PDPL
1. Purpose and Scope
These Privacy and Personal Data Protection Principles ("Principles") are published by SİBER YAPI ELEKTRONİK ELEKTRİK VE OTOMASYON SİSTEMLERİ SAN. VE TİC. A.Ş. (referred to as "SİBER YAPI", "Company" or "Data Controller") regarding the protection of personal data and determines the principles of personal data processing regarding the processing of personal data belonging to Customer, Prospective Customer, Prospective Employee, Online Visitor, Member, Prospective Dealer ("Person Groups") and aims to enlighten these groups of persons.
2. Principles Regarding the Processing of Personal Data
As SİBER YAPI, we process your personal data within the framework of the following principles as Data Controller.
2.1 Processing in Accordance with the Law and the Rule of Honesty
In the processing of your personal data, we act in accordance with the principles introduced by legal regulations and the general trust and honesty rule.
2.2 Ensuring Personal Data is Accurate and, Where Necessary, Up-to-Date
Taking into account your legitimate interests, periodic checks and updates are made to ensure that the processed data are accurate and up-to-date, and necessary measures are taken accordingly. In this context, systems to check the accuracy of personal data and to make the necessary corrections are created within the body of SİBER YAPI.
2.3 Processing for Specific, Explicit and Legitimate Purposes
Your personal data is processed based on clear, specific and legitimate data processing purposes.
2.4 Being Relevant, Limited and Proportionate to the Purpose for which they are Processed
Your personal data is processed in a measured, purpose-related and limited manner in order to achieve the foreseen purpose / objectives and the processing of personal data that is not related to the realization of the purpose or is not needed is avoided.
2.5 Retention for the Period Stipulated in the Relevant Legislation or Required for the Purpose for which They Are Processed
Your personal data is only kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed. In this context, first of all, it is determined whether a period is foreseen for the storage of personal data in the relevant legislation, if a period is determined, this period is acted in accordance with, and if a period is not determined, the personal data is stored for the period required for the purpose for which they are processed. In the event that the period expires or the reasons requiring processing disappear, in the absence of a legal reason that allows them to be processed for a longer period of time, your personal data is deleted, destroyed or anonymized in accordance with the Personal Data Storage and Destruction Policy of SİBER YAPI.
3. Conditions for Processing Your Personal Data
Your personal data is processed by SİBER YAPI within the framework of the following conditions.
3.1 Explicitly Stipulated by Law
In cases where the laws explicitly stipulate that personal data will be processed, your personal data may be processed.
3.2 Failure to Obtain the Explicit Consent of the Person Concerned Due to Actual Impossibility
Your personal data may be processed if it is mandatory to process the personal data in order to protect the life or body integrity of the relevant person or another person who is unable to disclose his/her consent due to actual impossibility or whose consent cannot be recognized as valid.
3.3 Direct Involvement in the Establishment or Performance of the Contract
Provided that it is directly related to the establishment or performance of the contract, your personal data may be processed if it is necessary to process the personal data of the parties to the contract.
3.4 Fulfillment of its Legal Obligation by SİBER YAPI
Your personal data may be processed if the processing is mandatory in order to fulfill the legal obligations as the data controller.
3.5 Public Disclosure of Personal Data
If your personal data is made public by you, it may be processed.
3.6 Data Processing is Mandatory for the Establishment or Protection of a Right
Your personal data may be processed if data processing is mandatory for the establishment, use or protection of a right.
3.7 Processing of Data Based on Legitimate Interest
If data processing is necessary for the legitimate interests of SİBER YAPI, your personal data may be processed.
3.8 Processing Based on Explicit Consent
In cases where your personal data cannot be processed based on any of the conditions specified in these Principles, it is processed based on explicit consent.
4. Categorization of Personal Data
|
Data Subject |
Data Category |
Data Types |
|
Data Subject |
Data Category |
Data Types |
|
Employee Candidate |
Identity - Personal |
Name-Surname, Gender, Date of Birth, Place of Birth, Marital Status, Nationality, Picture
|
|
Communication |
Address, Email, Phone / Mobile Phone
|
|
|
Professional Experience
|
Title, Profession Code, Education Status, Diploma and Graduation Information
|
|
|
Personal Development, Skills, Habits and hobbies
|
Foreign language knowledge, computer skills, training programs (courses, seminars, etc.)
