WEBSITE PRIVACY AND PERSONAL DATA PROTECTION PRINCIPLES

 

1. PURPOSE AND SCOPE

This Privacy and Personal Data Protection Principles ("Principles") specify the principles adopted by Sel Sanayi Ürünleri Ticaret ve Pazarlama A.Ş (hereinafter referred to as "SEL SANAYI", “Company” or “Data Controller”) regarding the protection of personal data, while aiming at establishing personal data processing principles for personal data pertaining to individuals groups consisting of Visitors, Customers, Potential Customers, Suppliers, Third Parties and Online Visitors/Members (“Individuals Groups”) and informing the said groups regarding processing of their personal data.

2. PRINCIPLES RELATING TO PROCESSING OF PERSONAL DATA

As SEL SANAYI, we process your personal data in the capacity of Data Controller according to the following principles.

2.1 Processing in Compliance with Law and Principles of Honesty

Your personal data are processed in accordance with the principles which have been introduced by legal regulations, and the rule of general trust and honesty.

2.2 Ensuring that Personal Data are Accurate, and Up-To-Date, when Necessary

By taking your legitimate interests into consideration, periodical verifications and updates are made in order to ensure that the data processed are accurate and up-to-date, and the necessary measures are taken accordingly. In this context, systems for controlling the correctness of personal data and making necessary corrections are set up within the corporate body of SEL SANAYI.

2.3 Processing for Specific, Clear and Legitimate Purposes

Your personal data are processed in accordance with clear, specific and legitimate data processing purposes.

2.4 Personal Data Being Relevant, Limited and Proportionate to their Purpose of Processing

Your personal data are processed proportionately to the extent necessary for achieving the envisaged purpose/purposes, and in a manner that is relevant and limited to the purpose, and we abstain from processing any personal data which are not related to achieving the purpose or which are not needed in that respect.

2.5 Retaining the Personal Data for the Period Stipulated in the Relevant Legislation or the Period Required for the Purpose of Processing Thereof

Your personal data are preserved only for the period prescribed in the relevant legislation or the period required for the purpose of processing thereof. In this context, first of all we identify whether a period is stipulated in the relevant legislation for the preservation of personal data, and if such a period is prescribed, we act in accordance with it, and if no such period is prescribed, we preserve the personal data for the period required for the purpose of processing thereof. In case of expiry of such period or in case the reasons requiring them to be processed cease to exist, provided that there is no legal reason for allowing them to be processed for longer periods, your personal data are deleted, destroyed or anonymized in accordance with SEL SANAYI’s Policy on Preservation and Destruction of Personal Data.

3. PERSONAL DATA PROCESSING CONDITIONS

Your personal data are processed by SEL SANAYI in accordance with the following conditions.

3.1 Explicit Stipulation by the Laws

Your personal data may be processed if it is explicitly required by the law to process such personal data.

3.2 Inability to Obtain Express Consent of the Relevant Person Due to Actual Impossibility

Where the relevant person cannot give his/her consent or his/her consent is deemed non-admissible due to actual impossibility, but his/her personal data must be processed in order to protect the life or bodily integrity of such person or any other person, then the personal data of such person may be processed.

3.3 Direct relationship with the Conclusion or Performance of a Contract

Where the processing of personal data belonging to the parties to a contract is necessary, such personal data may be processed provided that it is directly related to the conclusion or performance of the said contract.

3.4 Performance by SEL SANAYI of its Legal Obligation

Your personal data may be processed, if the processing thereof is compulsory in order for us, as the Data Controller, to fulfil our legal obligations.

3.5 Personal Data that Became Public

If your personal data has been made public by you, we will be able to process them.

3.6 Obligation to Process Data for Securing or Protecting a Right

In case data processing is mandatory for securing, exercising or protecting a right, your personal data may be processed.

3.7 Processing of Data Based on Legitimate Interest

Your personal data may be processed if it is necessary based on the legitimate interests of SEL SANAYI.

3.8 Processing of the Data Based on Express Consent

Your personal data may be processed on the basis of express consent in cases where they cannot be processed based on any of the conditions specified in these principles.

4. CATEGORIZATION OF PERSONAL DATA

Data Subject	Data Category	Data Types
Customer	ID Details	Name and Surname, Republic of Turkey Identity Number, Identity Details, Signature Details, CCTV Camera Records
	Financial Details	Account Details, Invoice Details
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information
	Contact Details	Address (work), E-mail, Landline/Mobile Phone
Potential Customer	ID Details	Name and Surname, Republic of Turkey Identity Number, Identity Details, Signature Details
	Contact Details	Address (work), Email Address, Mobile Phone
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information
Visitor	ID Details	Name and Surname, Identity Information, CCTV Camera Records
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information
Third Party	ID Details	Name and Surname, Republic of Turkey Identity Number, Identity Details, Signature Details
	Contact Details	Address (work), Email Address, Mobile Phone
	Financial Details	Account Details
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information
Supplier/Business Partner	ID Details	Name and Surname, Republic of Turkey Identity Number, Identity Details, Signature Details
	Contact Details	Address (work), Email Address, Mobile Phone
	Financial Details	Account Details
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information
Online Visitor- Member	ID Details	Name and Surname, Gender
	Contact Details	E-Mail, Mobile Phone
	Transaction Security	IP Address, Website Login, Logout and Navigation Information, Password and Code Information

 

 

5. PURPOSE OF PROCESSING OF PERSONAL DATA

SEL SANAYI may process personal data for the purposes set out below and based on the relevant individuals group, under the personal data processing conditions specified in Article 5 and 6 of the Law no. 6698.

