© 2017 Özaltın Holding All Rights Reserved
POLICY ON THE PROTECTION AND PROCESSING OF PERSONAL DATA OF THE ÖZALTIN İNŞAAT TİCARET VE SANAYİ ANONİM ŞİRKETİ
1.1. INTRODUCTION
Protection of personal data is among the most important priorities of the Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi (the “Company”). Within the framework of this Policy on the Protection and Processing of Personal Data of the Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi (the “Policy”), the principles adopted in performing the personal data processing activities by our Company, and the basic principles adopted in terms of the compatibility of the data processing activities with the regulations within the Law on Protection of Personal Data numbered 6698 (the “Law”) are explained and thusly our Company provides the necessary transparency by informing the owners of the personal data. With the full awareness of our responsibility in this regard, your personal data is processed and protected within the scope of this Policy.
The activities that our Company conducts regarding protection of the personal data of our employees are governed under the Policy on the Protection and Processing of Personal Data of the Employees of the Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi which is penned down parallel to the principles within this Policy.
1.2. SCOPE
This Policy is about all personal data of the individuals other than the employees of our Company who are processed through automatic or non-automatic means, provided that they are part of a data recording system. Detailed information regarding the aforementioned owners of the personal data may be accessed from the Appendix 2 of this Policy (“Appendix 2 – Owners of Personal Data”).
1.3. APPLICATION OF THE POLICY AND THE RELATED REGULATIONS
The legal regulations will primarily find an area for application that are in effect regarding the processing and protection of the personal data. In the event that there is a discrepancy between the regulations that are in effect and the Policy, our Company accepts that the regulations in effect would find an area for application. The Policy sets the rules that are determined by the related regulations by embodying them within the scope of the applications of the Company.
1.4. ENFORCEMENT OF THE POLICY
This Policy, issued by our Company is dated as of 22.11.2019 In the event that part of or entirety the articles of the Policy are renewed, the effective date of the Policy will be updated. The Policy is published at the website of our Company (GDPR Policy) and submitted for the access of the related persons upon the request of the owners of the data.
2.1. PROVIDING SECURITY OF THE PERSONAL DATA
In accordance to the 12th Article of the Law, our Company takes the necessary measures to prevent the disclosure, access, transfer of the data against the law or the security breaches that might take place in other ways in accordance to the characteristics of the data to be protected. In this scope, our Company takes the administrative measures and conducts inspections or have these inspections made regarding maintaining the necessary security level in accordance to the guidelines prepared by the Board of Protection of Personal Data of our Company (the “Board”).
2.2. PROTECTION OF PERSONAL DATA WITH SPECIAL CHARACTERISTICS
Special importance is attached to the personal data which is considered sensitive due to the risk of causing unjust personal circumstances and discrimination when the data is processed against the law. This “personal data with special characteristics” is the data containing race, ethnic
origin, political orientation, philosophical beliefs, religion, sectarian origin or other beliefs, attire, membership in associations, foundations or unions, health, sexual orientation, criminal conviction, and security measures alongside with biometric and genetic data.
Within this scope, the technical and administrative measures taken by our Company for the protection of the personal data are implemented with care in terms of the personal data with special characteristics and the necessary inspections are provided within our Company.
Detailed information regarding processing the personal data with special characteristics may be found in section 3.3 of this Policy.
2.3. INCREASING THE AWARENESS OF THE BUSINESS UNITS REGARDING PROTECTION AND PROCESSING OF PERSONAL DATA AND INSPECTION OF THE BUSINESS UNITS
Our Company provides the necessary training for the business units to increase the awareness and prevention of unlawful processing and unauthorized access to data and providing the protection of the data.
Our Company establishes the necessary systems for creating the awareness regarding protection of the personal data of the current and the new recruited employees and works with the consultants in the event that a need arises regarding the subject matter. In this regard, our Company evaluates the participation into the related training, seminars and informational meetings and arranges new training sessions parallel to the updating of the related regulations.
3.1. PROCESSING PERSONAL DATA IN ACCORDANCE TO THE PRINCIPLES SET FORTH IN THE REGULATIONS
3.1.1. Processing in Accordance to the Law and the Rule of Honesty
The personal data is processed in accordance to the rule of general trust and honesty in a way that the basic rights and freedoms of the individuals are not harmed. Within this framework, personal data are processed to the extent required by the business activities of our Company and limited to these.
