Privacy Notice (KVKK)
Purpose
Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti. (the “Company”) aims to process the personal data of its natural person customers in accordance with Law No. 6698 on the Protection of Personal Data (the “KVKK Law”) and other applicable legislation. Because you are a natural person customer of our Company, the personal data you have provided or will provide to us and/or that our Company obtains externally by any means are processed by our Company in its capacity as “Data Controller” as follows:
- Your personal data are processed within the framework of the purpose requiring their processing, and in a manner connected with, limited to and proportionate to that purpose;
- preserving the accuracy and the most up-to-date form of the personal data as reported to our Company;
- We hereby inform you that your personal data may be recorded, stored, retained, reorganised, shared with institutions legally authorised to request such data, and — under the conditions set out in the KVKK Law — transferred or assigned to third parties in Türkiye or abroad, classified, processed in the other ways listed in the KVKK Law and subjected to the other operations listed therein. Through this Privacy Notice, Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti. undertakes to carry out and develop its activities in line with the principles set out in the KVKK Law.
Collection of the Personal Data of Natural Person Customers and the Procedure Applied
Our Company will process your personal data for the purposes set out in this Privacy Notice. Should there be any change in the purpose of processing your personal data, your separate consent will be obtained. The personal data of customers collected and used by our Company are in particular the following:
Identity: the data group containing information relating to a person's identity.
Name, surname, identity card, tax identification number
Contact: the data group that may be used to reach a person.
telephone number, e-mail address, business address, delivery address, emergency contact details;
Location: this data category covers data types such as the location information of the place where the person is.
location data (country, city, postcode or district), GPRS information;
Legal proceedings: this data category covers data types such as information in correspondence with judicial authorities and information in case files.
legal proceedings and compliance information;
Customer transactions: this data category covers data types such as call centre records, invoice, promissory note and cheque details, information on counter receipts, order information and request information.
name, title, tax number, e-mail address etc., the work process carried out, customer instructions, customer code, cheque and promissory note details, order information, invoice/e-invoice information
Physical premises security: this data category covers data types such as entry and exit records of employees and visitors and camera recordings.
image recordings, cameras;
Finance: the data group containing a person's financial information.
IBAN, Findeks score, cheque and promissory note amounts, mail order information;
Marketing: this data category covers data types such as purchase history information, surveys, cookie records and information obtained through campaign activities.
marketing information;
Signature data: the data group containing a person's signature information.
photocopy / scan of signature.
Your personal data are collected — both before the contractual relationship is established and after it is established and throughout its continuation — by means of all kinds of information, records and documents you have submitted to our Company and that are obtained from third parties and, for the reasons prescribed by law, from public institutions and organisations, through physical or electronic media for the reasons prescribed by law, and through the cameras installed on the Company's premises.
Purposes of Processing Personal Data and Legal Grounds
Your personal data are processed for the fulfilment of legal obligations and requirements arising from — without being limited to — the Income Tax Law, the Corporate Tax Law, the Stamp Duty Law, the Turkish Commercial Code and the Turkish Code of Obligations; for the establishment and performance of the service contract; where necessary for the legitimate interests of Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti., provided that this does not harm the fundamental rights and freedoms of the data subject; and where expressly provided for by law, in accordance with Articles 5 and 6 of the KVKK Law. Your personal data may be processed by our Company for the following purposes, without being limited to them:
- recording the details of the customer's authorised employees in the system;
- making mandatory reports to the competent public institutions and organisations;
- carrying out customer service evaluation and follow-up processes;
- carrying out customer portfolio activities;
- conducting the market research required for the sale and marketing of services;
- carrying out the marketing and sales activities for services and products;
- managing relations with business partners and suppliers.
Your personal data will be retained for the period specified in the relevant legislation, or for the reasonable period until the purpose of processing ceases to exist, and in any case for the statutory limitation periods.
