GDPR Clarification Text

PERSONAL DATA PROTECTION DISCLOSURE AND CLARIFICATION TEXT
Karakaslar Yapı San. Tic. Ltd. Şti. (hereinafter referred to as "Karakaşlar Yapı"), the protection of your personal data and private information is valuable to us. For this reason, we show all the necessary effort and care to process and preserve the personal data of the persons related to Karakaşlar Yapı in accordance with the Law No. 6698 on the Protection of Personal Data ("GDPR"). As the Data Controller, Karakaşlar Yapı takes the necessary administrative and technical measures to protect your personal data in all transactions related to your personal data, and in accordance with the GDPR, it processes your personal data under the conditions described below and within the limits stipulated in the legislation.

Personal information recorded during your visit to our website is processed in accordance with the legislation on the Protection of Personal Data. In this regard, please review our Privacy Policy, which you can also find on our page. However, we would like to emphasize that no guarantee can be provided regarding data security on other websites that are linked on the Karakaşlar Yapı website. In this regard, the data security policy of the relevant page should be carefully examined.

1. Legal Nature and Scope
Article 10 of the Law No. 6698 on the Protection of Personal Data (" GDPR") requires that the persons whose data are processed be informed when their personal data are obtained. The title of the article is "Data Controller's Obligation to Inform".
According to the provisions of GDPR, Karakaşlar Yapı is the "Data Controller". In this context, with the obligation of disclosure, it is obliged to inform the data owners about the identity of the data controller, the purposes of personal data processing, the persons to whom personal data are transferred and the purposes of transfer, the legal reasons for the collection of personal data, to whom they can be transferred and the methods, and the rights of the personal data owner to the data controller, such as updating, deletion or anonymization, which are listed in Article 11 of the GDPR.
As the Data Controller, Karakaşlar Yapı informs and clarifies that it processes your personal data within the limits and conditions stipulated in the legislation in accordance with the provision of Article 10 of the GDPR with the Clarification Text on the Processing of Personal Data.
2. Identity of the Data Controller
In subparagraph (ı) of paragraph 1 of Article 3 of the GDPR, the data controller is defined as "Natural or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system". In this context, the data controller is Karakaşlar Yapı San. Ve Tic. A.Ş. whose website you have visited.
Karakaşlar Yapı San. Ve Tic. A.Ş.
Address : Alsancak Mah. Atatürk Cad. Mert Plaza No:376 K:8 Konak/ İZMİR / TÜRKİYE
Telephone : 0. 232.469 75 00
E-mail : info@karakaslargroup.com

3. Data Processor
A natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller is defined as "Data Processor" in Article 3 of the GDPR.
4. Purposes of Processing Your Personal Data
In line with the principles in the GDPR, your personal data is processed;
To be informed about the services offered by Karakaşlar Yapı and to benefit you better;
To improve the quality of the services offered by Karakaşlar Yapı, to present and recommend them by customizing them according to the needs, tastes and usage habits of our customers;
To inform you about our services and to keep you informed when necessary;
To plan and implement our human resources policies in the best way; to plan and execute our commercial partnerships and strategies correctly; to ensure the legal, commercial and physical security of our Company and our business partners, to ensure the corporate functioning of the Company, to carry out studies to ensure that you benefit from the services offered by our Company in the best way,
To ensure data security at the highest level, to create databases, to improve the services offered on our Company's website, to communicate with those who submit their requests and complaints to our Company, to eliminate errors on our Company's website and to ensure the compliance of the provisions in the Privacy Policy shared on our website,
To determine the strategies of the Company. And they are processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the GDPR.
5. Our Principles Regarding Personal Data Processing
As Karakaşlar Yapı we adopted as a principle
a) To operate in accordance with the law and honesty rules,
b) To strive to ensure accuracy and actuality,
c) To be processed for specific, explicit and legitimate purposes,
ç) To be relevant, limited and proportionate to the purpose for which they are processed,
d) To be kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
.
6. Ways of Processing Personal Data
Your data is kept and processed by Karakaşlar Yapı only in the presence of your consent o in compliance with the law.

