LPPD | Alkan Lighting | Alkan Asya Afrika

ALKAN ASYA AFRİKA ÜRETİM VE ELEKTRİK MALZEMELERİ SANAYİ TİCARET ANONİM ŞİRKETİ

WEBSITE DISCLOSURE TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBERED 6698

Alkan Asya Afrika Üretim ve Elektrik Malzemeleri Sanayi Ticaret Anonim Şirketi (“Alkan Asya Afrika”), takes all kinds of technical and legal measures in accordance with the Law on the Protection of Personal Data No. 6698 (“LPPD”) in the processing of your personal data due to the activities it carries out.

Your personal data are processed by Alkan Asya Afrika as data supervisor;

In accordance with the law and good faith,
Within the framework of our contractual and legal obligations,
By keeping their up-to-dateness and accuracy as you have notified or they are reported to us,
In accordance with the purpose of processing, prudently, and in a limited way,
To be kept for the period required for the purpose for which they are processed or as stipulated in the relevant legislation.

Relevant persons can access further information on the processed personal data, the purposes of processing their personal data, their transfer to third parties, the legal grounds for collecting personal data and their rights in the LPPD from the following disclosure text.

Processed Personal Data

The legal grounds on which Alkan Asya Afrika is based during data processing are as follows:

Existence of express consent (“a.5/1 and article a.6/1”).
Explicitly stipulated in laws (“a.5/2-a”).
It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract (“a.5/2-c”).
It is mandatory for the data supervisor to fulfill its legal obligation (“a.5/2-ç”).
Being made public by the relevant person (“a.5/2-d”).
Data processing is mandatory for the establishment, exercise or protection of a right (“a.5/2-e”) (“a.5/2-e”).
Data processing is mandatory for the legitimate interests of the data supervisor, provided that it does not harm the fundamental rights and freedoms of the relevant person (“a.5/2-f”).

Processed Personal Data

Data Processing Activity	Processed Personal Data	Conditions of Data Processing	Data Collection Methods
Provision of internet access.	Name and Surname, IP information, computer serial number, MAC IP address	a.5/2-e, a.5/2-f.	From the relevant person (Partially automatic).
Keeping camera records.	Image data.	a.5/2-f.	Through CCTV (Automatically).
Execution of B2B processes.	Name and surname, company name, tax office and tax identification number, TRIN, telephone, e-mail, address.	a.5/2-c, a.5/2-e, a.5/2-f.	Via Internet Forms (Partially automatic).

Making payments via online collection.	Company name, tax identification number and tax office, e-mail, address, telephone, and full payment card information.	a.5/2-c, a.5/2-e, a.5/2-f.	Via Internet form or e-mail (Partially automatic).
Giving business advances.	Name and surname, title, e-mail.	a.5/2-c, a.5/2-e.	Via e-mail from the relevant person (Partially automatic).
Follow-up of requests, complaints and suggestions from social media.	Name and surname, (relevant social media) user name.	a.5/2-f.	From the relevant person himself/herself and via social media (Partially automatic).
Execution of e-archive and e-invoicing processes.	TRIN, telephone e-mail, bank account information, name and surname, address, tax identification number and tax office and trade registry information.	a.5/2-c, a.5/2-ç, a.5/2-e.	Via ERP (Partially automatic).
Opening current (debit) cards.	Name and surname, TRIN, telephone e-mail, bank account information, address, tax identification number and tax office and trade registry information.	a.5/2-c, a.5/2-ç, a.5/2-e.	Via e-mail or physically (Partially automatic and in non-automatic ways).
Execution of Mail Order activities.	Company name, bank account number, of the card), expire date and CVV number, signature, tax office, tax identification number.	a.5/2-c, a.5/2-e, a.5/2-f.	By filling out a form or by fax (Partially automatic and in non-automatic ways).
Keeping records of the incoming visitors.	Name and surname, vehicle plate information, entry-exit time.	a.5/2-ç, a.5/2-f.	Verbally from the relevant person (In non-automatic ways).
Designing lighting projects.	Name and surname, e-mail, telephone request.	a.5/2-c.	Via e-mail (Partially automatic).
Execution of bidding processes.	Name and surname, e-mail, telephone company name, address, tax identification number and tax office, company representative, information on the submitted bids, order information.	a.5/2-c, a.5/2-e.	Via ERP and e-mail (Automatic and partially automatic).
Creating the current records of the leads.	Name and surname of the official, e-mail, telephone, business address, tax identification number, stamp sample.	a.5/2-c, a.5/2-e, a.5/2-f.	Via e-mail (Partially automatic).
Designing lighting projects.	Name and surname, e-mail, telephone request.	a.5/2-c.	Via e-mail (Partially automatic).
Receiving the purchase orders from the clients.	Name and surname, TRIN, e-mail, telephone request, tax registration certificate information, trade registry information, findex report, customer financial information, bank inquiry.	a.5/2-c, a.5/2-e.	From the client himself/herself or via institutional resources (Partially automatic and in non-automatic ways).
Execution of marketing activities with the data obtained through the project news site.	Name and surname, e-mail, address, telephone, website, projects which are in progress and completed.	a.5/2-c, a.5/2-f	Through Canias system or via e-mail (Partially automatic).
Execution of after-sales services.	Name and surname, request, question and complaint information, shipping information (driver name, plate), delivery note information, reports.	a.5/2-c, a.5/2-e, a.5/2-f.	From the customer or the relevant department (Partly automatic or in non-automatic ways).
Execution of operations related to the construction site controller.	Name and surname, title, the construction sites for which s/he is responsible, telephone, e-mail.	a.5/2-c.	From the relevant person or client (In non-automatic ways).
Execution and control of order approval processes.	Client name, address, telephone order information, payment information.	a.5/2-c, a.5/2-e, a.5/2-f.	Through the system (Partially automatic).
Checking invoices.	Company name, TRIN, address, telephone e-mail (all the information on the invoice).	a.5/2-c, a.5/2-ç, a.5/2-e.	In written form from the relevant person (In non-automatic ways).
Execution of purchase approval processes.		a.5/2-c, a.5/2-ç, a.5/2-e.
Execution of work orders.	Client name.	a.5/2-f.	Through Canias (Partially automatic).
Keeping records of meeting participants.	Name and surname, company name.	a.5/2-f.	Verbally (In non-automatic ways).
Identification of outgoing documents.	Serial numbers of invoices and delivery notes.	a.5/2-c, a.5/2-f.	In written form from the relevant departments (Partially automatic).
Inspection of products to be accepted for return.	Product name, order quantity, delivery note number and date, client name, control result.	a.5/2-e, a.5/2-f.	Through the system (Partially automatic).
Drawing up outgoing delivery notes.	Name and surname, signature, plate-mileage information, telephone, invoice, tax identification number, address, TRIN.	a.5/2-c, a.5/2-ç.	Verbally (In non-automatic ways).
Making the entry process of the sales return invoices.	Name and surname, tax identification number, TRIN, address information, telephone, signature.	a.5/2-c, a.5/2-ç.	Through Canias (Partially automatic).