3.1.2. Providing Accuracy and Currency of the Personal Data When Needed
Our Company takes the necessary measures for the personal data to be accurate and current for the duration of their processing and establishes at regular intervals the necessary mechanisms regarding the accuracy and currency of the personal data.
3.1.3 Processing Data for Specific, Clear and Legitimate Purposes
Our Company clearly reveals the purposes for processing the personal data and also processes the personal data in regards to the business activities within the scope of the purposes related to these activities.
3.1.3. Being Connected, Limited and Measurable With the Purpose for Which the
Personal Data Is Processed
Our Company collects the personal data only such as to and to the extent that is required by the business activities and processes the personal data by being limited by the determined purposes.
3.1.4. Maintaining the Personal Data For The Amount Of Time Stipulated In the Related
Regulations or For the Purpose for Which the Personal Data Is Processed
Our Company maintains the personal data for the amount of time that is necessary for the purpose for which the personal data is processed and for the amount of minimum time stipulated in the related legal regulations. Within this scope, our Company initially determines whether a time frame is stipulated for keeping the personal data in the relevant regulations and if a time frame is stipulated, our Company acts accordingly. If there is no legal time frame, the personal data is kept for the duration of the time which is required for the purpose for which the data is processed. The personal data is destroyed in accordance to the periodical data destruction times at the end of the determined time for keeping the data or in accordance to the application of the owner of the data and with the determined destruction methods (erasure and/or destruction and/or anonymization).
3.2. CONDITIONS FOR PROCESSING PERSONAL DATA
Except providing express consent by the owner of the personal data, the basis for processing the personal data may either be only one of the conditions indicated below or more than one condition may be the basis for the activity of processing the same personal data. In the event that the processed data is personal data with special characteristics, the conditions within
Article numbered 3.3 of this Policy (“Processing Personal Data with Special Characteristics”) will be implemented.
(i) Having Express Consent of the Owner of the Personal Data
One of the conditions of processing personal data is the express consent of the owner of the data. The express consent of the owner of the personal data must be stated regarding a specific subject matter based on being informed and by free will.
In the event of existence of personal data processing conditions provided below, the personal data will be able to be processed without having the need for the express consent of the owner of the data.
(ii) Express Stipulation in the Laws
In the event that the personal data owner is expressly stipulated in the law, namely in the event that there is an express term in the related law regarding processing the personal data, the existence of this data processing condition may be considered.
(iii) Failure to Obtain the Express Consent of the Related Individual Due to Actual Impossibility
In the event that it becomes mandatory to process the personal data for the purpose of protecting the life or the bodily integrity of the individual, who is unable to state his/her consent due to actual impossibility or whose consent would not be recognized as valid, the personal data owner will be able to be processed.
(iv) Having a Direct Relationship with the Establishment or Enforcement of an Agreement
Provided that it is directly related to the establishment or enforcement of an agreement of which the owner of the data is a party, in the event that the processing of the personal data is necessary, this condition will be able to be deemed as fulfilled.
(v) Performance of the Legal Obligation by the Company
In the event that it becomes mandatory to process the data for our Company to fulfill its legal obligations, the personal data owner will be able to be processed.
(vi) Publicization of the Personal Data by the Owner of the Data
In the event that the owner of the data publicizes his/her personal data, the related personal data will be able to be processed by being limited by the purpose of publicization.
(vii) Having Mandatory Data Processing for the Purpose of Establishment or Protection of a Right
In the event that it becomes mandatory to process the data for establishment, use or protection of a right, the personal data owner will be able to be processed.
(viii) Having Mandatory Data Processing for the Legitimate Interest of our Company
Provided that the basic rights and freedoms of the owner of the data are not infringed, in the event that it becomes mandatory to process the data for the legitimate interests of our Company, the personal data owner will be able to be processed.
3.3. PROCESSING PERSONAL DATA WITH SPECIAL CHARACTERISTICS
The personal data with special characteristics is processed by our Company in accordance to the principles indicated in this Policy by taking all administrative and technical measures including the methods to be determined by the Board in the event of existence of the following conditions:
(i) Personal data with special characteristics other than health and sexual orientation data will be able to be processed without seeking the express consent of the owner of the data in the event that it is expressly stipulated in the laws, namely in the event that there is an express term in the law regarding processing the personal data. Otherwise, the express consent of the owner of the data will be obtained.
