electronically. If the request in the application is accepted, Kanat Boya shall fulfill the requirements as soon as possible and inform the data subject. If the application is caused by the error of Kanat Boya, the fee shall be refunded to the data subject.
If the application is rejected, the response is insufficient or the application is not responded in due time; the data subject has the right to make a complaint to the Board within thirty days from the date of receipt and, in any case, within sixty days from the date of application.
6. Data Security
Kanat Boya has to take all necessary administrative and technical measures to prevent personal data from being processed and accessed unlawfully, to ensure the protection of personal data and the appropriate level of security.
In the case of redirecting to other sites or applications through the website, Kanat Boya does not have information about the compliance of the directed sites and applications with the legislation for the protection of personal data and is not under any responsibility for their privacy policies and contents.
By using the Website, the Online Visitor declares that he/she has read all the conditions written in this informative text and is informed about the processing of his/her data.
Kanat Boyacılık Tic. San. A.Ş. (Kanat Boya) values protecting the fundamental rights and freedoms of individuals, especially the right to privacy, which is regulated in Article 20 of the Constitution. Therefore, it values protecting and processing personal data according to law and acts with this understanding in all of its planning and activities.Kanat Boya does not only consider the protection of personal data, which is the basis of the right to privacy, and its processing under the law only within the scope of compliance with the legislation, but also values the person as an approach to data protection. Acting with this awareness, takes all necessary administrative and technical measures to prevent the illegal processing of personal data and storing the personal data security.
In this context, information about the processing and transfer conditions of personal data produced or shared during the use of the website “http://www.kanatboya.com/en/“ under the Personal Data Protection Law No: 6698.
1. Definitions
Website
www.kanatboya.com.tr
Law
Personal Data Protection Law No: 6698
Personal Data
Any information related to an identified or identifiable natural person.
Online Visitor/Data Subject:
Any person who access the website. Included as “Visitor” category in relevant company policies.
Board
Personal Data Protection Board
Şirket
Kanat Boyacılık Tic. San. A.Ş.
Hosting Provider
Natural or legal persons who provide or operate systems that host services and content on the Internet.
2. Processed Personal Data
Processed personal data of Online Visitor depending on the access to the Website and the transactions performed on the Website are presented below:
For Online Visitors who visit the Website,
– Process Security Information (IP address, website traffic information, etc.)
For Online Visitors who fill in the forms on the Website,
– Identity Information (first name, last name)
– Contact Information (e-mail address, phone number)
In addition to those above, it is possible to process other data that may be mandatory for the operation, development, and security of the Website under the Law.
3. Method and Cause of Action of Collecting Personal Data
Personal data is collected by using the Website or filling out the communication form to store it for the time required for processing by wholly or partly automated means.
Personal data is processed based on the explicit consent of the Online Visitor. However; under the Article 5(2) of the Law, personal data may be processed without the explicit consent of the data subject if it is (i) expressly permitted by any law, (ii) necessary for the data controller to comply with legal obligations, (iii) necessary for the institution, usage or protection of a right, (iv) necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
Personal data is processed depending on the transactions made by Online Visitor on the Website, in the case of expressly permitted by any law or under the other conditions specified in the Article 5(2) of the Law for the following purposes;
Personal data is processed depending on the transactions made by Online Visitor on the Website, in the case of expressly permitted by any law or under the other conditions specified in the Article 5(2) of the Law for;
Conducting business activities, managing customer relationship management process, pursuing demands/complaints and conducting communication activities in case of filling out the “Identity and Contact Details” form,
Managing Information Security Process where “Website Traffic Information” is processed. However, according to the Law No. 5651 and other related laws, the Hosting Service Provider must record and store site traffic information.
Processing personal data to send commercial electronic messages is subject to the explicit consent of the Online Visitor.
Third-party cookies are not used on the Website. However, cookies that are necessary for the operation and security of the site can be used. Online Visitors do not have to accept cookies, or they can choose to receive a notification by changing their browser settings. However, certain functions of the Website may not work properly when the cookies are disabled.
The following links give information on how to manage (and disable) cookies in some common browsers:
Chrome Browser
https://support.google.com/accounts/answer/61416?hl=tr
Internet Explorer
https://support.microsoft.com/tr-tr/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox
https://support.mozilla.org/tr/products/firefox/protect-your-privacy/cookies
Safari
https://support.apple.com/tr-tr/guide/safari/manage-cookies-and-website-data-sfri11471/mac
4. Recipients and Purposes of Personal Data Transfers
Personal data processed by Kanat Boya in accordance with the Law may be transferred to our affiliates and authorized public institutions and organizations if requested.
5. The Rights of the Data Subject Under the Article 11 of the Law
Under Article 10 of the Law, Kanat Boya informs the data subjects about their rights and provides guidance on how to exercise these rights and performs the necessary internal procedures, administrative and technical arrangements for all these.
According to the Article 11 of the Law, the Data Subjects have the right to;
• Learn whether their data is processed,
• Request related information if their data is processed,
• Learn the purposes for the processing of personal data and whether it is used accordingly,
• Know the third parties to whom their data is transferred domestically or abroad,
• Request the rectification of their data if it is processed incompletely or improperly,
• Request the deletion or destruction of personal data under the Article 7 of the Law,
• Request the third parties who received the personal data of the Data Subject to be notified about the transactions made (rectification and destruction) under Article 11(d) and (e) of the Law,
• Object to the outcome against the persons themselves by analyzing the processed data exclusively through automated systems,
• Claim for damages if personal data is damaged due to illegal processing.
Requests and applications regarding the enforcement of the law can be submitted in person or can be sent via notary to the address “………………………………………………………………………..” by filling out the Data Subject Application Form. They can also be sent the registered electronic mail address (…………………………), or using a secure electronic signature or mobile signature.
Requests and applications can also be sent to ……………….. if there is an e-mail address previously reported to by the data subject and registered in Kanat Boya’s system.
The following information is obligatory in requests and applications:
• First name, last name, and signature if the application is in writing,
• Turkish National Identity Number for the citizens of the Republic of Turkey; nationality and passport number (national identification number if applicable) for other nationalities.
• Permanent address or business address for notifications,
• E-mail address, phone and fax number if applicable to the notification
• Subject
Information and related documents should be attached to the application.
Kanat Boya shall respond to the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, in case the action in question requires an additional cost, the fee in the tariff determined by the Board may be charged.
Kanat Boya may accept the request or reject it by explaining the reason and informs the data subject in written or electronically. If the request in the application is accepted, Kanat Boya shall fulfill the requirements as soon as possible and inform the data subject. If the application is caused by the error of Kanat Boya, the fee shall be refunded to the data subject.
If the application is rejected, the response is insufficient or the application is not responded in due time; the data subject has the right to make a complaint to the Board within thirty days from the date of receipt and, in any case, within sixty days from the date of application.
6. Data Security
Kanat Boya has to take all necessary administrative and technical measures to prevent personal data from being processed and accessed unlawfully, to ensure the protection of personal data and the appropriate level of security.
In the case of redirecting to other sites or applications through the website, Kanat Boya does not have information about the compliance of the directed sites and applications with the legislation for the protection of personal data and is not under any responsibility for their privacy policies and contents.
By using the Website, the Online Visitor declares that he/she has read all the conditions written in this informative text and is informed about the processing of his/her data.