Transfer of Personal Data to Third Parties
The procedures and principles applicable to transfers of personal data are set out in Articles 8 and 9 of the KVKK Law, and the personal data and special categories of personal data of the data subject may be transferred to third parties in Türkiye. In order to perform the services, your personal data may be processed by Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti. and shared with third parties from which our Company receives services, contracted institutions, lawyers for the purpose of resolving legal disputes, natural and legal persons with whom we have a relationship of representation, our business partners and other third parties — including but not limited to cases required by the Law and other legislation, by regulations relating to the laws, by the rules of supervisory and regulatory institutions and organisations, and by public authorities. However, in all cases and save for the exceptions, special categories of personal data may not be transferred without the explicit consent of the data subject. Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti. may transfer personal data within Türkiye where the necessary conditions are met, and may also transfer them to third parties located abroad in accordance with the conditions prescribed by the relevant Law and legislation and by taking all the necessary security measures and precautions.
Ensuring the Security and Confidentiality of Personal Data
In accordance with Article 12 of the KVKK Law, our Company takes all necessary technical and administrative measures to provide an appropriate level of security in order to prevent the unlawful processing of and unlawful access to the personal data it processes, and to ensure that personal data are preserved.
Technical Measures Taken to Ensure the Lawful Processing of Personal Data and to Prevent Unlawful Access to Personal Data:
- taking technical measures to the extent permitted by technology;
- obtaining support from persons who are experts in technical matters;
- auditing at regular intervals the implementation of the measures taken;
- establishing the software and infrastructure required to provide security;
- restricting access to the data processed within the Company;
- using a lawful backup programme to ensure that personal data are stored securely, and using software that includes virus protection systems.
Delta Proses Otomasyon Kontrol ve Elektronik Sistemleri Sanayi ve Ticaret Ltd. Şti. has taken all technical and technological security measures to protect your personal data and has secured your personal data against possible risks.
Administrative Measures Taken to Ensure the Lawful Processing of Personal Data and to Prevent Unlawful Access to Personal Data:
- training and raising the awareness of company employees with regard to the KVKK Law;
- where a transfer of personal data is involved, ensuring that a provision is added to the contracts concluded with the persons to whom the personal data are transferred, stating that the receiving party will fulfil data security requirements;
- identifying what needs to be done for compliance with the KVKK Law and preparing internal policies for its implementation;
Measures to be Taken in the Event of Unlawful Disclosure of Personal Data:
Should the processed personal data be obtained by others through unlawful means, our Company will notify the data subject and the Board of this situation as soon as possible.
Erasure, Destruction and Anonymisation of Personal Data:
Pursuant to Article 7 of the KVKK Law, where the reasons requiring the processing of personal data cease to exist even though the data have been processed in accordance with the relevant legislation, the personal data are erased, destroyed or anonymised by our Company on its own initiative or upon the request of the data subject. The procedures and principles relating to this matter will be applied in accordance with the KVKK Law and the secondary legislation to be issued on the basis of that Law.
Rights of the Customer:
Pursuant to Article 11 of the KVKK Law, you may apply to our Company and make requests regarding your personal data in relation to the following matters:
a. to learn whether your personal data are being processed;
b. to request information if your personal data have been processed;
c. to learn the purpose of processing your personal data and whether they are used in accordance with that purpose;
d. to learn the third parties in Türkiye to whom your personal data are transferred;
e. to request that your personal data be corrected if they have been processed incompletely or incorrectly, and to request that the action taken in this respect be notified to the third parties to whom the personal data have been transferred;
f. to request the erasure, destruction or anonymisation of your personal data if the reasons requiring their processing cease to exist, and to request that the action taken in this respect be notified to the third parties to whom the personal data have been transferred;
g. to object to a result arising against you through the analysis of your processed personal data exclusively by automated systems;
h. to claim compensation for the damage should you suffer damage as a result of the unlawful processing of your personal data.
In accordance with Article 13 of the KVKK Law, our Company will conclude your applications free of charge within thirty days at the latest, depending on the nature of the request. However, should the process require an additional cost for the Company, the fee set out in the tariff determined by the Personal Data Protection Board in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged.
This Privacy Notice may be revised by our Company where deemed necessary.
I HAVE READ, UNDERSTOOD AND APPROVED THE “PRIVACY NOTICE” SET OUT ABOVE.