(ii) Personal data with special characteristics regarding health and sexual orientation will be able to be processed without seeking the express consent by the persons who are under the confidentiality obligation or by the authorized institutions and organizations for the purposes of protecting public health, preventive medicine, execution of medical diagnosis, treatment and care services, planning and managing the health services and financing.
3.4. INFORMING THE OWNERS OF THE PERSONAL DATA
In accordance to the 10th Article of the Law and the secondary regulations, as the responsible entity for the personal data, our Company informs the owners of the personal data regarding who processes the data for which purposes, and who shares the data with whom for which purposes, by which methods the data is collected and its legal reason, and the rights that the owners of the data have in regards to processing the personal data.
3.5. TRANSFER OF THE PERSONAL DATA
Our Company may transfer the personal data and the personal data with special characteristics of the owners of the personal data to the third persons (public institutions, suppliers and the like) by taking the necessary security measures for the purposes of personal data processing that are in accordance to the Law. In this regard, our Company acts in accordance to the
regulations stipulated in the 8th Article of the Law. Additional information may be obtained from Appendix 4 of this Policy (“Appendix 4 – Third Persons to whom the Personal Data Is Transferred by Our Company and the Purposes of Transfer”) in this regard.
3.5.1. Transfer of the Personal Data
Even if the owner of the personal data does not have express consent, in the event that one or more than one condition indicated below exists, the personal data will be able to be transferred to the third persons by exercising due care by our Company and by taking all necessary measures including the methods stipulated by the Board.
legitimate interests.
In addition to the conditions above, the personal data will be able to be transferred to the foreign countries which are announced by the Board as having the sufficient protection
(“Foreign Country Having Sufficient Protection”) in the event of existence of any one of the conditions above. In the event of not having the sufficient protection, the data will be able to be transferred to the foreign countries in regards to the data transfer conditions stipulated in the regulations where the data supervisor in Turkey and in the related foreign country undertakes the sufficient protection in writing and to the foreign countries which the Board has approved
(“Foreign Country Having the Data Supervisor Undertaking the Sufficient Protection”).
3.5.2. Transfer of the Personal Data with Special Characteristics
The personal data with special characteristics is transferred by our Company in accordance to the principles indicated in this Policy by taking all administrative and technical measures including the methods to be determined by the Board in the event of existence of the following conditions:
(i) Personal data with special characteristics other than health and sexual orientation data will be able to be processed without seeking the express consent of the owner of
the data in the event that it is expressly stipulated in the laws, namely in the event that there is an express term in the law regarding processing the personal data. Otherwise, the express consent of the owner of the data will be obtained.
(ii) Personal data with special characteristics regarding health and sexual orientation will be able to be processed without seeking the express consent by the persons who are under the confidentiality obligation or by the authorized institutions and organizations for the purposes of protecting public health, preventive medicine, execution of medical diagnosis, treatment and care services, planning and managing the health services and financing.
In addition to the conditions above, the personal data will be able to be transferred to the Foreign Countries Having Sufficient Protection in the event that any one of the conditions above exists. And in the event that the sufficient protection does not exist, the personal data will be able to be transferred to the Foreign Countries Having the Data Supervisor Undertaking the Sufficient Protection in regards to the data transfer conditions stipulated in the regulations.
The personal data is processed by our Company by informing the related persons in accordance to the 10th Article of the Law and the secondary regulations, in line with the personal data processing purposes of our Company based on and limited by at least one of the conditions of processing personal data indicated in the 5th and 6th Articles of the Law in accordance to the general principles indicated in the Law, primarily the principles indicated in the 4th Article of the Law regarding processing personal data. Within the framework of purposes and conditions indicated in this Policy, information on the categories of processed personal data and detailed information on the categories may be accessed in Appendix 3 of this Policy (“Appendix 3 – Categories of Personal Data”).
Detailed information regarding the mentioned purposes of processing personal data is in
Appendix 1 of this Policy (“Appendix 1 Purpose of Processing Personal Data”).
Our Company keeps the personal data for the duration of time which is necessary for the purpose for which the data is processed and the minimum time stipulated in the related legal regulations. Within this scope, our Company initially determines whether a time frame is stipulated for keeping the personal data in the related regulations and if a time frame is stipulated, our Company acts accordingly. If there is no legal time frame, the personal data is kept for the duration of the time which is required for the purpose for which the data is processed. The personal data is destroyed in accordance to the periodical data destruction times at the end of the determined time for keeping the data or in accordance to the application of the owner of the data and with the determined destruction methods (erasure and/or destruction and/or anonymization).