Smoking information,
|
|
|
Transaction Security
|
IP Address, Website Login, Exit and Navigation Information, Password and Password Information
|
|
|
Personal Data of Special Nature
|
Personal Health Information, Association membership information, Conviction information
|
|
|
Customer
|
Identity
|
Name-Surname, Gender, Turkish Identity Number, Date of Birth, Place of Birth, Marital Status,
|
|
Financial Information
|
Invoice, financial and debit information, credit rating, credit card and debit card information, branch code, account number bank information
|
|
|
Transaction Security
|
IP Address, Website Login, Exit and Navigation Information, Password and Password Information
|
|
|
Communication
|
Address (home), Email, Phone / Mobile Phone
|
|
|
Lead
|
Identity
|
Name-Surname, Signature
|
|
Communication
|
Address (home), Email, Phone / Mobile Phone
|
|
|
Online Visitor-
Member- Prospective Dealer
|
Identity
|
Name-Surname
|
|
Communication
|
Address (home, work), Email, Phone / Mobile Phone
|
|
|
Transaction Security
|
IP Address, Website Login, Exit and Navigation Information, Password and Password Information
|
5. Purposes of Processing Personal Data
Within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698, personal data can be processed for the following purposes according to the relevant person group.
5.1 Employee Candidate
Employee candidate personal data may be processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698 for the purposes of planning and execution of human resources processes, carrying out personal activities, fulfilling obligations arising from legislation, planning and execution of benefits, and carrying out personnel procurement processes.
5.2 Customer
Customer personal data, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698, execution of goods and services procurement processes, execution of goods and services after-sales support services, execution of goods and services sales processes, execution of goods and services production and operation processes, execution of company / product / services loyalty processes, execution of audit / ethical activities, execution of access authorizations, conducting activities in accordance with the legislation, carrying out financial and accounting affairs, following up and conducting legal affairs, conducting internal audit / investigation / intelligence activities, following up requests and complaints, conducting and supervising business activities, determining the location in accordance with the relevant legislation in case of urgent assistance call and sharing processes with the competent authorities, receiving and evaluating suggestions for the improvement of business processes, ensuring business continuity activities, execution of customer relationship management processes, execution of activities for customer satisfaction, execution of marketing analysis studies, execution of advertising / campaign / promotion processes, execution of communication activities, execution of development of products and services, execution of award and lottery transactions.
5.3 Lead
Prospective Customer personal data, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698, to carry out the necessary studies for the realization of the commercial activities carried out by the Company and to carry out the related business processes, to carry out the necessary studies and related business processes to benefit from the products and services offered by the Company, to recommend and promote the products and services offered by the Company by privatizing them planning and execution of activities, planning and execution of customer relationship management processes.
5.4 Online Visitor/Member/Prospective Reseller
Online Visitor, Member and Candidate Dealer personal data may be processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law No. 6698 for the purposes of conducting marketing analysis studies, conducting advertising / campaign / promotion processes, conducting communication activities, developing products and services, fulfilling legal obligations.
6. Transfer of Personal Data
Your personal data; to our business partners and dealers, suppliers, subsidiaries, group companies, legally authorized public institutions and private persons, these Principles 3. and 5. It may be transferred in a limited manner within the framework of the principles and purposes set forth in the article and the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698.
7. Method and Legal Reason for Collecting Personal Data
Your personal data transmitted electronically by SİBER YAPI is processed as follows according to the relevant person groups.
7.1 Employee Candidate
Employee Candidate personal data is defined in Article 5 of the Law No. 6698 in the context of the employment contract that is likely to be established "provided that it is necessary to process the personal data of the parties to the contract provided that it is directly related to the establishment or performance of a contract", "it is mandatory for the data controller to fulfill its legal obligation", "provided that it does not harm the fundamental rights and freedoms of the data controller, the data processing for the legitimate interests of the data controller is processed automatically by filling out the application form in electronic environment, filling out the physical form, through call center operations, by taking it from the person personally or from the third party as part of the data recording system.
