- Data Controller
Pursuant to the Personal Data Protection Law No. 6698 (the “Law”), your personal data is processed by Tool Quaz (“Tool Quaz” or the “Company”), as the data controller, residing at Taşdelen Mah. Atabey Cad. No:9-1 Çekmeköy-İstanbul, with the registered electronic mail (KEP) address yilmazmakine@hs02.kep.tr, registered with the Anadolu Corporate Tax Office under number 9660294072, within the scope explained below.
- Methods and Legal Grounds for Collecting Personal Data
Our Company obtains personal data directly from dealership processes, business partnership activities, goods or services supply processes, and data acquired verbally, electronically, or in writing through the internet, applications, physical forms, e-mail, mail, fax, and other communication channels, in accordance with the personal data processing conditions set out in the Law, and processes such data in line with the purposes specified below, primarily including the planning of supplier/business partnership processes, the execution and management of communication processes, and the planning, auditing, and execution of goods and services supply processes.
Your personal data is processed on the legal grounds of the establishment or performance of a contract (dealership, supply, business partnership agreement, goods or services supply processes, various service provision processes, and their audit), fulfillment of a legal obligation (monitoring of compliance with occupational health/safety rules within the field of activity), the legitimate interest of the data controller, and, where necessary, your explicit consent obtained from you.
- Purposes of Processing Personal Data
Your personal data specified above may be processed for the purposes of carrying out contract processes, carrying out supply chain management processes, carrying out service loyalty processes, carrying out emergency management processes, carrying out audit and ethics activities, carrying out activities in compliance with legislation, carrying out communication activities, carrying out/auditing business activities, carrying out logistics activities, carrying out goods/services purchasing processes, carrying out goods/services sales processes, carrying out customer relationship management processes, carrying out after-sales support service activities, organization and event management, carrying out marketing, advertising, campaign, and promotion processes, and carrying out storage and archive processes.
- Transfer of Personal Data
Our Company takes care to process your personal data in accordance with the principles of “need to know” and “need to use,” ensuring the necessary data minimization and taking the necessary technical and administrative security measures. Because the nature of business partnership/supply processes, the requirements of goods and services procurement processes, and the execution or audit of processes such as the management of supply chain management processes, as well as the operation of digital infrastructures, necessitate a continuous flow of data with various stakeholders, we are required to transfer the personal data we process to third parties resident domestically and abroad for certain purposes.
Your personal data may be transferred, in line with and limited to the fulfillment of the purposes stated above, domestically or abroad, to: our shareholders, our business partners, our affiliates and subsidiaries, group companies; companies and shareholders with which we have a special business partnership for the purposes of carrying out and auditing business activities, ensuring business continuity, and carrying out information security processes; our solution partners in the field of communication and electronic communication, the relevant service providers and business partners for the purpose of being contacted, our business partners and service providers offering services in this field for the purposes of profiling, segmentation, analysis, usage preferences, customization of the services offered, marketing and advertising; the Ministry of Trade and the company authorized by it within the scope of registration with the Message Management System (İYS) for the management of messages, and the authorized commercial message infrastructure provider for message transmission; our business partners and service providers that provide, operate, or supply services for our information technology infrastructure, our business partners and service providers offering services in the field of quality control, complaint management, and risk analysis of the services; legally authorized public institutions and private persons or organizations and third parties; third parties to be specifically determined where required by the legitimate interest of the data controller; relevant lawyers, auditors, and experts within the scope of fulfilling legal obligations; and regulatory and supervisory authorities and authorized bodies such as courts and enforcement offices, limited to the purposes specified in this disclosure text.
In addition, your personal data may be transferred to service providers resident abroad. During such transfer, the methods determined by the Personal Data Protection Board (“Board”) are used, and processes such as standard contractual clauses, binding corporate rules, or Board-approved data transfer protocols are carried out.
- Data Processing and Retention Period
Your personal data will be retained, in accordance with the principle of being limited and proportionate to the purpose for which it is processed, limited to the purposes specified in this disclosure text and within the periods specified in the current legislation to which we are subject. After the expiry of this period, your personal data will be deleted, destroyed, or anonymized. In the event of any changes to the legislation regarding the data processing and retention period, your personal data will be processed and retained in accordance with such changes.
- Rights of the Data Subject
As the data subject whose personal data is processed, in order to exercise your rights under Article 11 of the Law, which regulates the rights of the data subject (to learn whether personal data is being processed, to request information about the processing, to learn the purpose of processing and whether the data is used in accordance with that purpose, to know the third parties to whom the data is transferred, to request the correction of incomplete or inaccurate processing, to request deletion or destruction, to request that these operations be notified to third parties to whom the data has been transferred, to object to any outcome resulting from analysis conducted exclusively through automated systems, and to request compensation for damages), in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your application by filling out the Application Form Regarding the Protection of Personal Data available on the website www.yilmazmachine.com.tr, in accordance with the procedures and principles set out therein, by sending it to the KEP address yilmazmakine@hs02.kep.tr, to the e-mail address verisorumlusu@yilmazmachine.com.tr, via a message sent with a mobile signature or e-signature, or through a wet-ink signed written application submitted in person or via a notary public to Taşdelen Mah. Atabey Cad. No:9-1 Çekmeköy – İstanbul, using the relevant form. If you submit your application to us in this manner, your requests will be evaluated and finalized as soon as possible and within 30 (thirty) days at the latest.
In order for your application requests to be evaluated within the scope of the Communiqué on the Procedures and Principles of Application to the Data Controller, your application must include your name, surname, your Republic of Turkey identification number if you are a citizen of the Republic of Turkey; if you are a foreign national, your nationality together with your passport number or foreign identification number, your place of residence or workplace address for notification purposes, your e-mail address if available, your telephone or fax number, and the subject of your request. Depending on the nature of your request and the application method, we may request additional verification in order to confirm that the application actually belongs to you and to protect your rights.
The Company reserves the right at all times to amend this disclosure text for reasons arising from the Law, secondary legislation, and Board decisions. Any amendments made to the disclosure text and the current text will become effective immediately as of the date of publication.