6.1. RIGHTS OF THE OWNERS OF PERSONAL DATA
The owners of the personal data have the following rights:
(1) Learning about whether the personal data is processed or not,
(2) Requesting information regarding processing of the personal data if the personal data is processed,
(3) Learning about the purpose of processing the personal data and whether the personal data is used in accordance to its purposes or not,
(4) Learning about the third persons to whom the personal data is transferred domestically and internationally,
(5) Requesting the correction of the personal data in the event that the personal data is processed incompletely or wrongly and requesting the notification of the procedure conducted in this scope to the third persons to whom the personal data is transferred,
(6) Requesting the erasure or destruction of the personal data in the event that the reasons that require the processing of the personal data are eliminated despite the fact that the personal data is processed in accordance to the Law and terms of other Laws, and requesting the notification of the procedure conducted in this scope to the third persons to whom the personal data is transferred,
(7) Objecting to the emergence of an outcome which is against the individual by analyzing the processed data exclusively through the automated systems,
(8) Requesting elimination of the losses in the event that losses are incurred due to processing of the personal data against the law.
6.2. USE OF THE RIGHTS BY THE OWNER OF PERSONAL DATA
The owners of personal data will be able to submit their requests to our Company regarding
their rights listed in Section 6.1 (“Rights of the Owner of Personal Data”) through the methods determined by the Board. In this regard, the owners of personal data may benefit from the Özaltın İnşaat Ticaret ve Sanayi A.Ş. Owner of Data Application Form which may be accessed at the address of http://www.ozaltin.com.tr/veri-sahibi-başvuru-formu-en.pdf
6.3. RESPONDING TO THE APPLICATIONS BY OUR COMPANY
Our Company takes the necessary administrative and technical measures for finalizing the applications to be made by the owner of personal data in accordance to the Law and the secondary regulations.
In the event that the owner of personal data duly submits his/her requests to our Company regarding their rights listed in Section 6.1 (“Rights of the Owner of Personal Data”), our Company will finalize the related request for free as soon as possible and within 30 (thirty) days to the latest according to the nature of the request. However, in the event that the procedure requires an additional fee, a fee will be able to be taken in accordance to the tariff determined by the Board.
APPENDIX 1 – Purpose of Processing Personal Data
|
MAIN PURPOSE (PRIMARY) |
SUB PURPOSE (SECONDARY) |
|
Planning or executing the human resources policies and processes of our Company |
Planning or executing the processes regarding obtaining the applications of employees / internship candidates |
|
Planning or executing the processes regarding obtaining and evaluating the applications of disabled candidate workers |
|
|
Evaluation of the resume information of the employee candidates or internship candidates in terms of the position that already exist in the Company or that may be opened in the future |
|
|
Planning or executing the activities regarding evaluation of and making the necessary interviews with the employee / internship candidates whose applications are received |
|
|
Planning or executing the necessary internal / external communication activities (checking out the references and the like) for placement of the employee candidates or students / interns. |
|
|
Planning or executing the activities for providing legal and technical safety of our Company and the related persons who are in a business relationship with our Company |
Planning or executing the necessary operational activities that are required for providing execution of the Company’s activities in accordance to the Company procedures or the related regulations |
|
Planning or execution of the necessary activities for compatibility with the security policies and procedures of the Company |
|
|
Planning or execution of the activities for creating, inspecting or following up the personnel records of the workers of the subcontractors |
|
|
Planning or execution of the activities that are required to be performed regarding occupational health and safety |
|
|
Planning or execution of the emergency situation or event management processes |
|
|
Ensuring that the data is accurate, singular or up-to- date |
|
|
Planning or execution of the activities for providing and recording the information, documentation and requests demanded from the official institutions or organizations |
|
|
Planning or execution of the internal / external auditing, inspection, investigation or control activities of our Company |
|
|
Planning or execution of the activities regarding providing legal opinions or obtaining legal services |
|
|
Arranging, making and revising the agreements or following up the agreement processes |
|
|
Planning or execution of the network follow up and management activities |
|
|
Providing security of the inventory or resources of the Company |
|
|
Providing security of the Company’s premises or facilities |
|
|
Creating or follow up of the visitor records |
|
Performing the necessary work by our related business units for realization of commercial or operational activities conducted by our Company and the execution of related business processes |
Planning or execution of corporate communication activities |
|
Planning or execution of sponsorship activities |
|
|
Planning or execution of social responsibility or civil society activities |
|
|
