GENERAL CORPORATE CLARIFICATION TEXT ABOUT PROCESSING OF PERSONAL DATA


As Işık Perde Rayları San. Tic. A. Ş. (“Işık Perde Rayları”) ; we have prepared this clarification text in order to inform our Visitors, Online Visitors, Customers, Potential Customers, Supplier Employees and Supplier Authorities about processing, keeping and transferring of your personal data in accordance with the Law No 6698 on the Protection of Personal Data (“KVKK”) and within the framework of activities arising out of applicable legislation and legal arrangements.


  1. What Are the Categories of Personal Data We Process and Why Do We Process Them?

    In accordance with the principles of:


    1. Complying with the law and good faith,
    2. Being accurate and update when necessary,
    3. Being processed for specific, express and legitimate purposes,
    4. Being connected with, limited to the purpose of processing and being moderate,
    5. Being kept for the time anticipated in the applicable legislation or necessary for the purpose of processing

    anticipated in article 4.2 of KVKK; your personal data can be processed by Işık Perde Rayları San. Tic. A.Ş. , within the scope of our business relations that we have established with our partners and are still continuing (it is possible that any person can be under several category), in accordance with the purposes stated below.


    1. Our Visitors

      Credentials (e.g. name, surname), physical place security information (e.g. camera records) of our Visitors will be processed for the purposes of:


      1. recording visitors and follow-up,
      2. ensuring security of physical place.

    2. Our Online Visitors

      Process security data (e.g. IP address) and (if you notify them to us*) credentials, contact details (e.g. e-mail address) of our online visitors who use our website will be processed for the purposes of;


      1. executing the activities in accordance with the legislation,
      2. executing processes of information security,
      3. follow-up of requests/complaints,
      4. executing communication activities,
      5. notifying authorized persons, institutions and organizations,
      6. helping you to access our website through internet.

    3. Our Customers

      Credentials, contact details, customer transaction data(e.g. order information), physical place security information, finance information (e.g. balance information), legal transaction information, marketing information (e.g. shopping history) of authorized officers and/or employees of our natural or legal person customers will be processed for the purposes of:


      1. executing the activities in accordance with the legislation,
      2. executing financing and accountancy operations,
      3. executing/auditing business activities,
      4. executing logistics operations,
      5. executing goods/service after-sale support services,
      6. executing goods/service sales processes,
      7. executing marketing analysis operation,
      8. executing contract processes,
      9. notifying authorized persons, institutions and organizations,
      10. ensuring physical place security,
      11. resolving legal disputes,
      12. executing keeping and archive operations,
      13. executing risk management processes,
      14. executing processes of adherence to firm/products/services,
      15. executing communication operations.

    4. Our Potential Customers

      Credentials, contact details, customer transaction data, physical place security information, marketing information of authorized officers and/or employees of our natural or legal person customers will be processed for the purposes of:


      1. executing goods/service sales processes,
      2. executing contract processes,
      3. ensuring physical place security,
      4. executing marketing analysis operation

    5. Our Supplier Employees

      Credentials, contact details, physical place security information of our supplier employees will be processed for the purposes of:


      1. executing communication activities,
      2. executing/auditing business activities,
      3. ensuring physical place security,
      4. executing supply chain management processes,
      5. executing logistics operations,
      6. executing the activities in accordance with the legislation,
      7. executing occupational health/safety operations.

    6. Our Supplier Authorities

      Credentials, contact details, physical place security information, customer transaction data, financing information, marketing information and legal transaction information of our natural person suppliers or legal person supplier authorities will be processed for the purposes of;


      1. executing/auditing business activities,
      2. executing goods/service purchase processes,
      3. executing financing and accountancy operations,
      4. executing contract processes,
      5. executing investment processes,
      6. ensuring physical place security,
      7. following and executing legal acts.

