Ecas Certification and International Audit Ltd. Sti. pays utmost attention to safety. With this awareness, we attach great importance to the processing, recording, transfer, sharing and storage of all kinds of personal data belonging to all persons related to our Companies, including those who benefit from our products and services, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVK Law”).
Within the framework of Article 10 titled “Informing Obligation of Data Controller” and Article 11 titled “Rights of Relevant Person” in the Law on Protection of Personal Data No. 6698 (KVKK); As Ecas Certification Ve Uluslararası Dağıtım Ltd Şti (“Company”), as the data controller, regarding the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data can be transferred, the method of collection of your personal data and the legal rights. We would like to inform you with this "Clarification Text" that we have prepared in order to fulfill the obligation of enlightenment to its partners and real or legal persons with whom it communicates.
Personal Data and Private Data
According to the KVK Law, Personal Data includes all kinds of information regarding an identified or identifiable natural person, their race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and clothing, membership of associations, foundations or trade unions. data on health, sexual life, criminal convictions and security measures;
Special Quality Personal Data, on the other hand, defines biometric and genetic data.
Purpose of regulation
Article 1 of the Law on the Protection of Personal Data No. 6698 states, "The purpose of this Law is to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, in the processing of personal data, and to regulate the obligations of natural and legal persons who process personal data, and the procedures and principles to be followed." specified.
For what purpose your personal data will be processed, to whom and for what purpose it will be transferred, we collect your personal data within the limits set by the official legislation, in order for you to benefit from the products and services we offer to our valued customers with the highest service quality. We operate within the terms and purposes. In order to provide value-added services, opportunities and opportunities to our customers, to increase the quality of service, with our domestic or foreign affiliates, direct or indirect affiliates and joint ventures, or public institutions and organizations that are authorized to request these data as a legal obligation, and their legal obligations We share it with other contracted institutions, suppliers, authorized dealers, authorized dealers and business partners in order to fulfill our activities.
The Company takes the following technical measures in accordance with the characteristics of all environments where personal data is stored and the environment in which the data is kept:
Only up-to-date and secure systems suitable for technological developments are used in environments where personal data is kept.
Security systems are used for the environments where personal data is kept. Access to the data is restricted to the environments where personal data is kept, and only authorized persons are allowed to access this data limited to the purpose of storing personal data, and all accesses are recorded.
The Company has sufficient technical personnel to ensure the security of the environments where personal data is kept.
In accordance with Article 12 of the Law, the Company conducts internal audits regarding the implementation of the provisions of the Law, this Personal Data Retention and Disposal Policy and the Personal Data Processing and Protection Policy. Situations Where Personal Data May Be Processed Without Explicit Consent as Required by Laws
Pursuant to Article 5 of the KVKK, in the following cases, our Company may process your personal data, which it has received in accordance with the law, without seeking your explicit consent.
a) It is clearly stipulated in the laws.
b) It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally recognized.
c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
d) It is mandatory for the data controller to fulfill its legal obligation.
e) The person concerned has been made public by himself.
f) Data processing is mandatory for the establishment, exercise or protection of a right.
g) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Method and Legal Reason for Personal Data Collection
Your personal data, in line with the above-mentioned purposes, in order to ensure that the products and services we offer by the Company can be offered and fulfilled at the highest service quality and within the legal framework, and in this context, in order for our Company to fulfill its contractual and legal responsibilities with its business partners completely and accurately. are collected orally, in writing or electronically.
Retention Period of Personal Data
In accordance with the KVK Law, your personal data, which has been processed for the purposes specified in this "Clarification Text on the Processing of Personal Data", is no longer required to be processed pursuant to article 7/f.1. When the time-out periods we are required to expire, your personal data will be deleted, destroyed or anonymized by us and will continue to be used.
Rights of Personal Data Owner
Within the scope of Article 11 and all of the KVKK, we inform you that you have the following rights regarding your personal data;
a) Learning whether personal data is processed or not,
b) If personal data has been processed, requesting information about it,
c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
d) Knowing the third parties to whom personal data is transferred in the country or abroad,
e) Requesting correction of personal data in case of incomplete or incorrect processing,
f) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
g) Requesting notification of the transactions made pursuant to subparagraphs (e) and (f) to third parties to whom personal data has been transferred,
h) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
i) To request the compensation of the damage in case of loss due to unlawful processing of personal data,
When you want to exercise your rights specified in Article 11 of the Personal Data Protection Law, you can make your requests by filling in the KVKK Information Form on our website or by hand delivery, by filling in the KVKK Information Form and signing it with a wet signature, to the contact address specified below, by registered letter with return receipt. and ID photocopies (only the front side photocopy for the identity card). Your requests in your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged by the Personal Data Protection Board.