Planning or execution of activity / invitation / fair / meeting organizations for promoting our Company. |
|
|
Planning or execution of career days, conferences or other activities regarding providing recognition of our Company in terms of potential employee candidates. |
|
|
Planning or execution of activities regarding business / process / system design, development or improvement |
|
|
Planning or execution of processes regarding creating software regarding information systems, software testing and maintenance alongside with providing information support systems |
|
|
Planning or execution of risk evaluation activities or feasibility studies for selection of potential business partners / suppliers / subcontractors |
|
|
Planning or execution of communication activities regarding procurement of services with the business partners / suppliers of our Company and the workers of the mentioned organizations |
|
|
Planning or execution of activities of performing work / performance follow up of the real person third parties who are in a business relationship with our Company |
|
|
Performance of the studies / controls of the budget or the financial table |
|
|
Planning or execution of purchasing processes |
|
|
Defining, allowing the use or inspection of authority to have access to information by our employees and the third parties. |
|
|
Planning or execution of operation or efficiency processes |
|
|
Execution of activities for providing business continuity |
|
|
Planning or execution of reporting activities in / out of the Company |
|
|
Planning or execution of activities regarding sale or leasing movables / real estate properties owned by our Company |
APPENDIX 2 – Owners of Personal Data
|
CATEGORIES OF PERSONAL DATA OWNERS |
DEFINITION |
|
Visitor |
Real persons who have entered into the physical premises owned by our Company for various purposes or who have visited our internet sites |
|
Third Party |
Third party real persons who are related with the parties who are within the scope of this Policy of our Company for the purpose of providing business transaction security with the parties or to protect the rights of the mentioned persons and to provide interests for them (for instance, family members and relatives, individuals who are subjected to the social responsibility projects, members of the public sector, individuals who provide references for the employee candidates, our former employees and social media users) or other real persons who are not under the scope of this Policy and the Policy for Protection and Processing of the Personal Data of Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi Employees |
|
Employee Candidate |
Real persons who have made a job application to our Company through any means or who have opened their resumes and related information for the inspection of our Company (including internship candidates) |
|
Employees, Shareholders and Representatives of the Organizations with Whom We Cooperate |
Real persons working in the organizations with whom our Company is in any kind of business relationship including the shareholders and representatives of those organizations (including but not limited to business partners, suppliers, group companies, media representatives, celebrities and similar individuals) |
|
Request / Complaint Owner |
Real persons providing opinions / complaints / suggestions and information to our Company, authorized public institutions and organizations in the digital venues regarding our Company or the products or services of our Company |
APPENDIX 3 – Categories of Personal Data
|
CATEGORIES OF PERSONAL DATA |
DESCRIPTION |
|
Identity Information |
Data including information regarding the person’s identity (for instance, full name, Turkish National Identification Number, nationality information, place of birth, date of birth, sex, workplace information, employee number, tax number, title, information such as biography and documentation such as driver’s license, professional identification, id card and passport) |
|
Correspondence Information |
Information regarding the person’s correspondence information (for instance, phone number, address, e-mail fax number) |
|
Location Data |
Information detecting the location of the person regarding emergency situation processes |
|
Information Regarding Family Members and Relatives |
Information regarding the products and services that we offer and the products and services within the operations of our Company or information regarding the family members and relatives of the owner of the personal data for the purpose of protecting the legal and other interests of the Company and the owner of the data |
|
Physical Space Security Information |
Records that are obtained at the entrance of the physical location and during the stay at the physical location and personal data regarding documents (for instance, records obtained at the security point) |
|
Transaction Security Information |
Your personal data processed for providing our technical, administrative, legal and commercial security while conducting our activities (for instance, log records, IP information, identity verification information) |
|
Financial Information |
Personal data requested regarding information, documentation and records indicating all kinds of financial outcome created according to the type of the legal relationship that our Company has established with the owner of the personal data (for instance, data such as bank account number, IBAN number, revenue information, debts / receivables information) |
|
Employee Candidate Information |
Resume information regarding the employees and/or internship candidates who have made a job application to our Company by any means |
|
Personal Data with Special Characteristics |
