EXCEL COMMUNICATION TRADE INC. PERSONAL DATA PROTECTION AND PROCESSING INFORMATION AND CLARIFICATION TEXT
In Article 20 of the Constitution; "Everyone has the right to demand the protection of their personal data. This right includes being informed about personal data about oneself, accessing these data, requesting their correction or deletion, and learning whether they are used for their purposes. Personal data can only be processed in cases stipulated by law or with the explicit consent of the person. The principles and procedures regarding the protection of personal data are regulated by law." With this regulation, personal data is secured. As a matter of fact, with the Personal Data Protection Law (KVKK) No. 6698, the procedures and principles regarding the protection of personal data are comprehensively regulated.
As Excel Communication Trade Inc., the protection of personal data we process in accordance with the law is among our top priorities. In this sense, necessary technical and administrative measures are taken and implemented by us, and necessary audits are carried out. We would like to inform you in accordance with the legislation in force regarding the methods of obtaining personal data, processing purposes, legal reasons, protection, storage, transfer, deletion, destruction or anonymization of data, and the rights of the relevant persons whose personal data are processed.
Definitions
- Law: Personal Data Protection Law
- Board: Personal Data Protection Board
- Authority: Personal Data Protection Authority
- Personal Data: Any information relating to an identified or identifiable natural person
- Special Categories of Personal Data: Data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dressing, membership of associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, and biometrics and genetics
- Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system
- Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller
- Explicit Consent: Consent regarding a specific subject, based on information and expressed with free will
* Excel acts as a "data controller" under KVKK Law No. 6698.
Basic Principles
The following principles are essential in the processing of personal data:
- Compliance with the law and honesty rules.
- Being accurate and, where necessary, up to date.
- Being processed for specific, explicit, and legitimate purposes.
- Being relevant, limited, and proportionate to the purposes for which they are processed.
- Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
Processing of Personal Data
Personal data cannot be processed without the explicit consent of the data subject. Personal data may be processed without explicit consent if one of the following conditions exists:
- It is explicitly provided for by the laws.
- It is mandatory for the protection of life or physical integrity of the person or of any other person who is bodily incapable of giving his consent or whose consent is not deemed legally valid.
- Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the establishment or performance of the contract.
- It is mandatory for the data controller to perform his legal obligation.
- The data concerned is made available to the public by the data subject himself.
- Data processing is mandatory for the establishment, exercise or protection of any right.
- It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
Transfer of Personal Data & Cross-Border Transfer
Personal data cannot be transferred without explicit consent. However, it may be transferred without explicit consent under the conditions specified in Article 8 and Article 9 of the Law, provided that adequate measures are taken or adequate protection exists in the target country.
Rights of the Data Subject
Everyone, by applying to the data controller, has the right to:
- Learn whether their personal data are processed or not,
- Demand information if their personal data have been processed,
- Learn the purpose of the processing of their personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom their personal data is transferred domestically or abroad,
- Request the rectification of the incomplete or inaccurate data, if any,
- Request the deletion or destruction of their personal data under the conditions laid down in Article 7,
- Request notification of the operations made pursuant to sub-paragraphs (d) and (e) to third parties to whom their personal data has been transferred,
- Object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems,
- Claim compensation for the damage arising from the unlawful processing of their personal data.
Application to the Data Controller
* You can direct your information and application requests by contacting us through our contact page.