7.2 Customer
Customer personal data, in the context of the subscription agreement in Article 5 of the Law No. 6698, "provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract", "it is mandatory for the data controller to fulfill its legal obligation", "provided that it does not harm the fundamental rights and freedoms of the data controller, the data processing is mandatory" legal Based on the reasons, it is processed automatically by filling out the application form in electronic environment, by filling out the physical form, by calling center operations, by taking it from the person personally or from the third party as part of the data recording system.
7.3 Lead
Candidate Customer personal data, based on the legal reasons stated in Article 5 of the Law No. 6698 "being made public by the person concerned", "data processing is mandatory for the establishment, use or protection of a right", "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject", "being mandatory for the data controller to fulfill its legal obligation", It is processed automatically by filling out the application form in electronic environment, by filling out the physical form, by calling center operations, by taking it from the person personally or from the third party as part of the data recording system.
7.4 Online Visitor/Member/Prospective Reseller
Online Visitor, Member and Candidate Dealer personal data, in accordance with Article 5 of the Law No. 6698, within the context of the membership agreement, "provided that it does not harm the fundamental rights and freedoms of the person concerned, data processing is mandatory for the legitimate interests of the data controller" and "it is mandatory for the data controller to fulfill its legal obligation", by filling out the application form in electronic environment and filling out the physical form, Through call center operations, it is processed automatically by receiving it from the person personally or from the third party as part of the data recording system.
8. Security of Personal Data
8.1 In order to ensure the security of personal data and to prevent unlawful processing, SİBER YAPI takes reasonable measures to prevent unauthorized access risks, accidental data loss, intentional deletion of data or damage to data.
8.2 All necessary technical and physical measures are taken to prevent others from accessing the personal data from those authorized to access it. In this context, the authorization system is designed in such a way that no one can access more personal data than necessary.
8.3 SİBER YAPI, in its own institution or organization, carries out and has the necessary audits carried out in order to ensure the implementation of the provisions of the Law No. 6698.
9. Commitments Regarding Third-Party Personal Data
The personal information related to the 3rd persons, transmitted by the Person Groups, is accepted by the Person Group and consent is given that it can be processed by SİBER YAPI. The Relevant Person Group also undertakes to provide the necessary information and obtain the necessary permissions in accordance with the Law on the Protection of Personal Data No. 6698 for the persons and their information transmitted. Otherwise, the damages that may occur will remain with the relevant Person Group.
10. Application Procedures and Principles
As a person concerned, Article 11 of the Law No. 6698, which regulates the rights of the person concerned. Regarding your requests within the scope of the article, within the conditions determined in accordance with the "APPLICATION FORM FOR THE PROTECTION OF PERSONAL DATA OF THE PERSON (PERSONAL DATA OWNER) RELATED TO CYBER CONSTRUCTION", in person or with a digital signature accepted by wet-signed or accepted digital signature, in writing to Ferhatpaşa Mah. Yeditepe Cad. No: 68 Ataşehir/İSTANBUL address through the Notary Public and by the Registered Electronic Mail (KEP) to be made to the address of siberyapi@hes01.kep.tr and info@siber.com.tr You can apply to SİBER YAPI by e-mail created to include a mobile signature / e-signature to be made to the e-mail address. PERSON CONCERNED ABOUT CYBER YAPI (PERSONAL DATA OWNER) APPLICATION FORM FOR THE PROTECTION OF PERSONAL DATA www.siber.com.tr can be accessed from the website or you can request it directly from the contact mail.
In this context, the relevant person summarizes;
- To learn whether personal data is processed or not,
- If their personal data has been processed, to request information about it,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred at home or abroad,
- Requesting the correction of personal data if it is incomplete or incorrectly processed,
- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation,
- Requesting to notify third parties to whom personal data are transferred,
- To object to the occurrence of a result against the person himself by analyzing the processed data exclusively by means of automated systems,
- To request the elimination of the damage in case of damage due to unlawful processing of personal data,
rights
