The Data Controller; Çağdaş Kağıt Ambalaj San. ve Tic. Ltd. Şti. (Address: Hadımköy Mahallesi İbni Sina Caddesi No:8/5 ARNAVUTKÖY/ISTANBUL Tel: 0212 674 16 25 Website: www.cagdaskagit.com, E-mail: [email protected] Mersis No: 0217038013300019) has prepared and published this disclosure text for the purpose of informing our customers about the procedures and principles regarding the protection of their personal data in accordance with the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as "KVKK") and the Communique on Procedures and Principles for Fulfillment of the Clarification Obligation (hereinafter referred to as "Communique").
KVKK Article 10; "During the acquisition of personal data, the data controller or the authorized person must inform the relevant persons about the identity of the data controller and, if applicable, its representative, the purpose of processing personal data, to whom and for what purpose the processed personal data may be transferred, the method and legal basis of data collection, and the rights listed in Article 11."
Personal data: Any information relating to an identified or identifiable natural person.
Processing of personal data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transmitting, receiving, making available, classifying, or preventing the use of such data, whether by automatic means or as part of a non-automatic data recording system.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system. In this text, the data controller is Çağdaş Kağıt Ambalaj San. ve Tic. Ltd. Şti., located at Hadımköy Mahallesi İbni Sina Caddesi No:8/5 ARNAVUTKÖY/ISTANBUL.
Data Filing System (VERBIS): A system in which personal data is processed according to certain criteria.
Explicit Consent: Consent that is given for a specific purpose, based on being informed, and expressed freely.
The Board: Refers to the Personal Data Protection Board.
Our company may process the personal data of customers in accordance with the purposes and processing conditions specified in this text. The personal data subject to processing includes: a. Identity Data
Name, surname, mother/father's name, date of birth, T.C. identity number, gender, marital status, identity card serial-number, nationality, passport information, job title and position. b. Contact Data
Phone number, email address, address information, company internal communication details (company phone number, internal phone number, corporate email address, registered email address). c. Financial Data
Bank IBAN number, salary and details, debt information. Visual and Auditory Data
Photographs and video recordings of the person. e. Other Data
Invoice, promissory note, check information, order details, shopping history, IP address information, website login - logout records, handwritten signature, complaint requests.
In accordance with Article 10 of the KVKK and Article 5 of the Communique, and in line with the processing conditions specified in Article 4 of the KVKK, the personal data of customers may be processed for the following purposes:
Personal data may be obtained directly from the data subject, third parties, and legal authorities during the establishment of a legal relationship. In this context, personal data is collected through tools such as contracts, emails, application forms, and through written or verbal communication channels with our company, either verbally, in writing, or electronically. According to Article 5 of the Law on the Protection of Personal Data (KVKK), personal data cannot be processed without the explicit consent of the data subject. However, the law specifies exceptions where explicit consent is not required. These exceptions include cases where there is an explicit provision in the law, where processing personal data is directly related to the establishment or performance of a contract, when it is necessary to process personal data for the company's legal obligations, when the data subject has made the data public, when processing is necessary for the establishment, use, or protection of a legal claim, and when processing is necessary for the legitimate interests of the data controller without violating the fundamental rights and freedoms of the data subject. In these cases, personal data may be processed by our company without the explicit consent of the data subject.
In order to continue the activities of Çağdaş Kağıt Ambalaj San. ve Tic. Ltd. Şti., personal data is processed for the purposes and conditions specified in Articles 5 and 6 of the KVKK, in accordance with the relevant legal regulations and the procedures set forth in this Clarification Text to achieve the mentioned purposes and fulfill legal obligations, based on the above-mentioned legal grounds.
Customer personal data may be shared and transferred in accordance with the data transfer and processing conditions specified in Articles 8 and 9 of the Law, to ensure the realization of the above-mentioned purposes and in accordance with the security and confidentiality principles established by the legislation. Sufficient and effective measures will be taken to ensure the safety and confidentiality of personal data when sharing it with suppliers, shareholders, authorized vendors, private law entities providing services (such as auditing, events and organization, legal matters), independent audit organizations, financial institutions, direct and indirect affiliates, business partners both domestic and international, companies providing storage, archiving, and IT support (such as server, hosting, software, cloud computing), and legally authorized public institutions.
