Ecas Certification and International Auditing Co. Ltd. your personal data We attach great importance to the processing, recording, transfer, sharing and storage of all personal data of all persons associated with our Companies, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 ("LPPD Law").
Within the framework of Article 10 titled “Data Controller’s Obligation to Inform” and Article 11 titled “Rights of the Relevant Person” of the Law on the Protection of Personal Data No. 6698 (KVKK); we would like to inform you with this “Information Text” that we have prepared as Ecas Certification and International Auditing Co. Ltd. (“Company”), as the data controller, in order to fulfill the obligation to inform its customers, business partners and real or legal persons with whom it communicates, regarding the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data may be transferred, the method of collecting your personal data and the rights acquired due to the legal reason.
Personal Data and Special Personal Data
According to the Personal Data Law; Personal Data includes any information related to an identified or identifiable natural person, data regarding the person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, appearance and dress, membership in associations, foundations or unions, health, sexual life, criminal conviction and security measures;
Special Personal Data defines biometric and genetic data.
Purpose of legal regulation
Article 1 of the Personal Data Protection Law No. 6698 states that "The purpose of this Law is to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to regulate the obligations of real and legal persons who process personal data and the procedures and principles they will comply with."
For What Purposes Will Your Personal Data Be Processed, To Whom and For What Purposes Will It Be Transferred In order for you, our valued customers, to benefit from the products and services we offer at the highest service quality, we collect your personal data within the limits determined by official legislation and process them within the scope of the conditions and purposes specified in Articles 5 and 6 of Law No. 6698. In order to provide value-added services, opportunities and facilities to you, our customers, and to increase the quality of service, we share them with our domestic or foreign subsidiaries, direct or indirect affiliated companies and joint ventures or with public institutions and organizations authorized to request this data due to a legal obligation, and with other institutions, suppliers, authorized dealers, authorized dealers and business partners with whom we have agreements due to our activities in order to fulfill legal obligations.
The Company takes the following technical measures in all environments where personal data is stored, in accordance with the characteristics of the relevant data and the environment in which the data is kept:
Only up-to-date and secure systems compatible with technological developments are used in the environments where personal data is kept.
Security systems are used for the environments where personal data is kept. Access to the environments where personal data is kept is restricted, and only authorized persons are allowed to access this data limited to the purpose of storing the personal data, and all accesses are recorded.
The company has sufficient technical personnel to ensure the security of the environments in which personal data is kept.
The Company conducts internal audits regarding the implementation of the provisions of the Law and this Personal Data Storage and Destruction Policy and the Personal Data Processing and Protection Policy in accordance with Article 12 of the Law. Situations Where Personal Data Can Be Processed Without Explicit Consent as Required by Law
In accordance with Article 5 of the KVKK, our Company may process your personal data, which is stated above and obtained in accordance with the law, without your explicit consent in the following cases.
a) It is clearly stated in the laws.
b) If it is necessary for the protection of the life or physical integrity of the person or another person who is unable to give his consent due to a physical impossibility or whose consent is not legally valid.
c) It is necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract.
d) It is mandatory for the data controller to fulfill its legal obligations.
e) It has been made public by the relevant person himself.
f) Data processing is mandatory for the establishment, exercise or protection of a right.
g) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.
Method and Legal Reason for Collecting Personal Data
Your personal data is collected in all kinds of verbal, written or electronic media in line with the above-mentioned purposes, in order to provide and fulfill the products and services we offer at the highest service quality and within the legal framework, and to fulfill our Company's contractual and legal responsibilities with its business partners in a complete and accurate manner.
Storage Period of Personal Data
In accordance with the PDP Law, your personal data processed for the purposes specified in this “Information Text on the Processing of Personal Data” will be deleted, destroyed or anonymized by us and will continue to be used when the purpose requiring processing is eliminated according to Article 7/f.1 of the PDP Law and/or the limitation periods required for us to process your data pursuant to the legislation expire.
Rights of the Personal Data Owner
Within the scope of Article 11 and all of the KVKK, we hereby inform you that you have the following rights regarding your personal data;
a) Learning whether personal data is being processed,
b) Requesting information regarding the processing of personal data,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
d) To know the third parties to whom personal data is transferred, either domestically or abroad,
e) Request correction of personal data in case it is processed incompletely or incorrectly,
f) Request the deletion or destruction of personal data within the framework of the conditions set forth in Article 7,
g) To request that the operations carried out in accordance with clauses (e) and (f) be notified to third parties to whom personal data has been transferred,
h) To object to the emergence of a result to the detriment of the person himself/herself, by means of analysis of the processed data exclusively through automatic systems,
i) To request compensation in case of damages due to unlawful processing of personal data,
When you want to exercise your rights specified in Article 11 of the Personal Data Protection Law, you can fill out the KVKK Information Acquisition Form that is available on our website or that we have provided you with the contract, sign it with a wet signature, and send it to the contact address specified below, by registered mail, by hand delivery and with photocopies of your identity card (only a photocopy of the front face for the identity card). Your requests in your application will be finalized free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, the fee specified in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged.