Confidentiality Agreement
TALE OF MAGIC TEXTILE A.S. PRIVACY POLICY
PREFACE
Within the scope of the Law on the Protection of Personal Data, as TALE OF MAGIC TEKSTIL A.Ş., we attach importance to the protection of your personal data and/or sensitive personal data. We are sensitive about the storage of all personal data and/or special categories of personal data belonging to you that are transmitted to our company in various ways. In this context, we have taken the necessary technical and administrative measures as TALE OF MAGIC TEKSTIL A.Ş. in order to comply with the provisions of the Turkish Constitution and other legislation, especially the Law No. 6698 on the Protection of Personal Data. We would also like to emphasize that we will protect your rights guaranteed by the laws. In this context, you can safely share your personal data with TALE OF MAGIC TEXTILE INC. and you can send us your suggestions, complaints and hesitations.
We share with you our Privacy Policy, which has been put into effect within TALE OF MAGIC TEKSTIL A.Ş., which is particularly important for the protection of your personal data.
TALE OF MAGIC TEKSTİL A.Ş.
1.DEFINITIONS
Data Controller: TALE OF MAGIC TEKSTİL A.Ş., which determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Data Subject-Related Person: Refers to the real person whose personal data is processed.
Company: TALE OF MAGIC TEKSTİL A.Ş. as per this policy.
Law: “Law No. 6698 on the Protection of Personal Data”.
Personal Data: Any information relating to a natural person whose identity is specific or identifiable.
Sensitive Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, and biometric and genetic data refer to sensitive personal data.
Board: The Personal Data Protection Board.
Policy: This “Privacy Policy” refers to.
Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.
Explicit Consent: Consent on a specific issue, based on information and expressed with free will. Destruction It refers to making personal data inaccessible, irretrievable and non-reusable by anyone in any way.
Deletion: It refers to making personal data inaccessible and non-reusable in any way for the relevant users. Anonymization refers to making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even if it is matched with other data.
Destruction: It refers to the deletion, destruction or anonymization of personal data.
Data: Personal data and sensitive personal data are referred to together.
2. PURPOSE OF THE PRIVACY POLICY
Protection of personal data and compliance with the law is our basic principle. As TALE OF MAGIC TEKSTIL A.Ş. (hereinafter referred to as “TALE OF MAGIC” or “Company”), the personal data and / or sensitive personal data we have received from you in all our works have been kept confidential and not shared with third parties. In this context, our company has always shown the necessary sensitivity regarding the protection of personal data and / or sensitive personal data. Again, in accordance with the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as “Law” or “KVKK”), our internal regulations have been reorganized and technical and administrative measures have been taken. In the ongoing process, as TALE OF MAGIC, we accept, declare and undertake to comply with all obligations imposed by the law.
3.SCOPE OF PRIVACY POLICY This Privacy Policy has been prepared in accordance with the Personal Data Protection Law No. 6698. Your personal data and/or sensitive personal data are processed with your consent or in compliance with the law. Your data in question;
– Ensuring company security,
– Providing you with a complete service,
– Conducting our commercial activities,
– Quick resolution of your problems,
– It is used to improve our quality.
Some personal data and/or special categories of personal data received from you are depersonalized and anonymized in accordance with the procedures stipulated by the Law. Data used for statistical purposes is not currently regulated by the Law and is not covered by our policy. As TALE OF MAGIC, we have the right to change this policy in order to protect personal data within the scope of compliance with the Law.
The privacy policy aims to protect the data obtained in any way from real and legal persons, customers, employees and all other persons with whom TALE OF MAGIC is a solution partner. In this context, it contains various regulations in order to realize the intended objective.
4. BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA
Our basic principles regarding the processing of personal data and/or sensitive personal data are as follows. In this context, these principles shall apply to the data processed by TALE OF MAGIC based on explicit consent or within the scope of compliance with the Law.
– Compliance with the Law: TALE OF MAGIC questions the source and lawfulness of personal data and/or sensitive personal data received from real and legal persons and collected by various means. In this context, it is important for TALE OF MAGIC to obtain data in accordance with the law.
– Compliance with the Rules of Honesty: TALE OF MAGIC inquires the source of personal data and/or sensitive personal data received from real and legal persons and collected by various means. In this context, it is important for TALE OF MAGIC to obtain data within the framework of honesty rules.
