Current Tenders

İZAYDAŞ COMPANY
INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

This Information Text has been prepared by İZAYDAŞ Company (“Company”) to inform the Company’s customers about the processing of their personal data by the Company within the scope of the Law on the Protection of Personal Data No. 6698 (“Law”).

You can access detailed information regarding the processing of your personal data within the scope of this Information Text from the İZAYDAŞ Company Personal Data Protection and Processing Policy available at [productions.cfd].

a) Methods of Obtaining Personal Data and Legal Grounds
Your personal data is collected in electronic or physical environments. Your personal data collected for the legal reasons specified in this Information Text may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data
Your personal data is processed within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law for the purposes of planning and executing the activities necessary for recommending and promoting the products and services offered by the Company to the relevant persons by customizing them according to their tastes, usage habits, and needs; carrying out the necessary work by our business units to enable the relevant persons to benefit from the products and services offered by the Company and executing the relevant business processes; carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and executing the related business processes; planning and executing the Company's commercial and/or business strategies; and ensuring the legal, technical, and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.

c) Parties to Whom Personal Data May Be Transferred and Purposes of Transfer
Your personal data may be shared with the Company's business partners and suppliers, as well as legally authorized public institutions and organizations and legally authorized private law legal entities, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of planning and executing the activities necessary for recommending and promoting the products and services offered by the Company to the relevant persons by customizing them according to their tastes, usage habits, and needs; carrying out the necessary work by our business units to enable the relevant persons to benefit from the products and services offered by the Company and executing the relevant business processes; carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and executing the related business processes; planning and executing the Company's commercial and/or business strategies; and ensuring the legal, technical, and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.

d) Rights of Data Subjects and Exercise of These Rights
As personal data subjects, if you submit your requests regarding your rights listed below to the Company through the methods specified under the heading Exercise of Rights by Data Subjects, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.

Pursuant to Article 11 of the Law, as a personal data subject, you have the following rights:

• To learn whether your personal data is being processed,

• To request information if your personal data has been processed,

• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

• To know the third parties to whom your personal data is transferred, in the country or abroad,

• To request the correction of your personal data if it is incomplete or incorrectly processed and to request that the transaction carried out in this context be notified to the third parties to whom your personal data has been transferred,

• To request the deletion or destruction of your personal data in the event that the reasons requiring its processing cease to exist, despite having been processed in accordance with the provisions of the Law and other relevant laws, and to request that the transaction carried out in this context be notified to the third parties to whom your personal data has been transferred,

• To object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,

• To demand the compensation of the damage in case of damage due to the unlawful processing of your personal data.

Paragraph 2 of Article 28 of the Law lists the cases where data subjects do not have the right to request, and in this context:

• The processing of personal data is necessary for the prevention of crime or for a criminal investigation,

• Processing of personal data made public by the data subject himself/herself,

• The processing of personal data is necessary for the performance of supervisory or regulatory duties and for disciplinary investigation or prosecution by authorized and competent public institutions and organizations and professional organizations with public institution status, based on the authority granted by the law,

• The processing of personal data is necessary for the protection of the economic and financial interests of the State with regard to budgetary, tax, and financial matters,

the rights specified above cannot be exercised for the data in such cases.

According to paragraph 1 of Article 28 of the Law, in the following cases, the data will be outside the scope of the Law, and therefore, the requests of data subjects will not be processed with respect to this data:

• Processing of personal data by real persons within the scope of activities related to themselves or their family members living in the same residence, provided that it is not given to third parties and that the obligations regarding data security are complied with.

• Processing of personal data for purposes such as research, planning, and statistics by anonymizing them with official statistics.

• Processing of personal data for artistic, historical, literary, or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life, or personal rights, or constitute a crime.

• Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order, or economic security.

• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial, or execution proceedings.

Exercise of Rights by Data Subjects
Data subjects may use the “ Application Form to be Made by the Personal Data Subject to the Data Controller ” at the link [productions.cfd] to exercise the rights mentioned above.
Applications will be made through one of the following methods, together with documents that will identify the relevant data subject:

• Submitting a wet-signed copy of the completed form in person, through a notary, or by registered letter with return receipt to the address [İZAYDAŞ - Turkey],

• Sending the form signed with a secure electronic signature regulated under the Electronic Signature Law No. 5070 via registered electronic mail to the address [[email protected]],

• Following a method prescribed by the Personal Data Protection Board.

The Company responds to data subjects who wish to use these rights within the limits provided in the Law, within a maximum of thirty (30) days, as stipulated in the Law. For third parties to make an application request on behalf of personal data subjects, a special power of attorney issued by the data subject through a notary on behalf of the applicant must be available.
As a rule, data subject applications are processed free of charge, but a fee may be charged based on the fee schedule[1] stipulated by the Personal Data Protection Board.
The Company may request information from the relevant person to determine whether the applicant is the personal data subject, and may ask the personal data subject questions about his/her application to clarify the issues stated in the application.

[1] In accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of the data subjects is to be answered in writing, no fee is charged for up to ten pages. For each page over ten pages, a transaction fee of 1 Turkish Lira may be charged. If the response to the application is given in a recording medium such as a CD or flash memory, the fee that may be requested by the Board cannot exceed the cost of the recording medium.