In this Information Notice, the principles regarding the processing of your personal data by Demir Group Construction Industry and Trade Joint Stock Company (“Company”), located at “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/Istanbul”, acting as the data controller in accordance with the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation, are set out below.
1. Purpose of Processing Personal Data
Your personal data in the identity category such as name and surname, and contact information such as email address, are processed for the purposes of carrying out customer service activities, including obtaining information, receiving your requests and suggestions, and collecting complaints.
In addition to the above, your personal data may also be processed in order to ensure that you can benefit from our services without interruption, to improve our product and service diversity, and to prepare and present various reports, analyses, and studies, provided that your fundamental rights and freedoms are not harmed.
2. Method and Legal Basis for Collecting Personal Data
Your personal data collected through the Contact Form on our website is obtained via the digital form you fill out in order to benefit from the customer service provided.
Your personal data such as name, surname, phone number, email address, and message content submitted via the contact form are processed for the purposes of receiving, evaluating, concluding your requests, suggestions, opinions, and complaints, and contacting you within this scope.
These personal data are processed based on the legal ground that processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, in accordance with Article 5(2)(f) of the Personal Data Protection Law No. 6698.
3. Recipients of Personal Data and Purpose of Transfer
The purpose of processing personal data is aligned with the purpose of their transfer. Our Company may transfer the collected personal data to institutions and organizations we cooperate with in order to carry out our activities, to our group companies, to official authorities and public institutions upon request, and to relevant business partners within the scope of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law.
4. Your Rights and Application to the Data Controller
In accordance with Article 11 of the Law, by applying to our Company, you have the right to: a) learn whether your personal data is processed, b) request information if it has been processed, c) learn the purpose of processing and whether it is used in line with its purpose, d) learn the third parties to whom it is transferred domestically or abroad, e) request correction if it is incomplete or incorrectly processed, f) request deletion or destruction within the framework of Article 7 of the Law, g) request notification of the actions carried out under clauses (e) and (f) to third parties to whom the data has been transferred, h) object to a result against you arising from analysis exclusively through automated systems, and i) claim compensation for damages in case of unlawful processing.
You may submit your requests regarding your rights listed above to our Company in accordance with the Communiqué on Principles and Procedures for Application to the Data Controller. You may send your applications by filling out the Application Form on our website and sending it to “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/Istanbul”, or via email to “[kvkk@demirgrup.com]”.
Our Company will finalize your requests as soon as possible and within thirty days at the latest, free of charge for the first application. However, a fee may be charged for subsequent applications on the same subject or if the process requires additional costs. Our Company may accept and process the request or reject it in writing by stating its justification.
In cases where the application made following the above procedure is rejected, the response is found insufficient, or no response is given within the time limit; you have the right to file a complaint with the Personal Data Protection Board (“Board”) within thirty days from the notification of the response and in any case within sixty days from the date of application. However, a complaint cannot be filed without exhausting the application process.
The Board, upon complaint or ex officio upon learning of an alleged violation, examines matters within its jurisdiction. Upon complaint, the Board evaluates the request and responds to the relevant parties. If no response is given within sixty days, the request is deemed rejected. As a result of the examination conducted upon complaint or ex officio, if a violation is identified, the Board orders the data controller to remedy the unlawful actions and notifies the relevant parties. This decision must be implemented without delay and within thirty days at the latest. In cases where irreparable or impossible harm may occur and there is a clear violation of law, the Board may decide to suspend data processing or data transfer abroad.
We would like to emphasize that your data is securely protected by our Company and thank you for your trust.