PERSONAL DATA PROTECTION POLICY
As KAR Cologne, we respect the personal data you share with us and care about the protection of fundamental rights and freedoms, especially the privacy of private life. We would like to inform you in detail about the protection of your personal data you share in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), the way your personal data is collected, the purposes of processing, legal reasons and our mutual rights and obligations.
Your personal data, in the capacity of Data Controller, may be obtained, recorded, preserved, disclosed, transferred to third parties or abroad to the extent permitted by the legislation, or processed in other ways, in accordance with the provisions of the KVKK and within the framework described below.
Collection of Your Personal Data
Your personal data may be collected verbally, in writing or electronically, with automatic or non-automatic methods, in order to fulfill the legal obligations arising from the relevant legislation and to carry out the collection, issuing invoices and order delivery processes.
For What Purpose Your Personal Data Will Be Processed
Personal data before our company; planning and execution of commercial activities, informing authorized institutions and organizations based on the legislation, receiving payment services, delivery of orders, collections on matters that are not directly provided by us and are not in our area of expertise. issuing invoices, resolving consumer complaints, sending commercial electronic messages if you give your explicit consent, planning and executing the necessary audit activities to ensure that the activities are carried out in accordance with our Company's procedures and relevant legislation, planning and executing corporate sustainability activities, carrying out studies for the protection of our company's reputation For the purpose of management of demand and complaint processes, planning and execution of corporate governance and communication activities, legal and honesty rules and related to the purpose for which they are processed, limited and measured, stipulated in the relevant legislation. They will be processed in accordance with the principles of storage for the period necessary for the purpose for which they are processed.
Transfer of Your Personal Data
In order to fulfill the above-mentioned purposes, the personal data obtained by you is kept in accordance with the law and honesty rules and the principles of keeping them in connection with the purpose for which they are processed, limited and measured, as stipulated in the relevant legislation or for the period required for the purpose for which they are processed. or cooperated with domestic/foreign/international, public/private institutions and organizations, companies and our company's consultants or solution partners to other group companies, other authorized institutions and organizations, suppliers or subcontractors, as permitted by the Turkish Commercial Code and other relevant legislation provisions. persons or organizations, legally authorized public and/or private law legal entities limited to the purpose requested within the scope of its legal authority, and persons or organizations permitted or required by the provisions of other legislation, with official authorities upon the request of official authorities.
In addition, in accordance with Articles 5 and 8 of the KVKK and/or in the presence of exceptions in the relevant legislation, personal data may be processed and shared with third parties without the consent of the Data Owner. The main of these situations are listed below:
clearly stipulated in the law,
It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,
It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data owner and the Company,
It is compulsory for the fulfillment of legal obligations,
Having been made public by the data owner himself,
Data processing is mandatory for the establishment, exercise or protection of a right,
Data processing is mandatory for the Company's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data owner.
Method and Legal Reason for Personal Data Collection
Your personal data is collected in all kinds of verbal, written or electronic media in order to provide the services we offer by the Company within the legal framework determined in line with the above-mentioned purposes, and in this context, to fulfill the contractual and legal responsibilities of our Company completely and accurately. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.
Rights of Personal Data Owner
As personal data owners, if you submit your requests regarding your rights to our Company through the methods set out below, our Company will conclude your request free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged.
In this context, personal data owners;
Learning whether personal data is processed or not,
If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
Requesting the deletion or destruction of personal data in the event that the reasons requiring processing are eliminated, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
In the event that personal data is damaged due to unlawful processing, it has the right to demand the compensation of the damage.
You can send us your request regarding the exercise of these rights in writing, or if a separate method is determined by the Personal Data Protection Board, in accordance with this method, including the necessary information to identify you and your explanations about your right that you request to exercise from the rights specified in Article 11 of the KVK Law.
Deletion, Destruction or Anonymization of Your Personal Data
Pursuant to Article 7 of the KVK Law, although the personal data has been processed in accordance with the relevant legislation, the personal data is deleted, destroyed or anonymized by our Company, ex officio or upon the request of the personal data owner, in case the reasons for processing are no longer valid.
The procedures and principles regarding this matter will be fulfilled in accordance with the KVK Law and the Regulation on the Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28.10.2017 and numbered 30224.
Personal data is deleted, destroyed or anonymized within 3 (three) months following the date of our obligation to delete, destroy or anonymize personal data.
When you request the deletion or destruction of your personal data by applying to our company;
a) If all the conditions for processing personal data have disappeared; Your personal data subject to the request is deleted, destroyed or anonymized. Your request will be finalized within thirty (30) days at the latest and you will be informed.
b) If all the conditions for processing personal data have been removed and the personal data subject to the request has been transferred to third parties, it notifies the third parties; It is ensured that the necessary actions are taken within the scope of the regulation.
c) If all of the personal data processing conditions have not been eliminated, your request may be rejected by explaining the reason in accordance with the third paragraph of Article 13 of the KVK Law and the rejection response will be notified to you in writing or electronically within thirty days (30) at the latest.