PDPA (Personal Data Protection Authority) and Clarification Text

CLARIFICATION TEXT ON THE PROVISION, PROCESSING AND PROTECTION OF PERSONAL DATA; 1- GENERAL EXPLANATIONS AND DEFINITIONS


This information text has been prepared in order to fulfill the "disclosure obligation" of Zero Ajansı Advertising Taylan Aydoğdu (hereinafter referred to as "Zero Ajansı") as the "data controller" within the scope of Article 10 of the Personal Data Protection Law No. 6698 (Law). The meanings of the following terms in the information text refer to the definitions specified in the Law No. 6698, the Regulations and Communiqués issued in relation to this Law and are as follows.


Personal Information: Any information relating to an identified or identifiable natural person,


Processing Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system,


Relevant Person:The individual whose personal data is processed,


Express Consent: Consent on a specific subject, based on information and expressed with free will,


Anonymization: Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data,


Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,


Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller,


Data Recording System: A recording system where personal data is structured and processed according to certain criteria,


Contact Person : The real individual notified by the data controller during the registration to the Registry for the communication to be established with the Authority regarding the obligations of the legal entities resident in Turkey and the non-resident legal entity data controller representative within the scope of the Law and the secondary regulations to be issued based on this Law,


Personal data retention and disposal policy : The policy on which data controllers are based for the process of determining the maximum period of time required for the purpose for which personal data are processed and the process of deletion, destruction and anonymization.

2- INFORMATION ON DATA CONTROLLER


In legal entities, the data controller is the legal entity itself. The data controller obligations of legal entities resident in Turkey under the Law shall be fulfilled by the body/person or persons authorized to represent and bind the legal entity. The body authorized to represent the legal entity may appoint one or more persons in relation to the obligations to be fulfilled in terms of the implementation of the Law. This assignment does not remove the responsibility of the legal entity in accordance with the provisions of the Law.

Zero Ajans, based in Turkey, carries out its activities as a Sole Proprietorship. Information about Zero Ajansı as the data controller is as follows.

Data controller's;


Superscription Zero Ajansı Advertising Taylan AYDOĞDU
Address 1483 Sokak No:3 Da:4 Üst kısım Alsancak Konak İzmir
Mersis Number -
Tax Office KORDON TAX OFFICE DIRECTORATE
Tax ID Number 1190275223
Phone 0232 422 04 00
Website www.zeroajans.com
E-Mail Address info@zeroajans.com
Contact Person Taylan AYDOĞDU

3- OBLIGATIONS OF THE DATA CONTROLLER


Zero Ajans, to the relevant persons within the scope of the obligation to inform the relevant persons;

  • • Identity of the data controller and its representative, if any,
  • • For what purpose the personal data will be processed,
  • • To whom and for what purpose the processed personal data may be transferred,
  • • The method and legal grounds for collecting personal data,
  • • It is obliged to provide information about the rights of persons whose personal data are processed. The Zero Ajansı also with regard to data security;
  • • To prevent unlawful processing of personal data,
  • • To prevent unlawful access to personal data,
  • • It takes the necessary security measures to ensure the protection of personal data. Zero Ajansı does not disclose the personal data obtained by conducting the necessary audits in its own institution or organization in order to ensure the implementation of the provisions of Law No. 6698 to anyone else in violation of the provisions of Law No. 6698 and does not use it for purposes other than processing.

4- PERSONAL DATA TO BE PROCESSED


The personal data to be processed by Zero Ajansı are specified below and new ones may be added and / or changes may be made to this information when required and / or required by law.


Personal data subject to data processing;


  • • Name, Surname, TR No, Date of Birth, etc. identity information,
  • • Contact information such as address, telephone, fax, e-mail, etc.,
  • • Tax Office and Tax No information
  • • Information about the salaries, social security, bank account numbers, and family members of its employees,
  • • Information about professional and educational background,
  • • Information such as camera recording, fingerprints, etc.

5- METHODS OF OBTAINING PERSONAL DATA


Personal data can be obtained directly from the person concerned, or indirectly, depending on the purpose of obtaining the data, including but not limited to online sales platforms, camera recording, dealers, solution partner institutions and organizations.


6- PURPOSE OF PERSONAL DATA PROCESSING


  • • Zero Ajans, processes personal data for the following purposes. This purposes are;
  • • Fulfillment of obligations regarding public receivables such as taxes etc. within the scope of tax laws, Turkish Commercial Code No. 6102 and other legal regulations,
  • • Taking measures to protect consumer rights within the scope of Law No. 6502 on the Protection of Consumers,
  • • Receiving orders for the products that the relevant persons want to purchase from Zero Ajansı, selling the products, delivering the products to the relevant persons, collecting the costs, providing after-sales services for the product sold, measuring customer satisfaction, collecting and evaluating complaints and suggestions, if any, regarding the product or service sold,
  • • To increase service quality,
  • • Carrying out campaigns, promotions, advertisements and promotional activities regarding products and services, and providing information on these issues,
  • • Ensuring in-company security, increasing production efficiency,
  • • Proving the employment relationship, recording wage and wage-related information, making legal notifications to the Finance, Social Security Institution and other institutions, implementing occupational health and safety principles, fulfilling the obligations arising from the laws, determining working conditions.