Persons’ race, ethnic origin, political orientation, philosophical beliefs, religion, sectarian orientation or other beliefs, attire, membership for associations, foundations or unions, health information, sexual orientation, criminal conviction, and security measures alongside with biometric and genetic data |
|
Request / Complaint Management Information |
Personal data regarding obtaining and evaluating all kinds of requests, opinions or complaints directed towards our Company |
|
Audiovisual Data |
Photographs, camera and audio records |
|
Legal Transaction and Compliance Information |
Personal data processed within the scope of determination of our legal receivables and rights and payment of our debts alongside with our legal obligations and compliance with our Company’s policies |
|
Vehicle Information |
Information regarding vehicles that openly belong to a real persons whose identity is or may be determined and may be related with the owner of the data |
|
Management Information |
Personal data, which clearly belongs to a real person whose identity is or may be determined and are processed regarding marketing of our products and services in regards to the usage habits, likes and needs of the owner of the personal data and the reports and evaluations created in the consequence of this processing |
|
Travel Information |
Travel information regarding the customers of our Company or the employees of the third party organizations with whom our Company cooperates (for instance transfer hour and transfer vehicle) |
|
Risk Management Information |
Personal data processed for minimizing risks due to the policies of our Company and the obligations in terms of the regulations |
APPENDIX 4 – Third Persons to whom the Personal Data Is Transferred by Our Company and the Purposes of Transfer
Our Company may transfer the personal data of its customers to the individual categories listed below in accordance to the 8th and 9th Articles of the Law:
(i) Business Partners,
(ii) Suppliers,
(iii) Shareholders,
(iv) Private Law Persons Who Are Legally Authorized,
(v) Public Institutions and Organizations That Are Legally Authorized.
The scope of the persons indicated below to whom the transfer is made and the purposes of the data transfer are indicated below.
|
Persons to Whom the Data Transfer May Be Performed |
Description |
Purpose of Data Transfer |
|
Business Partner |
Data supervisor parties with whom our Company has established a business partnership.Business partner banks for the purpose of making the payments . |
Limited by the purpose of providing the performance of the purposes of establishing the business partnership |
|
Supplier |
Parties that provide services to our Company in regards to the data processing purposes and instructions of our Company within the scope of performance of the business activities of our Company |
Limited by the purpose of providing necessary services for performing the business activities of our Company procured from outside sources through the suppliers by our Company |
|
Our Shareholders |
Özaltın Holding A.Ş. which is authorized in regards to designing the strategies and inspection activities regarding the commercial activities of our Company in accordance to the terms of the related regulations |
Limited by providing maintenance of the corporate communication, strategic planning, human resources, business and inspection activities regarding the commercial activities of our Company |
|
Public Institutions and Organizations That Are Legally Authorized |
Public institutions and organizations that are authorized to obtain information and documentation from our Company in accordance to the terms of the related regulations |
Limited by the purposes that the related public institutions and organizations requested within their legal authority |
|
Private Law Persons Who Are Legally Authorized |
Organizations and institutions that are established in accordance to certain conditions determined by the Law in accordance to the terms of the related regulations and maintain their activities within the framework determined by the Law (for instance, independent auditors) |
Limited by the subject matters that are under the scope of the activities that the related private organizations and institutions have been carrying out |
|
Organizations with Whom Reference Sharing Is Made In Terms of Human Resources |
Potential employees that are given a reference based on the approval of our employees who quit the work or the new employees with whom information sharing is made within the scope of occupational health and safety |
Limited by the purpose of sharing the necessary documentation within the scope of the reference and the regulations |
** In the event that there is a discrepancy between the version of this policy in Turkish in which this policy is prepared and its translated version into any other language, the Turkish version must be taken into consideration.
**This document may not be duplicated and distributed without written approval of the Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi.
COOKIE POLICY
ÖZALTIN İNŞAAT TİCARET VE SANAYİ A.Ş.
Clarification Text for Web Site Cookies
(“Cookie Clarification Text”)
As Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi (“Özaltın” or “Company”), we benefit from certain technologies like cookies, pixels, GIFs, etc. (“cookies”) in order to improve your experience during your use of or visit to our web sites (“site”) or all our other similar online or offline media (the media as a whole will be referred to as “Platforms” hereinafter) we offer for your use in the digital environment.
The use of these technologies is realized in a manner compliant with the legislation to which we are subject, in particular the Law no. 6698 on the Protection of Personal Data (“PDP Law”).
