GÜBRETAŞ MADEN YATIRIMLARI A.Ş. PRIVACY POLICY AND CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA

 


IDENTITY OF THE DATA CONTROLLER
Title Gübretaş Maden Yatırımları AŞ
Internet Address https://www.gubretasmaden.com
Telephone Number + 90 (312) 711 06 11
E-Mail Address info@gubretasmaden.com
Address Mustafa Kemal Mah. Dumlupınar Bulvarı No: 266/95 Tepe Prime Business Centre - A Blok / Floor: 17 Çankaya / ANKARA

  

GENERAL PRINCIPLES OF DATA PROTECTION

We process your personal data in accordance with the general principles of data protection law. These principles are:

          . Transparent, lawful and fair processing of personal data,

          . Processing of personal data for specific, clear and legitimate purposes,

          . Processing of personal data limited to specified purposes only,

          . Keeping it accurate and up to date,

          . Keeping the data for the relevant period for processing purposes,

          . Safe storage.

WHAT KIND OF DATA DO WE COLLECT?

Within the scope of our activities carried out as Gübretaş Maden Yatırımları AŞ (“Company”), we process your personal data in accordance with the general principles stipulated in Article 4 of the Personal Data Protection Law (“KVKK”) and Article 5 of the General Data Protection Regulation. We operate as. The personal data we process are as follows;

          • Your identity information (name, surname, trade name for sole proprietorships, signature/signature circular, TR ID number, gender, date of birth),

          • Your contact information (Phone number, e-mail address, business address and residence address information, residential area information, telephone call information),

          • Your professional experience information (duty/title, position, unit worked, institution worked, CV, education information),

          • Your financial information (Bank account-IBAN information, amount information, invoice information, tax office information, receivable-debit information, reconciliation information),

          • Your marketing information (Contact preference information, cookie records),

          • Your legal transaction information (Information contained in correspondence with judicial authorities, personal data in case-enforcement files, contract information, consent information),

          • Your customer transaction information (Call center records, check-note information, order information, request information),

          • Your request and complaint information (Request, complaint and suggestion content information, social media account information),

WHERE DO WE GET THIS DATA?
The data we process;

          • By automatic means through the internet address https://www.gubretasmaden.com and the forms at this address,

          • Non-automatic and partially automatic means through lawsuit/enforcement files and notifications,

          • Non-automatic means with the documents you have sent to us,

          • Non-automatic and partially automatic means from relevant public institutions and organizations,

          • By e-mail and partially automated means,

          • Verbally through non-automatic means,

          • Non-automatic means through documents physically transmitted to us,

          • With the applications made, partially automatic and non-automatic means,

          • Non-automatic means through contracts,

          • Partially automated means through accounting systems,

We are getting it.

WHAT ARE OUR PURPOSES IN PROCESSING THIS DATA AND WHAT LEGAL CONDITIONS DO WE RELY ON?
The data processing conditions stipulated within the scope of KVKK are as follows;

          • Existence of explicit consent (“Art.5/1, Art.6/3-a”).

          • It is clearly foreseen in the laws (“Art.5/2-a, Art.6/3-b”).

          • It is necessary for the protection of the life or physical integrity of the person who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity (“Art. 5/2-b”).

          • It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract (“Art.5/2-c”).

          • It is mandatory for the data controller to fulfill its legal obligation (“Article 5/2-ç”).

          • It has been made public by the person concerned (“Art.5/2-d”).

          • Data processing is mandatory for the establishment, exercise or protection of a right (“Article 5/2-e”).

          • It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned (“Article 5/2-f”).

The data processing conditions stipulated within the scope of the General Data Protection Regulation (“GVKT”) are as follows;

          • The data owner consents to the processing of his personal data for one or more specific purposes (“Article 6/1-a”),

          • Processing activity is necessary for the implementation of a contract to which the data owner is a party or for taking steps at the request of the data owner before a contract is concluded (“Art.6/1-b”),

          • The processing activity is necessary for the purpose of compliance with a legal obligation to which the controller is subject (“Art.6/1-c”),

          • Processing activity is necessary to protect the vital interests of the data owner or another natural person (“Art. 6/1-d”),

          • Processing activity is necessary for the performance of a task carried out in the public interest or for the implementation of an official authority given to the controller (“Art. 6/1-e”),

          • Processing is necessary for the purposes of the interests in question, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data outweigh the legitimate interests pursued by a controller or a third party, especially if the data subject is a child. (“art.6/1-f”),

WE REQUEST THESE DATA WE HAVE OBTAINED FROM YOU TO ACHIEVE OUR PURPOSE:
          • Your identity information,

                    • In order to verify your identity,

                              . (KVKK, m.5/2-ç, m.5/2-f) – (GVKT, m.6/1-c, m.6/1-f),

                    • In order to carry out and supervise business activities,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out communication activities,

                              . (KVKK, m.5/2-c, m.5/2-ç, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-c, m.6/1-f),

                    • In order to carry out processes related to payments and payment requests,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to fulfill our legal obligations,

                              . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to follow legal and judicial processes,

                              . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to carry out contract processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to carry out invoicing processes,