7- PERSONAL DATA TRANSFER AND PROTECTION


Zero Ajans does not transfer personal data obtained in line with data processing purposes to third parties / institutions without the explicit consent of the person concerned.


Zero Ajans , tax and social security laws and other laws and other legislation provisions are obliged / permitted to persons, institutions and / or organizations, including but not limited to the Revenue Administration, İş- Kur, Social Security Institution, Financial Crimes Investigation Board, Interbank Card Center, To public legal entities authorized to receive personal data such as the Credit Bureau, Zero Ajansı domestic affiliates, companies operating as dealers, cooperating program partner / solution partner institutions and organizations, PTT branches, logistics support services, consultancy and independent audit services, due to legal obligations; Even if there is no legal obligation, 6. Even if there is no legal obligation, it may transfer personal data to third parties and institutions in order to realize its purposes to provide better service within the scope of Article 6, provided that the rights of the person concerned under Law No. 6698 are reserved.


8- OBTAINING THE EXPLICIT CONSENT OF THE DATA SUBJECT IN THE PROCESSING OF PERSONAL DATA


Personal data to be processed by Zero Ajansı are processed by obtaining the "explicit consent" of the person concerned within the scope of Law No. 6698. Explicit consent; It refers to the consent of the person concerned on a specific subject, based on information and to be disclosed with free will. According to Article 5/2 of the Law No. 6698, personal data may be processed without seeking the explicit consent of the person concerned in the presence of one of the following conditions.

  • • Explicitly stipulated in the law.
  • • It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
  • • Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.
  • • It is mandatory for the data controller to fulfill its legal obligation.
  • • It has been made public by the person concerned.
  • • Data processing is mandatory for the establishment, exercise or protection of a right.
  • • Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

9- DURATION OF PERSONAL DATA RETENTION


Zero Ajans, destroys personal data (deletes, destroys or anonymizes personal data) when the purpose of processing personal data ceases to exist and the mandatory retention periods specified under the Laws and other legislation expire.


10- RIGHTS OF THE RELEVANT PERSON


The data subjects may apply to the data controller;


  • • Learn whether personal data is being processed,
  • • Request information if their personal data has been processed,
  • • To learn the purpose of processing personal data and whether they are used for their intended purpose,
  • • To know the third parties to whom personal data are transferred domestically or abroad,
  • • To request correction of personal data in case of incomplete or incorrect processing,
  • • To request the deletion or destruction of personal data within the framework of the conditions stipulated in the law,
  • • To request notification of changes related to personal data to third parties to whom personal data are transferred,
  • • To object to the emergence of a result to the disadvantage of the person himself/herself by analyzing the processed data exclusively through automated systems,
  • • In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

11- APPLICATION TO THE DATA CONTROLLER


Natural persons whose personal data are processed may apply to Zero Ajansı regarding their requests within the scope of their rights specified in Article 11 of Law No. 6698. Relevant persons may benefit from this right provided that they submit their applications in Turkish. Relevant persons may submit their requests to Zero Ajansı through one of the following communication channels. Accordingly, the relevant persons have made their requests;


  • • In written,
  • • Via registered electronic mail (REM) address,
  • • Through secure electronic signature or mobile signature, by using the e-mail address previously notified to Zero Ajansı by the person whose personal data is processed and registered in Zero Ajansı's system,
  • • In the applications;
  • • Name, surname and signature if the application is in writing,
  • • Turkish Republic ID number for citizens of the Republic of Turkey, nationality, passport number or ID number, if any, for foreigners,
  • • Residential or workplace address for notification,
  • • Electronic mail address, telephone and fax number for notification, if any,
  • • Subject of Request,

are mandatory. Relevant information and documents should be attached to the application. Application requests can be made by using the "Application Request Form". For the applications to be made by the relevant persons, the communication channels specified in the section titled "2-DATA RESPONSIBLE INFORMATION" of this information text can be used.


Zero Ajans, finalizes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged in the amount specified in Article 7 of the "Communiqué on the Procedures and Principles of Application to the Data Controller". If the application is caused by the error of the data controller, the fee charged shall be refunded to the data subject.


12- CHANGES AND UPDATES


This information text has been prepared within the scope of Law No. 6698 and the Regulations and Communiqués published under the said Law and Zero Ajansı personal data processing purposes and policies. Necessary changes may be made in the information text in line with the relevant legal legislation and / or changes in Biltek Tasarım's personal data processing purposes and policies.


The most up-to-date version of the Information Text will be available at www.zeroajans.com