Clarification Text on Protection of Personal Data
UNIMA LTD
CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA
This Clarification Text has been prepared by UNIMA LTD. ŞTİ. (‘’Company‘’) in order to enlighten the Company's customers regarding the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (‘Law’).
Detailed information on the processing of your personal data within the scope of this Clarification Text can be found in the UNIMA LTD. ŞTİ. Personal Data Protection and Processing Policy at [www.unimaltd.com].
a) Methods of Obtaining Personal Data and Legal Reasons
Your personal data is collected electronically or physically. Your personal data collected for the legal reasons specified in this Clarification Text may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.
b) Purposes of Processing Personal Data
Your personal data, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law Within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, planning and execution of the activities necessary for the recommendation and promotion of the products and services offered by the Company to the relevant persons by customising them according to the tastes, usage habits and needs of the relevant persons, carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company and carrying out the relevant business processes, It is processed for the purposes of carrying out the necessary work by the relevant business units for the realisation of the commercial activities carried out by the Company and the execution of the related business processes, planning and execution of the Company's commercial and / or business strategies and ensuring the legal, technical and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.
c) Parties with whom Personal Data may be shared and Purposes of Sharing
Your personal data, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law Within the framework of the personal data processing conditions and purposes specified in the articles, planning and execution of the activities necessary for the recommendation and promotion of the products and services offered by the Company to the relevant persons by customising them according to the tastes, usage habits and needs of the relevant persons, carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company and carrying out the relevant business processes, It may be shared with the Company's business partners and suppliers, legally authorised institutions and organisations and legally authorised private legal entities for the purposes of carrying out the necessary work by the relevant business units for the realisation of the commercial activities carried out by the Company and the execution of the related business processes, planning and execution of the Company's commercial and/or business strategies and ensuring the legal, technical and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.
d) Rights of Data Subjects and Exercise of These Rights
As personal data owners, if you submit your requests regarding your rights stated below to the Company by the methods specified under the heading of Exercise of Rights by Data Owners, your requests will be evaluated and finalised by our Company as soon as possible and in any case within 30 (thirty) days.
Pursuant to Article 11 of the Law, you have the following rights as a personal data owner:
To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To know the third parties to whom your personal data is transferred domestically or abroad,
To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
To object to the emergence of a result to the detriment of the person himself/herself by analysing your processed data exclusively through automated systems,
In case of damage due to unlawful processing of your personal data, to demand the compensation of the damage.
Paragraph 2 of Article 28 of the Law lists the cases where data subjects do not have the right to request and within this scope;
Processing of personal data is necessary for the prevention of crime or criminal
Paragraph 2 of Article 28 of the Law lists the cases where data subjects do not have the right to request and within this scope;
Processing of personal data is necessary for the prevention of crime or criminal investigation,
Processing of personal data made public by the data subject himself/herself,
Processing of personal data is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the public institutions and organisations and professional organisations in the nature of public institutions, which are authorized by law,
Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters,
In such cases, the above-mentioned rights cannot be exercised with respect to the data.
According to paragraph 1 of Article 28 of the Law, in the following cases, since the data will be outside the scope of the Law, the requests of the data subjects will not be processed in terms of these data:
Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that the personal data are not disclosed to third parties and the obligations regarding data security are complied with.
Processing of personal data for purposes such as research, planning and statistics by anonymising them with official statistics.
Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that such processing does not violate national defence, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.
Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organisations entrusted and authorised by law to ensure national defence, national security, public safety, public order or economic security.
Processing of personal data by judicial authorities or enforcement authorities in relation to investigation, prosecution, judgement or execution proceedings.
Exercise of Rights by Data Subjects
Data subjects will be able to use the ‘Form for Applications to be made by the Personal Data Subject to the Data Controller’ available at the link [www.unimaltd.com] in order to exercise the aforementioned rights.
Applications shall be made by one of the following methods together with the documents that will identify the identity of the relevant data subject:
Filling out the form and sending the wet signed copy to the address by hand, through a notary public or by registered letter with return receipt,
Following a method stipulated by the Personal Data Protection Board.
The Company responds to data subjects who wish to exercise such rights within the limits stipulated in the Law within a maximum period of thirty (30) days as stipulated in the Law. In order for third parties to make an application request on behalf of personal data owners, there must be a special power of attorney issued by the data owner through a notary public on behalf of the person who will make the application.
Although data subject applications are processed free of charge as a rule, fees may be charged based on the fee tariff[1] stipulated by the Personal Data Protection Board.
The Company may request information from the relevant person in order to determine whether the applicant is the personal data owner or not, and may ask questions to the personal data owner about the application in order to clarify the issues specified in the application.
Pursuant to the ‘Communiqué on the Procedures and Principles of Application to the Data Controller’ published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of the data subjects is to be answered in writing, no fee is charged up to ten pages. A transaction fee of 1 Turkish Lira may be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by the Authority cannot exceed the cost of the recording medium.