This General Clarification Text is presented by DMS DENİZLİ DÖKÜM A.Ş. (“DMS DENİZLİ DÖKÜM”), as Data Controller under the Personal Data Protection Law No. 6698 (“KVKK”), within Article 10, “Obligation of the Data Controller to Inform”, and Article 11, “Rights of the Data Subject”, in order to inform you of the purposes for which your personal data will be processed, to whom and for what purpose it may be transferred, the method and legal reason for collecting it, and your other rights listed in Article 11, and to obtain your consent on the matters below.
We care about protecting the confidentiality and security of the personal data you provide. Accordingly, we take the necessary technical and administrative security measures to protect your personal data against unauthorised access, damage, loss or disclosure.
Information about our employees' personal data is provided in the Employee Clarification Text.
2. Personal Data We Collect and Our Processing Purposes:
DMS DENİZLİ DÖKÜM processes the personal data you share through the website (www.denizlidokum.com) and the other channels stated in this text, limited to the purposes stated in this text. The registered address of DMS DENİZLİ DÖKÜM is Ankara Karayolu 10. Km Kale village entrance Denizli / Turkey, and its tax number is Saraylar Tax Office - Tax No: 2920015355. Under the KVKK our company acts as the Data Controller.
When you visit the DMS DENİZLİ DÖKÜM website and/or share your personal data with DMS DENİZLİ DÖKÜM to be used for the processing purposes stated in this text, you are deemed to have been informed of the provisions of this text and of the privacy policy on our website.
As Data Controller, DMS DENİZLİ DÖKÜM collects personal data within our legal obligations arising from the Personal Data Protection Law No. 6698 (“KVKK”), the Turkish Penal Code No. 5237, Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications, the related secondary legislation and, without being limited to these, all relevant legislation, and in the operations we carry out in order to continue our company activities.
a) Personal data collected from our customers: name and surname, e-mail address, address, telephone number, security-camera images if they visit our company, photographs if taken, and similar data.
b) Personal data we collect from our suppliers: during the purchase of a product or service, the name and surname and contact details (telephone, e-mail) of the supplier's representative and employees, other personal data of supplier staff according to the nature of the service, and security-camera images if they visit our company.
c) Personal data we collect from job applicants: identity, contact details, professional experience (education, training and work history), criminal record, identity and contact data of references, nationality, place and date of birth, gender, marital status, military status, health / disability status and similar data. An applicant may also have shared other personal data that our company did not request in the CV they submitted; DMS DENİZLİ DÖKÜM does not use or process that data.
d) Other: name, surname, contact details and similar data received from other parties contacted while carrying out business activities.
e) All visitors: during the Covid-19 outbreak, body-temperature measurements of everyone entering the workplace (these are not recorded).
Our processing purposes: (all of them exist on a category basis in our VERBIS registration)
Our processing purposes include, without being limited to, the following:
a) To fulfil our legal obligations set out in the legislation
b) To understand our customers' needs and submit the right offer
c) To improve communication with customers and provide a more effective, higher-quality service
d) To carry out marketing and sales processes
e) To inform authorised persons, institutions and organisations
f) To issue invoices and collect payment
g) To manage recruitment and evaluate the applicant (for job applicants)
h) To carry out purchasing processes (for suppliers)
i) To carry out our business processes (other parties)
These personal data will be processed, with all necessary information-security measures, so that you can benefit from the services we provide as DMS DENİZLİ DÖKÜM, on the basis of your explicit consent or in the other cases set out in Article 5(2) of the KVKK, in particular the legislation we are subject to. They will not be used outside the purposes and scope set by this information notice. They will be stored for the legal retention period or for as long as the processing purpose requires, and at the end of that period they will be destroyed or anonymised.
3. How We Collect Your Personal Data:
Your personal data is collected verbally, in writing or electronically, within the purposes above and in order to fulfil legal obligations and the terms of service.
Personal data you provide directly to DMS DENİZLİ DÖKÜM: all information and documents you send, requests for quotation, contracts, orders, job-application forms or CVs, and similar data.
Personal data collected while carrying out business processes: correspondence, e-mail, telephone or face-to-face meetings, and similar data.
Personal data collected at fairs: information and documents collected in meetings at sector fair organisations.
Personal data collected when you visit DMS DENİZLİ DÖKÜM: from the security entrance onwards, images recorded by security cameras in areas marked with a camera sign, and, if used, an IP number through the wifi connection. During the Covid-19 outbreak the body temperature of everyone entering the workplace (personnel, visitors, customers, suppliers and others) was measured with a digital thermometer, but no record was kept.
Personal data collected when www.denizlidokum.com is visited: (Are there cookies?)