5.1 CUSTOMERS

Personal data of Customers may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to carry out the necessary business and operational procedures for ensuring that the products and services offered by the Company can be benefited from; to ensure the performance of the contract; to monitor financial and accountancy affairs; to plan and execute customer relations management and customer satisfaction processes; to monitor the contract processes, customer’s requests and complaints; to plan and perform transfer processes; to plan data security processes; and to establish, manage, audit and perform information technologies infrastructure.

 

5.2 POTENTIAL CUSTOMERS

Personal data of Potential Customers may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to make the necessary efforts to plan and execute the activities necessary for customizing, recommending and promoting the products and services of the Company in accordance with preferences, usage habits and needs of data subjects; to carry out the necessary activities for realizing the commercial activities of the Company and to conduct the related business processes therefor; to carry out the necessary works and related business processes for ensuring that products and services offered by the Company can be benefited from, to plan and execute the necessary activities for customizing the products and services to be offered by the Company and for recommending and promoting the same, and to plan and execute customer relations management processes. 

5.3 VISITORS

The personal data of Visitors may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to ensure the safety of buildings, establishments and/or plants; to create and monitor the visitor records; to ensure the safety of fixtures and/or resources; to ensure the technical and commercial occupational safety, to ensure the security of organizational operations; and to inform the authorized institutions and organizations pertaining to the legislation.

5.4 THIRD PARTIES

The personal data of Third Parties may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to carry outthe necessary business and operational procedures to ensure that the products and services offered by the Company are benefited from; to carry out the necessary activities for realizing the commercial activities of the Company and to conduct the related business processes therefor; to make the necessary efforts and conduct the relevant business processes to ensure that the products and services offered by the Company are benefited from; to customize the products and services to be offered by the Company and to recommend and promote the same; and to perform the contract.

5.5 SUPPLIERS / BUSINESS PARTNERS

Personal data of Suppliers / Business Partners may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to carry out the necessary business and operational procedures to ensure that the products and services offered by the Company are benefited from; to carry out the necessary activities for realizing the commercial activities of the Company and to conduct the related business processes therefor; and to make the necessary efforts and conduct the relevant business processes to ensure that the products and services offered by the Company are benefited from.

5.6 ONLINE VISITOR / MEMBER

Personal data of Online Visitors/Members may be processed according to the personal data processing conditions specified in Articles 5 and 6 of the Law no. 6698, in order to carry out marketing analysis works, advertisement/campaign/promotion processes, communication works, to carry out product and service development works, and to fulfil legal obligations.

6. TRANSFER OF PERSONAL DATA

Your personal data may be transferred in a restricted manner to our business partners, suppliers, affiliates and group companies, and legally authorized public institutions and private persons, domiciled in Turkey or abroad, according to the principles and for the purposes set out in articles 3 and 5 of hereof and personal data processing conditions and purposes specified in Articles 8 and 9 of the Law no. 6698

7. METHOD OF AND LEGAL GROUNDS FOR COLLECTION OF PERSONAL DATA

Your personal data transmitted to SEL SANAYI electronically are processed as follows based on the relevant individuals groups.

7.1 CUSTOMERS

The personal data of the Customers are processed by
automated means by obtaining such data directly from the person or third person as part of a data recording system by using written and verbal data transmission tools in physical and electronic media according on the legal grounds stipulated in the provisions of Article 5 of the Law no. 6698, namely “there is a necessity to process personal data belonging to the parties of a contract, provided that it is directly related to the conclusion or performance of the contract”, “data processing is mandatory for data controller’s fulfilment of its legal obligation”, and “provided that it does not harm the fundamental rights and freedoms of the relevant person, the data processing is mandatory for the legitimate interests of the data controller”.

7.2 POTENTIAL CUSTOMERS

The personal data of the Potential Customers are processed by automated means by using written and verbal data transmission tools in physical and electronic media as part of a data recording system by obtaining such data directly from the persons or third parties on the legal grounds stipulated in Article 5 of the Law no. 6698, namely “the personal data has been made public by the relevant person itself”, “data processing is mandatory for securing, exercising or protection of a right”, “provided that it does not infringe the fundamental rights and freedoms of the relevant person, the data processing is mandatory for the legitimate interests of the data controller”, and “data processing is mandatory for data controller’s fulfilment of its legal obligation”.