– Being Limited, Measured and Connected to the Purpose of Processing: TALE OF MAGIC uses personal data and/or sensitive personal data obtained through various means in accordance with the purpose for which they are processed, limited to the purpose of processing, measured and to the extent required by the performance of the service.
– Accuracy of Personal Data and/or Sensitive Personal Data: TALE OF MAGIC attaches importance to the fact that the personal data and/or sensitive personal data received from real and legal persons and collected by various means do not contain false information and are accurate. However, TALE OF MAGIC is not obliged to investigate the accuracy of the personal data and/or sensitive personal data declared by its customers or real and legal persons with whom it is in contact. This is not possible legally and in line with our working principles.
– Being Up-to-Date When Necessary: If there has been a change in the personal data and/or special categories of personal data that TALE OF MAGIC obtains in various ways, it attaches importance to communicating such change to the company and updating the data if communicated.
– Processing for Specific and Legitimate Purposes: TALE OF MAGIC processes personal data and/or sensitive personal data without the explicit consent of the data owner or without obtaining explicit consent within the framework of the exceptions stipulated by law. The purpose of processing each data is specific and personal data processing activities are not carried out for any illegitimate purpose.
– Storage for the Period Stipulated in the Law and / or Required for the Purpose for which they are Processed: TALE OF MAGIC retains the personal data and/or sensitive personal data it obtains for the periods stipulated in the relevant laws and/or for the purposes for which they are processed. Anonymize, destroy or delete the data when these purposes are no longer relevant.
5. DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA
Your personal data and/or sensitive personal data shall be deleted, destroyed or anonymized upon the expiration of the statute of limitations and retention periods stipulated in the Law, completion of judicial processes or other requirements appropriate for the purpose. Deletion, destruction and anonymization operations are carried out upon the request of the relevant data owner or ex officio (automatically) by TALE OF MAGİC.
6. THE PRINCIPLE OF PARSIMONY
The principle of austerity is also known as the principle of maximum austerity. Personal data and/or special categories of personal data received through various means are transferred to our company’s system. Pursuant to this principle, data is processed in the system to the extent necessary. The data to be collected by TALE OF MAGIC is determined and varies according to the purpose. In this context, data are collected in accordance with the purpose and data that are not in line with the purpose are not collected. Any redundant data that is not for its intended purpose shall not be recorded in the company system and shall be deleted, destroyed or anonymized. However, these data can be used for statistical purposes.
7. CONFIDENTIALITY AND SECURITY OF DATA
As TALE OF MAGIC, we attach importance to the confidentiality of your personal data and/or sensitive personal data. In this context, your personal data and/or sensitive personal data that reaches our Company in any way are confidential. TALE OF MAGIC respects the confidentiality of such data at every stage of its commercial activity. In this context, full compliance with this company privacy policy is ensured.
Necessary technical and administrative measures are taken to prevent unauthorized access to personal data and/or sensitive personal data collected through various means, to prevent damage to the rights of the data owner and to protect the data. In addition, data protection is requested from third parties with whom we share personal data and/or sensitive personal data in accordance with the law, where necessary. Again, our software programs are being updated and renewed continuously. Technological requirements are fulfilled and standards are complied with to ensure a high level of protection.
8. TIMELINESS OF DATA
TALE OF MAGIC is based on the principle of timeliness. Because personal data and/or sensitive personal data obtained in various ways can be updated when necessary or upon request. Necessary measures regarding the update are also taken by TALE OF MAGIC.
9. ACCURACY OF DATA
The principle of accuracy of the declared personal data and/or sensitive personal data has been adopted by TALE OF MAGIC. TALE OF MAGIC is not obliged to investigate the accuracy of personal data and/or sensitive personal data declared by its customers or real and legal persons with whom it is in contact. This is not possible legally and in line with our working principles. In this context, transactions are carried out on the grounds that the declared data is correct.
10. PURPOSES OF PROCESSING PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA
The processing of personal data and/or sensitive personal data is carried out in parallel with the purposes in the Clarification Texts of TALE OF MAGIC. Such Clarification Texts may vary according to the personal data and/or special categories of personal data processed. In parallel with the differences in the Clarification Texts, the purposes of processing personal data and/or sensitive personal data may also vary.
