ISTALYA KIMYA DATA PRIVACY STATEMENT
In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), published in the Official Gazette dated April 7, 2016, No. 29677, which aims to protect individuals’ fundamental rights and freedoms, particularly the confidentiality of private life, and pursuant to Article 10 titled “Obligation of Data Controller to Inform” and the Communiqué on Procedures and Principles to be Followed in Fulfilling the Obligation of Information, published in the Official Gazette dated March 10, 2018, No. 30356, this Privacy Notice aims to inform you, as the data controller, about the personal data processed by Istalya Kimya, located at Uğur Mumcu Mah. 2290 Sok. No:8, Sultangazi / Istanbul, Turkey.
Processed Personal Data
Your personal data may be processed in the following cases:
When contacting us for satisfaction, complaints, questions, or suggestions: name, surname, e-mail address, phone number, photographs.
When using our websites: IP address and browser information obtained through cookies.
When visiting Istalya Kimya facilities, factories, or offices: visitor entry/exit information, full name, ID number, signature, e-mail, phone number, vehicle plate, and CCTV recordings.
When participating in our promotional, advertising, campaign, social responsibility projects, or events: identity and visual/audio data.
When applying for a position at Istalya Kimya: your resume and any other personal data you provide.
Purposes of Processing Personal Data
Your personal data obtained in connection with your relationship with Istalya Kimya is processed for the following purposes:
Emergency Management Processes
Information Security Processes
Management of Job Applicant Processes
Audits and Ethical Review Activities
Ensuring Compliance with Legal Regulations
Physical Security of Facilities
Communication Activities
Human Resources Planning and Processes
Conducting / Monitoring Business Operations
Post-Sales Product / Service Support
Customer Relationship Management
Customer Satisfaction Activities
Event and Organization Management
Marketing Analysis
Social Responsibility and Civil Society Activities
Tracking Requests / Complaints
Ensuring Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions, and Organizations
Recording and Tracking Visitor Logs
Methods and Legal Basis of Data Collection
Your personal data is collected directly from you, third parties, and legal authorities, and processed automatically or manually through websites, contracts, mobile applications, e-mails, phone calls, or application forms, as well as verbally, physically, in writing, or electronically, for the purposes mentioned above.
The legal grounds for processing your personal data include:
Necessity for the establishment or performance of a contract
Compliance with the legal obligations of the data controller
Necessity for establishing, exercising, or protecting a right
This is in accordance with Articles 5, 6, 8, and 9 of the Law.
Retention Period of Personal Data
Your personal data is retained within the company for the legally required retention periods and for the duration necessary to fulfill the purposes for which it was collected. Once the retention period expires or the purpose of processing ceases, personal data is deleted, destroyed, or anonymized in accordance with Article 7 of the Law.
Transfer of Processed Personal Data
Your personal data may be transferred domestically and internationally to authorized public institutions, organizations, and business partners’ servers (including cloud services) within the scope of the purposes listed above, in accordance with the Law’s provisions on data transfer.
Rights of Data Subjects
Under Article 11 of the Law, as a data subject, you have the following rights:
To learn whether your personal data is processed
To request information if your personal data has been processed
To learn the purpose of processing and whether it is used accordingly
To know third parties in Turkey or abroad to whom your data is transferred
To request correction of incomplete or inaccurate data
To request deletion or destruction of personal data if the processing reasons no longer exist
To request notification of correction, deletion, or destruction to third parties to whom the data was transferred
To object to results arising from automatic processing of your personal data
To request compensation for damages caused by unlawful processing
Exercising Your Rights
You may exercise your rights under the Law and other relevant legislation by submitting the Data Subject Request Form, available at www.istalyakimya.com, in person, by post, or via notary to:
Uğur Mumcu Mah. 2290 Sok. No:8, Sultangazi / Istanbul, Turkey
Data Subject Request Form (KVKK)
This form is created to allow data subjects to exercise their rights as defined in the Law and IstAlya Chemicals’ Privacy Policy.
Data Subject Information
Full Name:
Turkish ID Number (if applicable):
Address:
Phone Number:
E-mail:
Relationship with IstAlya Chemicals (Please select and provide details in the text box below, including period of relationship and department/branch if applicable):
Customer
Employee
Job Applicant
Supplier
Agent
Visitor
Other (please specify)
Request Details
Please indicate your request(s) regarding your personal data:
I want to know if my personal data is processed
I want to receive information if my personal data has been processed
I want to learn the purpose of processing and if data is used accordingly
I want to know third parties in Turkey or abroad to whom my personal data has been transferred
I want incorrect or incomplete personal data to be corrected
I want my personal data deleted or destroyed if processing is no longer necessary
I want notification of correction to third parties
I want notification of deletion to third parties
I object to automatic processing of my personal data that produces adverse effects
I request compensation for damages caused by unlawful processing
Additional information (if any):
Response Preferences
Istalya Kimya will respond to your request within 30 days and may use the contact details you provide below:
By post □
By e-mail □
Declaration
I hereby request the evaluation and resolution of my data protection requests specified in this form.
Data Subject Name:
Signature:
Date:
