KIYI TEKNOLOJILERI A.S. PERSONAL DATA PROTECTION POLICY
Pursuant to the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Kıyı Teknolojileri A.S. (the "Company"), in its capacity as data controller, for business purposes; and may be used, recorded, stored, updated, transferred, and/or classified within the framework explained below.
Within this scope, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security in order to protect fundamental rights and freedoms, especially the privacy of private life, and to prevent unlawful processing and access to personal data as required by the applicable laws and regulations on personal data protection.
1. Scope
The target audience of this text consists of all natural persons whose personal data is processed by our Company, excluding our employees and job candidates who have applied to our Company.
2. Processed Personal Data
Personal data processed by us as the data controller includes, but is not limited to, the following:
- Name, surname
- Turkish ID number
- Address
- Phone number
- Email address
- Signature
- Physical premises / security camera records
- Call center / service quality voice records
- Bank account number
- Cookie records
3. Purposes and Legal Grounds for Processing Personal Data
Your personal data shared by you may be processed for the following purposes:
- Enabling you and/or the institutions and organizations you represent to benefit from the products and services offered by our Company
- Determining and implementing our Company's commercial and business strategies
- Carrying out marketing activities
- Carrying out business development and planning activities
- Carrying out communication-oriented administrative operations
- Ensuring physical security and supervision of our Company locations
- Establishing and managing relationships with business partners / customers / suppliers
- Managing contractual processes and financial reconciliations
- Carrying out human resources policies
- Receiving calls to the call center or use of the website
- Ensuring participation in trainings, seminars, or organizations organized by our Company
These data are processed within the legal grounds specified in Articles 5 and 6 of the KVKK.
4. Method of Collection and Storage of Personal Data
Your personal data may be collected verbally, in writing, or electronically through automatic or non-automatic methods via offices, branches, call center, website, social media platforms, mobile applications, and similar channels.
Collected personal data is stored in electronic and/or physical environments, and necessary technical and administrative security measures are taken against unauthorized access, loss, alteration, and unlawful processing.
Your personal data is retained for statutory retention periods or, if no such period is prescribed, for the period required by the purpose of processing. At the end of this period, data is disposed of by deletion, destruction, or anonymization methods.
5. Transfer of Personal Data
Your personal data may be transferred, in compliance with the applicable legislation and limited to the purposes stated above, to the following:
- Authorized persons and organizations acting on behalf of our Company
- Regulatory and supervisory authorities and authorized public institutions
- Business partners, suppliers, contractors, banks, finance and credit institutions
- Persons and organizations from whom tax, legal, and similar consultancy services are received
- Third parties from whom services are received domestically and abroad
Personal data may be transferred accordingly.
6. Your Rights Under KVKK
Pursuant to Article 11 of the KVKK, as a data subject, you have the right to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used in accordance with its purpose
- Know the third parties to whom data is transferred domestically or abroad
- Request correction if it is processed incompletely or incorrectly
- Request deletion or destruction within the scope of Article 7 of the KVKK
- Request notification of these operations to third parties to whom data has been transferred
- Object to the occurrence of a result against you by analysis through automated systems
- Request compensation for damages in case of loss due to unlawful processing
You have these rights.
7. Application Method
Pursuant to Article 13 of the KVKK, in order to exercise your rights stated above, you may submit your request:
- In writing
- Through a notary public
- By other methods determined by the Personal Data Protection Board
You may submit your request to our Company.
In addition, you may send your requests to info@hermes.rent email address with a secure electronic signature.