To Whom Processed Personal Data Can Be Transferred, And For Which Purposes:
Your personal data collected and processed in our company in accordance with the GDPR, only for the purpose of performing the work and accompanied by confidentiality agreements;
Karakaşlar Yapı may transfer your data in accordance with the data processing transfer conditions specified in Article 8 of the Law No. 6698 on the Protection of Personal Data in order to fulfill our obligation before security and laws (in cases where we have a legal or administrative obligation to notify or provide information, such as but not limited to the fight against crime, the threat of state and public security) and to authorized persons and institutions, internal departments, in some cases, to consultants in order to fulfill the training activities, to ensure continuity and to realize the project, to our business partners, business contacts, performance assistants and subcontractors if it requires the performance of the work, the continuity of the activities carried out, the performance of the works related to the company and its field of activity.
8. Method and Legal Reason for Collecting Your Personal Data
Your personal data may vary depending on the service or commercial activity provided by our Company;
In accordance with Articles 4, 5 and 6 of the GDPR, your personal data may be collected, updated and processed verbally, in writing or electronically by automatic or non-automatic methods, offices, call center, website, social media channels, mobile applications and similar means.
Your personal data is obtained verbally, in writing or electronically, in order to provide the services we offer by the Company within the legal framework determined in line with the above-mentioned purposes and to fulfill our Company's contractual and legal obligations in a complete and accurate manner. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the GDPR.

9. How Do We Protect?
All necessary technical and administrative measures are taken to protect the personal data collected by Karakaşlar Yapı and to prevent unauthorized access and to prevent our customers and prospective customers from being victimized. Within this framework, it is ensured that the software complies with the standards, third parties are carefully selected and our Privacy Policy is complied with within the company.

10. Rights of the Personal Data Owner and Application
As personal data owners, in case you submit your requests regarding your rights listed in Article 11 of the GDPR to our Company by the methods set out below in this Clarification Text, our Company will finalize the request free of charge within thirty days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In addition, since applications regarding personal data must be made by the data owner himself/herself in accordance with the legislation in force, only the part of your applications related to you will be answered, and an application made about your spouse, relative or friend will not be accepted.
In this context, personal data owners can apply to the relevant person announced by Karakaşlar Yapı on our website regarding yourself and you have the right;

• To learn whether the personal data were processed or not,
• If the personal data were processed, to request regarding information,
• To learn the purpose of the processing of personal data and whether they are used for their intended purpose,
• To learn the third parties that the data are transferred to, both domestic and abroad,
• To request correction if the personal data are misprocessed or the procession is incomplete, and request the notification of the transaction within this scope to the third parties that the data are transferred to,
• To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of GDPR and other relevant laws, and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the occurrence of the results against themselves by the exclusive analysis of the data processed by automatic systems,
• To demand the compensation of the damage in case of damage due to unlawful processing of personal data.

11. Making the Application
In accordance with paragraph 1 of Article 13 of the GDPR, you can send your request to use your rights specified in Article 11 of the same law to info@karakaslargroup.com by using the registered electronic mail (KEP) address or the electronic mail address you have previously notified to our company and registered in our system, or in writing in person, by notary public or registered mail. You can access the necessary explanations and the application and information request form from the link. https://www.karakaslargroup.com/tr/bilgi/GDPR-basvuru-ve-bilgi-talep-formu/

In the application;
a) Your name, surname and signature if the application is in writing,
b) If you are a citizen of the Republic of Türkiye, your T.R. ID number; if you are not, your nationality, passport number or ID number, if any,
c) Your residential or workplace address for notification,
ç) Your e-mail address, telephone and fax number, if any,
d) The subject of your request must be present. Relevant information and documents should be attached to the application.