 

 

7.3 VISITORS

The personal data of the Visitors are processed by automated means by recording footages of security cameras located at the entrance doors, external facade of the building, meeting rooms and event rooms, dining rooms, cafeterias, entrance waiting area, parking area, elevators and floor corridor service areas, on the legal grounds stipulated in the provisions of Article 5 of the Law no. 6698, namely “data processing is mandatory for data controller’s fulfilment of its legal obligation”, and “provided that it does not infringe the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller”.

 

7.4 THIRD PARTIES

The personal data of Third Parties are processed by automated means by obtaining such data directly from the persons or third parties by using written, verbal, physical or electronic data transmission tools as part of a data recording system, on the legal grounds stipulated in Article 5 of the Law no. 6698, namely “provided that it does not infringe the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller” and according to the data processing conditions specified in article 6 thereof.

7.5 SUPPLIER / BUSINESS PARTNER

The personal data of the Suppliers / Business Partners are processed by automated means by obtaining such data directly from the person or third parties by using written and verbal data transmission tools in physical and electronic media as part of a data recording system, on the legal grounds stipulated in Article 5 of the Law no. 6698, namely “there is a necessity to process personal data belonging to the parties of a contract, provided that it is directly related to the conclusion or performance of the contract”, “data processing is mandatory for data controller’s fulfilment of its legal obligation”, and “provided that it does not harm the fundamental rights and freedoms of the relevant person, the data processing is mandatory for the legitimate interests of the data controller”.

7.6 ONLINE VISITOR / MEMBER

The personal data of the Online Visitors / Members are processed by automated means, pursuant to the Law No. 5651 on Regulation of Online Publications and Fighting Against Crimes Committed Through Such Publications, and on the legal grounds stipulated in Article 5 of the Law no. 6698, namely “provided that it does not infringe the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller”, and “data processing is mandatory for data controller’s fulfilment of its legal obligation”.

8. SECURITY OF PERSONAL DATA

8.1 In order to ensure the safety of personal data and prevent unlawful processing thereof, SEL SANAYI takes reasonable measures, which will prevent risks of unauthorized access, accidents and data losses, deliberate deletion of data or damages to data.

8.2 For prevention of access to personal data by the persons other than those who are authorized to access thereto, all the necessary technical and physical measures are taken. In this context, the authorization system in particular is designed in such a way that it will be impossible for anyone to access personal data to an extent which is more than required

8.3 SEL SANAYI performs and procures the performance of necessary audits within its own body or organization in order to ensure implementation of the provisions of the Law no. 6698.

9. UNDERTAKINGS WITH REGARDS TO THIRD PARTY PERSONAL DATA

The relevant Individuals Groups agree and consent to processing by SEL SANAYI of their 3rd party personal data delivered by them to SEL SANAYİ.  The relevant Individuals Groups also undertake that they have performed the necessary information duties and have received the required consents with respect to the persons whose information has been transferred, and their information, pursuant to the Law No. 6698 on the Protection of Personal Data.  Otherwise, all damages to be incurred shall belong to the relevant Individuals Group.

10. APPLICATION PROCEDURES AND PRINCIPLES

As the data subject, you may submit an application in relation to your requests regarding your rights under article 11 of the Law No. 6698, in line with the procedures and principles provided in the Application Form for Protection of Personal Data available on the website www.selsanayi.com, by filling in the said form and submitting it as a written application bearing wet signature in person or through the notary public to the address Piyalepaşa Bulvarı Kastel İş Merkezi D Blok K: 7, Kasımpaşa İstanbul, or sending the application form to the KEP (registered electronic mail) address selsanayi@hs06.kep.tr, and the e-mail address kvkk@selsanayi.com by using mobile signature/e-signature. SEL SANAYI will conclude your application on a free-of-charge basis, within the shortest time possible depending on the nature of the request, but in any event within no later than thirty days. However, in case the process requires any additional cost, SEL SANAYI shall receive the fee specified in the tariff determined by the Personal Data Protection Board.

We would like to emphasize your rights in this context as the data subject; you have the right:  

• To learn whether or not your personal data are being processed,
• To request information on the procedure, if your personal data have been processed,
• To obtain information on the purpose of processing of personal data and whether or not personal data has been used in line with their purpose;
• To obtain information about the third persons to whom personal data were communicated domestically or abroad,
• To request the correction of personal data that may have been incompletely or inaccurately processed;
• To request the deletion or destruction of personal data within the framework of the conditions set forth in the applicable legislation,
• To request notification of the procedures set out under the last two sub-paragraphs above to third parties to whom the personal data has been transferred,
• To object to the occurrence of a result which is detrimental to the person concerned as a result of analysing of the processed data exclusively through automatic systems; and
• To request indemnification for damages in the case that damages are sustained as a result of unlawful processing of personal data.