Personal data collected through the contact form on www.denizlidokum.com: identity and contact details.
4. With Whom We Share Your Personal Data:
DMS DENİZLİ DÖKÜM may share and transfer this personal data with the relevant parties, provided sufficient measures are taken within the security and confidentiality principles of the KVKK, on the basis of your explicit consent or in the other cases set out in Article 5(2) of the KVKK, in particular the legislation we are subject to. Personal data you have shared with us is not shared with third parties outside the processing and sharing purposes set out in the KVKK, or without your explicit consent.
Your personal data kept electronically is transferred to our company's servers and data-storage units (within Turkey).
Job applicants' application forms, the information they send through our website, or the CVs they send by hand or by e-mail are not transferred to other persons or organisations without their explicit consent.
Personal data collected from other parties may, if the purpose of processing requires a transfer, be transferred to authorised persons, institutions or organisations, by obtaining the data subject's explicit consent where consent is required, or as required by law or by a processing condition other than explicit consent.
5. Rights of the Data Subject
Under the KVKK, as the data subject, regarding your personal data you have the right:
• To learn whether it is processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used in line with that purpose
• To know the third parties to whom it is transferred, in Turkey or abroad
• To request correction if it is incomplete, incorrect or has changed
• To request its deletion or destruction under Article 7 of the KVKK
• To request that operations carried out by third parties to whom it was transferred are also notified
• To object to a result against you arising from analysis exclusively by automated systems, and
• To demand compensation for damage if you suffer damage because it was processed contrary to the KVKK.
Requests you make in this scope must be in writing under Law No. 6698. You may send an e-mail containing documents that identify you and your explanation of the right you wish to use to muhasebe@denizlidokum.com, send your application through a notary, or submit it with the application form on www.denizlidokum.com (Personal Data Request and Evaluation Form).
If an application you make for these purposes requires an extra cost, you may have to pay the fee in the tariff set by the Personal Data Protection Board. The requests in your application will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.
Contact us: if you have any question or concern about the General Clarification Text or our other data-protection practices, or if you have an access request, you can reach us at Ankara Karayolu 10. Km Kale village entrance Denizli / Turkey or on 0258 267 10 33 / 0258 267 14 21 / 0258 267 14 63.
6. Entry into Force and Changes
This clarification text has been in force since 08.07.2020. If the law or the Personal Data Inventory changes, the revision number and date will be changed and the stakeholders will be informed again.
PERSONAL DATA RETENTION AND DESTRUCTION POLICY
DMS DENİZLİ DÖKÜM A.Ş. stores the personal data it obtains, securely in physical or electronic media, for the retention periods determined in the Personal Data Inventory and announced publicly in VERBIS (Data Controllers' Registry), in order to carry out its legally required activities and its commercial activities. Personal data is retained taking into account the obligations set out in all relevant legislation, first of all the KVKK.
If personal data is collected and processed as required by law, its retention period is defined in the Personal Data Inventory as the period stated in the relevant legislation. For other data, periods that allow the related activities to be carried out are determined and defined in the Personal Data Inventory. Retention periods are sometimes defined as “months” or “years”, and for some personal data as “at the end of …” or “until … is done”. For this reason a different retention period may apply to each item of personal data, for the period required by the relevant legislation or by the purpose for which it is processed.
As well as the retention periods, the physical or electronic media in which personal data is stored are defined in the Personal Data Inventory for each personal-data group.
When the determined periods end and the purposes of processing end, DMS DENİZLİ DÖKÜM A.Ş. will delete, destroy or anonymise the personal data, on its own initiative or at the data subject's request, by the methods determined according to how the data is stored. If it is deleted or destroyed, it will be destroyed so that it can never be used or recovered again. If it is anonymised, it will be changed so that it cannot be returned to its original form.
Sometimes one item of data may have been processed for more than one purpose. In that case, unless a rule requires otherwise, the data is deleted, destroyed or anonymised when every reason for processing it has ceased, within the legal legislation.
Where the data controller has a legitimate interest, personal data may still be stored after the processing purpose and the periods stated in the relevant laws have ended, provided the law allows it and the fundamental rights and freedoms of the data subjects are not harmed. After the limitation period in question ends, the personal data will be deleted, destroyed or anonymised.
PERSONAL DATA REQUEST AND EVALUATION FORM
| DMS A.Ş. | PERSONAL DATA REQUEST AND EVALUATION FORM | |||||||||||||||
| Notification type |
|
|||||||||||||||
| Notification date | Date of the event | |||||||||||||||
| Person notifying | ||||||||||||||||
| Your notification about personal data | ||||||||||||||||
| Your notification will be answered as soon as possible. | ||||||||||||||||
Click to download the form.