  2. What Are the Methods of Collecting Your Personal Data?

    Your personal data stated under categories above is collected automatically or non-automatically through physical methods such as order forms, contracts, visitor forms or by means of information systems and electronic devices (e.g. telecommunication substructure, computers and telephones), third parties (e.g. KKB and Findeks), our website and other documents declared by the relevant person.


  3. What is the Legal Reason for Collecting Your Personal Data?

    Your personal data is processed by Işık Perde Rayları San. Tic. A. Ş. , in order to realize the purposes explained above, based on the following legal reasons stated in article 5 of KVKK:

    1. It is expressly anticipated in the laws,
    2. Provided that it is directly connected with execution or performance of a contract, it is required to process personal data of the parties to the contract,
    3. It is an obligation for the data controller to fulfil its legal liability,
    4. Data processing is an obligation for establishment, exercising or protection of a right,
    5. Provided that the fundamental rights and freedoms of the relevant person are not prejudiced, data processing is an obligation for legitimate interests of the data controller.

  4. Do We Transfer Your Personal Data To A Third Person?

    1. Personal data of our customers can be shared with law enforcement officers and judicial authorities to resolve legal disputes and upon request by the applicable legislation.

    2. Personal data of our online visitors can be shared with judicial authorities and authorized state institutions and organizations to resolve legal disputes and upon request by the applicable legislation.

    3. Personal data of our customers, within the scope anticipated by legal arrangements, can be transferred to authorized state institutions and organizations in order to execute the operations in accordance with the legislation, follow and execute legal transactions and give information to authorized persons, institutions and organizations; and to our group companies, information company, suppliers, courier companies, insurance companies, banks and our financial advisor for the purposes of execution/audit of business operations, execution of risk management processes, proper execution of our services to the extent that it is necessary. Furthermore, the said personal data can be transferred to the law office we get service from and judicial authorities in order to use it as an evidence in legal disputes.

    4. Personal data of our potential customers can be transferred to the law office we get service from and judicial authorities in order to use it as an evidence in possible legal disputes

    5. Personal data of our supplier employees, within the scope anticipated by legal arrangements, can be transferred to authorized state institutions and organizations in order to execute the operations in accordance with the legislation, follow and execute legal transactions, give information to authorized persons, institutions and organizations and execute/audit business operations; and to our group companies, information company, suppliers, courier companies, banks and our financial advisor for proper execution of our services to the extent that it is necessary. Furthermore, the said personal data can be transferred to the law office we get service from and judicial authorities in order to use it as an evidence in legal disputes.

    6. Personal data of our supplier authorities, within the scope anticipated by legal arrangements, can be transferred to authorized state institutions and organizations in order to execute the operations in accordance with the legislation, follow and execute legal transactions, give information to authorized persons, institutions and organizations and execute/audit business operations; and to our group companies, information company, suppliers, courier companies, banks and our financial advisor for proper execution of our services to the extent that it is necessary. Furthermore, the said personal data can be transferred to the law office we get service from and judicial authorities in order to use it as an evidence in legal disputes.

  5. Do We Transfer Your Personal Data Abroad?

    As Işık Perde Rayları San. Tic. A. Ş. , we do not transfer your personal data abroad.


  6. How Can You Exercise Your Rights Related to Your Personal Data?

    You can send your requests within the scope of article 11 of KVKK arranging the rights of relevant persons to us using the “Form of Application to Data Controller” prepared to provide you convenience in accordance with the “Declaration About Principles and Procedures of Application to Data Controller” in the address of “http://www.isikgroup.com/” of Işık Perde Rayları San. Tic. A. Ş.


    Data Controller: Işık Perde Rayları San. Tic. A. Ş. Işık Perde Rayları San. Tic. A. Ş.
    Address: Gebze Plastikçiler Osb Atatürk Bulv. 11.Cd. No:9 Gebze/Kocaeli Gebze Plastikçiler Osb Atatürk Bulv. 11.Cd. No:9 Gebze/Kocaeli
    E-mail: kvkk@isikgroup.com kvkk@isikgroup.com