11. PROCESSING OF PERSONAL DATA AND/OR PERSONAL DATA OF SPECIAL NATURE FOR ADVERTISING PURPOSES
Consent from the recipient is required for electronic messages sent for advertising purposes. In this context, electronic messages for advertising purposes may only be sent to persons for whom prior approval has been obtained. This issue is clearly regulated in the “Law on the Regulation of Electronic Commerce” and the “Regulation on Commercial Communication and Commercial Electronic Messages”. TALE OF MAGIC acts in accordance with the aforementioned legislation regulations when sending electronic commercial messages for advertising purposes. Again, approval is obtained in accordance with the legislation and the details of the approval are respected. Such consent may be obtained through any electronic communication tool or in writing in physical environment. What is essential in the consent is the existence of a positive declaration of will by the recipient of the commercial electronic message that he/she accepts the sending of commercial electronic messages, his/her electronic communication address and his/her name and surname. The consent received from the recipient is used to market and promote the company’s goods and services, to promote its business, to ensure its recognition, to congratulate, wish and congratulate, etc. It covers all commercial electronic messages sent to electronic communication addresses in order to increase its recognition with content. Apart from all these, before sending electronic commercial messages, individuals are informed that their data may be processed and their explicit consent is obtained when necessary. While sending this commercial message, the provisions of the Law No. 6698 on the Protection of Personal Data are complied with.
12. COLLECTION AND PROCESSING OF PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA WITHIN THE CONTRACTUAL RELATIONSHIP
If a contractual relationship has been established with customers or prospective customers, personal data collected pursuant to the contract may be processed by TALE OF MAGIC without explicit consent. In case of processing of special categories of personal data, explicit consent or explicit consent in accordance with Article 6 of the Law is required. Data may be processed based on legal grounds within the scope of Art. The data in question are used within the framework of the performance of goods and/or services, execution of the contract, execution of the commercial activity. This data can be updated at any time by contacting customers.
13.PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA PROCESSED THROUGH AUTOMATED SYSTEMS
Data obtained from information obtained through automated systems without the explicit consent of individuals cannot be used against individuals. TALE OF MAGIC acts in accordance with the provisions of the relevant legislation in personal data and/or sensitive personal data processed through automated systems.
14. PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA BELONGING TO EMPLOYEES OF TALE OF MAGIC
PROCESSING CARRIED OUT WITHIN THE FRAMEWORK OF LEGAL OBLIGATIONS:
Personal Data of employees may be processed by TALE OF MAGİC without obtaining their explicit consent in order to fulfill the legal obligation of the data controller or if there is an explicit provision in the relevant Law regarding the processing of the data.
PROCESSING OF PERSONAL DATA PURSUANT TO EMPLOYMENT CONTRACT AND BUSINESS RELATIONSHIP:
Personal data of employees may be processed without the explicit consent of the employees within the framework of proportionality to the extent necessary to ensure the business relationship between the company and the employees. TALE OF MAGIC undertakes to protect and confidentialize the data of employees under all circumstances and to take the necessary measures in this regard.
PROCESSING OF PERSONAL DATA OF SPECIAL NATURE BELONGING TO EMPLOYEES:
Pursuant to Law No. 6698 on the Protection of Personal Data, the processing of special categories of personal data requires the explicit consent of the person whose data will be processed and, in addition, the necessary measures stipulated by the Board. Within the framework of compliance with Law No. 6698 and the principles of the Board, TALE OF MAGIC takes both the explicit consent of the data subject and the necessary measures determined by the Board when necessary when processing personal data of special nature. However, sensitive personal data may be processed without the explicit consent of the data subject in exceptional cases stipulated in the Law, provided that it is limited and measured.
PERSONAL DATA PROCESSED THROUGH AUTOMATED SYSTEMS:
Some personal data of employees may be processed in automated systems. This data is used for employee performance evaluation, keeping statistical data, promotions and ratings for the company. Employees have the right to appeal against unfavorable outcomes. The appeal must be carried out in accordance with internal rules and procedure. The objection is subject to internal evaluation.