                              . (KVKK, m.5/2-c, m.5/2-ç) – (GVKT, m.6/1-b, m.6/1-c)

                    • In order to carry out the withholding tax declaration processes,

                              . (KVKK, m.5/2-ç) – (GVKT, m.6/1-c)

                    • For the purpose of creating current cards and making current reconciliations,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to carry out request and complaint processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your contact information,

                    • In order to carry out and supervise business activities

                               . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out communication activities

                               . (KVKK, m.5/2-c, m.5/2-ç, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-c, m.6/1-f),

                    • In order to fulfill our legal obligations,

                               . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to follow legal and judicial processes,

                               . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to carry out contract processes,

                               . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out invoicing processes,

                               . (KVKK, m.5/2-c, m.5/2-ç) – (GVKT, m.6/1-b, m.6/1-c),

                    • In order to carry out the withholding tax declaration processes,

                               . (KVKK, m.5/2-ç) – (GVKT, m.6/1-c)

                    • In order to carry out processes related to payments and payment requests,

                               . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • For the purpose of creating current cards and making current reconciliations,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out request and complaint processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your professional experience information,

                    • In order to carry out and supervise business activities,

                             . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out communication activities,

                             . (KVKK, m.5/2-c, m.5/2-ç, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-c, m.6/1-f),

                    • In order to carry out contract processes,

                             . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to follow legal and judicial processes,

                             . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • For the purpose of creating current cards and making current reconciliations,

                             . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your financial information,

                    • In order to carry out and supervise business activities

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out processes related to payments and payment requests,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to follow legal and judicial processes,

                              . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to carry out contract processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out invoicing processes,

                              . (KVKK, m.5/2-c, m.5/2-ç) – (GVKT, m.6/1-b, m.6/1-c),

                    • In order to carry out the withholding tax declaration processes,

                              . (KVKK, m.5/2-ç) – (GVKT, m.6/1-c)

                    • For the purpose of creating current cards and making current reconciliations,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your marketing information,

                    • In order to carry out contract processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to carry out communication activities,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out request and complaint processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your legal transaction information,

                    • In order to carry out and supervise business activities

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to fulfill our legal obligations,

                              . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to follow legal and judicial processes,

                              . (KVKK, m.5/2-a, m.5/2-ç, m.5/2-e) – (GVKT, m.6/1-c),

                    • In order to carry out contract processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out invoicing processes,

                              . (KVKK, m.5/2-c, m.5/2-ç) – (GVKT, m.6/1-b, m.6/1-c),

          • Your customer transaction information,

                    • In order to carry out contract processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f)

                    • In order to carry out communication activities,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

                    • In order to carry out request and complaint processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

          • Your request/complaint information,

                    • In order to carry out request and complaint processes,

                              . (KVKK, m.5/2-c, m.5/2-f) – (GVKT, m.6/1-b, m.6/1-f),

We are processing. The data processing conditions we rely on when processing this data are stated in parentheses.

WHO DO WE SHARE DATA WITH?
The personal data we process;

          • Courts and authorized public institutions and organizations in order to follow legal and judicial processes,

          • Authorized public institutions and organizations in order to fulfill our legal obligations,

          • Law offices for the purpose of carrying out legal processes,

          • Banks in the country or abroad, if necessary, for the purpose of carrying out payment processes,

          • Tarım Kredi Holding and group companies, provided that it is necessary to carry out the request and complaint processes and the relevant persons are informed,

          • Independent auditors to carry out audit processes,

          • Relevant suppliers for the purpose of carrying out and auditing business activities,

          • Addressee natural and legal persons in order to carry out the necessary correspondence and communication activities,

We can share it with. We do not share personal data with irrelevant and unauthorized third parties other than specified third parties.

STORAGE AND DESTRUCTION OF PERSONAL DATA

As a company, we process and store your personal data in line with the purpose of processing your personal data, in accordance with general principles in a proportionate and relevant manner for the purpose of processing. We take all kinds of technical and administrative measures for the security of stored personal data and check the compliance with these measures of third parties to whom we transfer your data.

We store your personal data by taking into account factors such as the purpose and reason for processing, the period required by the relevant legislation and our legal obligations. If we no longer need your personal data according to the specified criteria and we are not legally obliged to keep it, we destroy your personal data.

WHAT ARE YOUR RIGHTS UNDER KVKK?

Interested persons can apply to us;

          • Learning whether personal data is processed or not,

          • Requesting information if personal data has been processed,

          • Learning the purpose of processing personal data and whether they are used for their intended purpose,

          • Knowing the third parties to whom personal data is transferred domestically or abroad,

          • Requesting correction of personal data in case of incomplete or incorrect processing and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,

          • Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom the personal data has been transferred,

          • Object to the emergence of a result against the individual by analyzing the processed data exclusively through automatic systems,

          • They have the right to demand compensation for the damage if they suffer damage due to unlawful processing of personal data.

You can submit your requests regarding your rights to the Data Controller in accordance with the Communiqué on Application Procedures and Principles. Your requests will be evaluated and resolved free of charge as soon as possible and within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis. You can also contact us if you would like to get detailed information about your data processing processes.