Customer personal data may be shared and transferred in accordance with the data transfer and processing conditions specified in Articles 8 and 9 of the Law, to ensure the realization of the above-mentioned purposes and in accordance with the security and confidentiality principles established by the legislation. Sufficient and effective measures will be taken to ensure the safety and confidentiality of personal data when sharing it with suppliers, shareholders, authorized vendors, private law entities providing services (such as auditing, events and organization, legal matters), independent audit organizations, financial institutions, direct and indirect affiliates, business partners both domestic and international, companies providing storage, archiving, and IT support (such as server, hosting, software, cloud computing), and legally authorized public institutions.
In accordance with the provisions of the KVKK, personal data processed for the purposes stated in this "Clarification Text on Personal Data Processing" will be deleted, destroyed, or anonymized after the purpose for which the data was processed ceases to exist, or when the statutory retention periods for personal data have expired. The data will be deleted, destroyed, or anonymized in accordance with the Personal Data Retention and Destruction Policy, as applicable.
The data subject has the right to learn whether their personal data is being processed, request information if their personal data is processed, learn the purpose of processing personal data and whether it is being used in accordance with that purpose, know the third parties to whom personal data is transferred both domestically and internationally, request the correction of personal data if it is incorrect or incomplete, request the deletion or destruction of personal data if the reasons for processing no longer exist, request notification to third parties of the deletion, destruction, or correction of personal data, object to results obtained through automatic systems leading to unfavorable consequences for the person, and request compensation for damages in case of unlawful processing of personal data.
In accordance with Article 28/2 of the KVKK, the rights specified in Article 11 of the KVKK cannot be exercised, except for the right to request compensation for damages, in the following cases:
The data subject may submit their applications regarding the rights listed above in accordance with the application procedures specified in the "Regulation on the Procedures and Principles for Application to the Data Controller".
Requests under the rights listed in Article 11 of the Personal Data Protection Law No. 6698 may be submitted through one of the methods explained below by filling out the form at www.cagdaskagit.com/kvkk, in accordance with Article 13 of the KVKK and Article 5 of the "Regulation on the Procedures and Principles for Application to the Data Controller".
Applications submitted to the company will be answered within 30 days from the date the request is received, depending on the nature of the request, in accordance with Article 13/2 of the KVKK. Responses to applications will be delivered to the applicant in writing or electronically in accordance with Article 13 of the KVKK.
| APPLICATION METHOD | APPLICATION ADDRESS | INFORMATION TO BE INCLUDED IN THE APPLICATION | |
|---|---|---|---|
| 1. Written Application | In-person application with a wet signature or via Notary | Hadımköy Mahallesi İbni Sina Caddesi No:8/5 ARNAVUTKÖY/ISTANBUL |
The envelope/notification must be labeled "Request for Information Under the Personal Data Protection Law". |
| 2. Registered Electronic Mail (KEP) | With Registered Electronic Mail (KEP) address | [email protected] | The subject of the email must include "Request for Information Under the Personal Data Protection Law". |
| 3. Application via Email Registered in the Company's System | Via the electronic mail address registered in the Çağdaş Kağıt Ambalaj San. ve Tic. Ltd. Şti. system | [email protected] | The subject of the email must include "Request for Information Under the Personal Data Protection Law". |
| 4. Application via Email Not Registered in the Company's System | Via mobile signature/e-signature using an email address not registered in the Çağdaş Kağıt Ambalaj San. ve Tic. Ltd. Şti. system | [email protected] | The subject of the email must include "Request for Information Under the Personal Data Protection Law". |
If the request is accepted or rejected with an explanation of the reason, the response will be delivered to the applicant either electronically or in writing. If the request is accepted, the necessary action will be taken by our company without delay.
FEE: No fee will be charged for responses in writing for requests up to 10 pages; however, for each page exceeding 10 pages, a processing fee of 1 Turkish Lira per page may be charged. If the response to the application is provided in a recording medium such as a CD or flash drive, a fee equivalent to the cost of the recording medium may be requested.