Transfer of Personal Data to Third Parties At Home

Purpose of Data Transfer	Recipient Groups of the Transferred Data
The data processed during provision of Internet access, in order to fulfill legal obligations,	They are transferred to competent authorities.
Personal data processed during the execution of the proposal processes, in order to follow the business processes in the Group company,	They are transferred to Alkan Grup.
Personal data processed during the execution of the transactions related to the construction site controller, for the approval of the products,	They are transferred to the clients served.
The data processed during the recording of the camera records, upon request, in order to fulfill the legal obligations,	They are transferred to the competent judicial authorities and public institutions and organizations.
The data processed during the execution of B2B processes, for the monitoring and execution of these processes,	They are transferred to Alkan Grup.
For the purpose of making the payments through Netahsilat, executing the process and storing the data physically,	They are transferred to Netahsil and Alkan Grup.
The personal data processed during the execution of e-archive and e-invoicing processes, in order to fulfill legal obligations,	They are transferred to the Ministry of Finance and Alkan Grup.
The personal data processed during the opening of current (debit) cards, in order to fulfill legal obligations and legal processes,	They are transferred to Alkan Grup, authorized tax office, certified public accountants, independent auditors, and law firms from which service is received.
The personal data processed during the execution of Mail Order activities, in order to make payments with the POS machine,	They are transferred to the bank to which payment is made.
The personal data processed during the creation of the current record of the leads, for the purpose of conducting business processes in the Group company,	They are transferred to Alkan Grup.
The personal data processed during the execution of marketing activities with the data obtained through the project news site, for the purpose of work sharing.,	They are transferred to Alkan Grup.
The personal data processed during the execution of after-sales services, in order to meet the demands,	They are transferred to the clients.
The personal data processed during the examination of the products to be accepted for return, in order to follow the process,	They are transferred to the clients.

D. Rights of the Relevant Person

Everyone, by applying to the addresses of the company stated below in accordance with the Communiqué on Application Procedures and Principles for Data Supervisors, has the following rights;

Learning whether personal data is processed or not,
If the personal data has been processed, to request information about it,
To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
To know the third parties to whom the personal data is transferred at home or abroad,
To request correction of the personal data in case of incomplete or incorrect processing and request notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
To request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the provisions of the law and other applicable laws, and request that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
To request the compensation of the damage in case of loss due to unlawful processing of personal data.

Applications submitted to us are answered within 30 (thirty) days at the latest from the date of receipt of the request by our Company, depending on the nature of the request. In case the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis. Respectfully submitted.