GDPR

GENERAL INFORMATION AND CLARIFICATION TEXT WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

This information and clarification text has been prepared by HİSAR ÇELİK DÖKÜM SAN. VE TİC. A.Ş. (hereinafter referred to as "HİSAR") in order to inform and enlighten the data owners during the collection, acquisition, storage, sharing and privacy protection of personal data in accordance with the law within the scope of the Personal Data Protection Law No. 6698 adopted on 24/3/2016 and other relevant legislation.

In this context, this information text is presented for your information and review in order to fulfil our obligation to inform in accordance with Article 10 of the relevant law in terms of the conditions and purposes to be explained below and the data to be processed in accordance with the law.

Definition of Data Controller:
As defined in Article 3 of Law No. 6698, the data controller is defined as "the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system".

In this context, HİSAR is also responsible for the processing of personal data in the capacity of Data Controller, and the fulfilment of the obligation to inform and clarify is provided by this clarification text.

Legal Basis and Reasons for Processing Personal Data:
In case of obtaining personal data clearly defined in the Law No. 6698 on the Protection of Personal Data, these data are processed within the scope of Articles 5 and 6 of the relevant Law. In this context, your personal data will be processed on the basis of the following legal reasons, and your explicit consent will be requested for the processing of your Personal Data in cases other than the specified legal reasons.

These legal purposes as required by law;
  • In order to provide information when requested by authorised public institutions and organisations, especially when requested by the Court and authorised public officials,
  • Fulfilment of legal obligations and exercise of rights arising from the legislation in force,
  • It is deemed necessary for the fulfilment of obligations arising from the establishment, performance and conclusion of the contract,
  • The processing of personal data by our Region is mandatory for the establishment, exercise or protection of the rights of us or you or third parties,
  • Provided that the fundamental rights and freedoms of the person are protected, it is mandatory to process the data for the legitimate interests of HİSAR (carrying out satisfaction evaluation activities of existing customers, organisation and event management, carrying out finance-accounting transactions, carrying out audit processes, carrying out occupational health and safety activities, court, etc. fulfilling the obligation to notify the competent public institutions, etc.)
  • It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,
  • Personal Data has already been made public by the data subject,
  • Processing of data is mandatory for the establishment, exercise or protection of a right.
Personal Data other than the purposes listed above will be processed by obtaining the explicit consent of the data subject. Personal data obtained and processed within the framework of the Law may differ depending on the legal relationship between HİSAR and the data subject. Personal data may be collected by HİSAR in accordance with the law through different platforms (manual ways, verbal/written statements, electronic channels, forms on HİSAR's website or by entering information such as name, surname, business or private e-mail address or through pages logged in using username and password within the scope of website visits and usage, events and activities carried out in our Region).

Personal Data acquired by our Region may be obtained, stored, updated and processed as long as the above conditions and/or explicit consent is available.

Collection of Personal Data, Purpose of Processing
Your Personal Data obtained by us through our website or other means mentioned above will be processed by us for the following purposes according to its nature:
  • Carrying out the necessary planning, evaluation and studies by our business units in order to benefit our customers from the products and services we offer as HİSAR;
  • Carrying out advertising and marketing activities for the services we offer, providing information on similar issues, carrying out corporate communication activities,
  • Carrying out Marketing and Customer Relationship Management activities;
  • Organising corporate communication and other events, campaigns and invitations within this scope and informing about them, conducting market research studies;
  • Improving and personalising the digital platforms that we offer to our customers, and if necessary, using cookies for this purpose;
  • Follow-up and evaluation of requests, suggestions and complaints from the relevant persons, customer management and planning in this context, carrying out evaluation studies in all areas;
  • Ensuring the sustainability of all kinds of activities carried out within the scope of HİSAR, making improvements and auditing the persons and companies with whom we have established contractual relations;
  • Ensuring the legal and commercial security of persons with whom HİSAR has a business-service relationship,
  • Planning and execution of occupational health and safety processes:
  • Exercising legal rights by using the aforementioned information, using the information regarding the transaction history as evidence in case of dispute after the termination of the existing legal relationship with the relevant person / institution:
  • Conducting planning, reporting, visitor/customer statistics and similar examinations within the scope of its activities and/or ensuring compliance with the relevant domestic legislation, providing the information requested by public institutions and organizations, fulfilling reporting obligations.
  • Confirming the identity information of the persons and visitors who make transactions on the website/mobile applications or on whose behalf transactions are made, and recording the address and other necessary information required for communication,
  • Ensuring the security of the website and other electronic systems and physical environments established by HISAR
Rights of the Data Subject

The rights of natural/legal persons whose personal data are processed in accordance with Article 11 of the KVKK are as follows:
  • To learn whether personal data is processed or not,
  • Request information if personal data has been processed,
  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom personal data are transferred domestically or abroad,
  • To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data if the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
  • In case of damage due to unlawful processing of personal data, demand compensation for the damage.
To exercise the above-mentioned rights, your distinctive identity / registration information and the right to be used and explanations regarding this matter, as a written request, in accordance with Article 11 of the KVK Law No. 6698, HİSAR's headquarters address, "Beylikbağı Mah. Istanbul Cad. No : 25 Gebze/KOCAELİ/TURKEY" address by registered letter with return receipt requested or to info@hisarcelik.com e-mail address.
Evaluation of Data Owner's Requests
Pursuant to paragraph 1 of Article 13 of the KVK Law No. 6698, your application will be finalised free of charge as soon as possible after the requests regarding the exercise of the above-mentioned rights are submitted to HİSAR in writing or by other methods determined by the Personal Data Protection Board and will be returned to you via your contact information you have provided to us.

Links to third party websites (links)
HİSAR Website may contain links to third party websites. HİSAR does not accept any responsibility for the privacy policies of these sites and in no way guarantees that the data protection practices in force of these Web sites comply with all relevant legislation and regulations.

HİSAR STEEL CASTING SAN. VE TİC. A.Ş.