PROCESSING OF PERSONAL DATA FOR THE BENEFIT OF EMPLOYEES:
Personal data of employees may be processed by TALE OF MAGİC without obtaining explicit consent within the framework of the relationship provided by the employment contract for transactions related to the interests of the employee. Again, in disputes regarding the business relationship with TALE OF MAGİC, the Company may process the personal data of employees.
INTERNAL TELECOMMUNICATIONS, INTERNET AND COMMUNICATIONS:
In order to facilitate the performance of the work, TALE OF MAGIC may allocate computers, phones, cars, applications, software and e-mails to in-house employees. TALE OF MAGIC may control and audit personal data on the tools it allocates. However, at this point, TALE OF MAGIC also fulfills the necessary Disclosure Obligation. The employee may not use the vehicles allocated to him/her for private purposes. It is obligatory to use it only for the purpose of ensuring the performance of the work. Again, the employee accepts, declares and undertakes that he / she will not keep any data and information other than the necessity of the work and work in the vehicles allocated from the moment the working relationship with TALE OF MAGIC starts.
15. TRANSFER OF PERSONAL DATA AND/OR SPECIAL CATEGORIES OF PERSONAL DATA DOMESTICALLY AND ABROAD
TALE OF MAGIC may transfer data domestically and abroad in accordance with the conditions stipulated in the Law on the Protection of Personal Data and within the framework of the principles determined by the Board, within the scope of compliance with the law or with the explicit consent of the person concerned. When transferring personal data and/or sensitive personal data, TALE OF MAGIC shall comply with the provisions of Law No. 6698 8. and Article 9 of the Convention.
16. AUDIT AND TRANSACTION SECURITY
Necessary technical and administrative measures are taken to prevent unauthorized access to personal data and/or sensitive personal data collected through various means, to prevent damage to the rights of the data owner and to protect the data. In addition, data protection is also requested from the companies with which we share personal data and/or sensitive personal data in accordance with the law. Again, our software programs are updated, continuously renewed and developed. All technological requirements are met to ensure a high level of protection and compliance with standards. In parallel with all these, TALE OF MAGIC conducts all internal and external audits required for the protection of personal data and/or sensitive personal data.
17. NOTIFICATION OF DATA BREACHES
In the event of any breach of data, TALE OF MAGIC shall take immediate action to remedy any breach notified to it. It takes the necessary measures to minimize the damage to the person concerned. You can apply for notification of violations according to the procedures specified on our company’s website. In addition, in the event that personal data and/or sensitive personal data fall into the hands of unauthorized third parties from outside, the company notifies the Personal Data Protection Board directly.
18. RIGHTS OF THE DATA SUBJECT REQUESTING INFORMATION
11 of the Law No. 6698 on the Protection of Personal Data article provides for the rights of the data subject. In accordance with the law, TALE OF MAGİC accepts that the data subject must be informed and, if necessary, his/her explicit consent must be obtained before data processing, and that the data subject has the right to request information, update, delete, destroy and anonymize his/her data after data processing. Relevant persons may request information about their data through the “Information Request Form in accordance with the Law No. 6698 on the Protection of Personal Data”;
a) Learn whether personal data is being processed,
b) Request information if personal data has been processed,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom personal data are transferred domestically or abroad,
d) To request correction of personal data in case of incomplete or incorrect processing,
e) Article 7 of the Law on “Deletion, destruction or anonymization of personal data” To request the deletion or destruction of personal data within the framework of the conditions stipulated in Art,
f) To request notification to third parties to whom personal data is transferred that incomplete or incorrectly processed data has been corrected or that the data has been deleted or destroyed upon the request of the data subject,
g) To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
h) In case of damage due to unlawful processing of personal data, to demand compensation for the damage
It has rights.
Information requests made on behalf of someone else will also not be answered by the company. If it is determined by TALE OF MAGIC that the application made on behalf of someone else in the information request; TALE OF MAGIC reserves all rights of action and claim. The requests of the person concerned will be answered as soon as possible and within thirty days from the date of receipt by TALE OF MAGIC. TALE OF MAGIC may request other information and documents from the applicant if deemed necessary.
19. UPDATE Changes to this Privacy Policy are listed and shown in the table below.
Policy Update Date: 15.02.2023
TALE OF MAGIC TEXTILE CO.