The aim of this Cookie Clarification Text is to provide you with information about the cookies being used and the processing of the personal data during the use of the Platforms. In this Clarification Text, we would like to explain you what cookies we use on the Platforms, for what purposes we use the cookies and how you can control these cookies.
As Özaltın, we may abandon desist the use of cookies on our Platforms, we may change the types or functions of the same cookies or we may add new cookies to our Platforms. Therefore, we reserve the right to change the provisions terms of this Cookie Clarification Text at any time. All kinds of change realized on the Current Cookie Clarification Text shall come into force upon the issuance of the same in the site or any public medium. You can find the last update date at the end of the text.
You can access the detailed information about the purposes of processing of your personal data by our Company in Özaltın İnşaat Ticaret ve Sanayi Anonim Şirketi Personal Data Protection and Processing Policy available at (GDPR Policy)
Methods and Legal Reasons for Collecting Your Personal Data
Your personal data are collected via cookies in the electronic medium within the scope of your visit to our web site based on the legal grounds related to the legal interest of our Company. The marketing and advertising activities by means of targeting and profiling are realized only in case your explicit consent is present. Your personal data collected may also be processed for the purposes specified in this Cookie Clarification Text within the scope of the personal data processing requirements and purposes specified in Articles 5 and 6 of the Law.
Parties to Whom Your Personal Data May Be Transferred and Purposes of Transfer
As Özaltın, we may share your personal data within the scope of Cookie Clarification Text with our suppliers, our business partners and public/private institutions and organizations authorized by law, in a manner limited to the achievement of the aforementioned purposes and compliant with the legislation.
What Cookies Are Used For What Purposes?
As Özaltın, we use cookies for various purposes in our site and we process your personal data via these cookies. These purposes are mainly the following:
Cookies Used in Our Site
You can find below the different types of cookies we use in our site. Both first party cookies placed by the site you are visiting) and third party cookies placed by the servers other than the site you are visiting) are used in our site.
Mandatory Cookies
The use of certain cookies is essential for the correct operation of our site. For example, the authentication cookies enabled when you log on to our site ensure that your currently active session is maintained while you move from one page to another in our site.
Functionality and Preference Cookies
These cookies remember your preferences and choices on the site to enable the services provided in our site to be customized for you. For example, the cookies enable us to remember your language selection or the font size you chose while reading a text on our site.
Social Media Cookies
These cookies enable the collection of information about your uses of social media. For example, cookies may be employed to use the information pertaining to your Facebook/Twitter/Youtube/Linkedin/Instagram accounts in order to generate customized advertisements or conduct market researches.
Performance and Analysis Cookies
Owing to these cookies, we are able to improve the services we provide to you by conducting the analysis of your use of our site and by conducting the performance analysis. For example, owing to these cookies, we are able to identify the pages most frequently displayed by our visitors, whether our site runs in the required manner and the possible problems.
Targeting or advertising cookies
We use the cookies for conducting the product and service promotions in our site or in the media outside our site. Moreover, we may engage in collaboration with some of our business partners to carry out advertising and promotion addressed to you within or outside our site. For example, the cookies may be used in order to monitor whether you click on an advertisement you see in our site and whether you use the service in the site you are guided to by an advertisement that has grabbed your attention.
How Can I Control the Use of Cookies?
The preferences of our visitors and users constitute the basis for the use of cookies and similar technologies. On the other hand, it is necessary to use the cookies that are indispensable for the operation of the Platform. Additionally, we would like to remind that some of the functions of the Platform could become partially or entirely out of operation in case certain cookies are disabled.
The information on how you could manage your preferences about the cookies used on the Platform is provided below:
|
Adobe Analytics |
|
|
AOL |
https://help.aol.com/articles/restore-security-settings-and-enable-cookie-settings-on-browser |
|
Google Adwords |
|
|
Google Analytics |
|
|
Google Chrome |
http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647 |
|
Internet Explorer |
https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies |
|
MozillaFirefox |
|
|
Opera |
|
|
Safari: |
What Are Your Rights As the Data Owner?
Pursuant to Article 11 of the PDP Law, the data owners are entitled to
You may communicate your applications concerning your rights listed above to our Company, by filling in the Data Owner Application Form accessible via http://www.ozaltin.com.tr/veri-sahibi-başvuru-formu-en.pdf. Your applications will be brought to conclusion free of charge within the shortest time possible and in thirty days at the latest according to the nature of your request; however, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board in case the transaction warrants a separate cost.