Within the scope of our legal relationship, your personal data you provide to us in the following ways;

• Within the framework of the purpose requiring their processing and in connection with this purpose, in a limited and measured manner, in accordance with the law and the rule of good faith,
• Maintaining the accuracy and most up-to-date version of personal data as reported to us,
• We hereby declare that it will be recorded, stored, preserved, reorganized, shared with the institutions authorized by law to request such personal data and transferred, transferred, classified and processed in other ways listed in the KVKK under the conditions stipulated by the Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK” or “Law”).
• Your personal data is not transferred abroad.

WHAT PERSONAL DATA DO WE PROCESS?

HOW (METHOD) AND FOR WHAT REASONS DO WE COLLECT YOUR PERSONAL DATA?

Your Personal Data is processed based on the personal data processing conditions specified below and written in paragraph 5/2 of KVKK:

1. a) It is explicitly stipulated in the laws.

   b) It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.

   c) It is necessary to process personal data belonging to the parties to a contract, provided that it is directly related to the establishment or performance of a contract.

ç) It is mandatory for the data controller to fulfill its legal obligation.

1. d) It has been made public by the data subject himself/herself.

   e) Data processing is mandatory for the establishment, exercise or protection of a right.

   f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Our methods of collecting personal data are as follows:

• We collect the personal data of our employees by electronic methods in digital environments and on paper in physical environments.

  We collect the personal data of our website visitors only by electronic methods in digital environments.

  We collect the personal data of our company visitors by taking images with the closed circuit camera system (CCTV) in our Company’s offices.

  Personal data of our customers are collected by electronic methods in digital environments and on paper in physical environments.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

Your personal data collected, according to your request subject to your disclosure of your personal data to us; Evaluation of your messages, meeting your information requests, processing and finalizing the creation of your complaint, providing after-sales services, meeting your information requests regarding our products and services, notifications and updates regarding our products and services you are interested in, ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company in order to benefit you from the services offered by our Company, conducting satisfaction evaluation activities for our existing customers, tracking requests and complaints, conducting company, product and service loyalty processes, follow-up and execution of legal affairs, execution of training activities, execution of sales, marketing, purchasing and after-sales support processes, execution of finance and accounting transactions, execution of marketing analysis studies, execution of business activities, execution of internal audit processes, execution of occupational health and safety activities, fulfillment of the obligation to notify relevant/authorized public institutions, ensuring the execution of our Company’s human resources policies, execution of information and physical security processes, execution of storage and archive activities, execution of activities in accordance with the legislation. In order to fulfill the obligations imposed on us by tax legislation, legislation for the protection of consumers, the Code of Obligations, the Commercial Code and other legislation: your data is processed for the purposes of processing your data when required by the legislation.

THE PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATA AND THE PURPOSES OF SHARING

It may be shared with the Company’s business partners, the Company’s suppliers, group companies, legally authorized institutions and organizations, legally authorized private law legal entities for the purposes of carrying out the necessary work by the business units to ensure that the relevant persons benefit from the services offered by the Company, carrying out the necessary work by the relevant business units to carry out the commercial activities carried out by the Company, planning and execution of the Company’s commercial and / or business strategies, ensuring the legal, technical and commercial-business security of the relevant persons who have a business relationship with the Company.

It may be transferred to real or legal persons from whom our Company receives service/support/consultancy or cooperates or is a project/program/financing partner. Your personal data will not be transferred abroad.

Your personal data is shared with persons expressly authorized by the legislation. In addition, your personal data is shared with authorized persons or institutions upon a court decision or a request from authorized administrative authorities within the scope stipulated by the legal regulation.

Your personal data may be shared with our suppliers for the purpose of execution of supply chain management processes and performance of the contract in relation to the products or services to be provided from suppliers within the scope of the service contract between us.

Your personal data may be shared with our business partners and group companies with whom we cooperate within the scope of the service contract between us for the purpose of conducting business activities and performance of the contract.

Your personal data will never be shared with third parties except for legal legislation and your explicit consent.

RIGHTS OF DATA SUBJECTS AND EXERCISE OF THESE RIGHTS

As a Data Controller, if you submit your requests regarding your rights specified below to the Company by the methods specified below, your requests will be evaluated and finalized by our Company as soon as possible and in any case within 30 (thirty) days.

Pursuant to Article 11 of the Law, you have the following rights as a personal data owner:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing your processed data exclusively through automated systems,
• In case of damage due to unlawful processing of your personal data, to demand the compensation of the damage.

Paragraph 2 of Article 28 of the Law lists the cases where data subjects do not have the right to request and within this scope;

• Processing of personal data is necessary for the prevention of crime or criminal investigation,
• Processing of personal data made public by the data subject himself/herself,
• Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,
• Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budgetary, tax and fiscal matters,

In such cases, the rights specified above cannot be exercised with respect to the data.

According to paragraph 1 of Article 28 of the Law, in the following cases, since the data will be outside the scope of the Law, the requests of the data subjects will not be processed in terms of these data:

• Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that personal data are not disclosed to third parties and the obligations regarding data security are complied with.
• Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
• Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that such processing does not violate national defense, national security, public security, public order, economic security, privacy or personal rights or constitute a crime.
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security.

• Processing of personal data by judicial or enforcement authorities in relation to investigations, prosecutions, trials or executions.

RELATED PERSON INFORMATION REQUEST METHODS

In accordance with the provisions of the KVK Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10.03.2018 and the relevant current legislation;

• Şehremini, Koyuncu Sk. 20/a, 34104 Fatih/Istanbul in person/by hand,
• Şehremini, Koyuncu Sk. 20/a, 34104 Fatih/Istanbul via notary public,
• Şehremini, Koyuncu Sk. 20/a, 34104 Fatih/Istanbul by registered mail with return receipt requested,
• Registered Electronic Mail (KEP) system registered to our address ……………………………………… can apply through the KEP system,
• You can send it to our e-mail address info@elizdis.com.tr via your e-mail address registered in our system.

In order for a person other than the person concerned to make a request, there must be a notarized special power of attorney issued by the person concerned on behalf of the person who will make the application.

Our Company may request information from the relevant person in order to determine whether the applicant is the owner of personal data or not, and may ask questions to the relevant person about the application in order to clarify the issues specified in the application.

Pursuant to Article 14 of the KVK Law, the personal data owner may file a complaint to the Board within thirty days from the date of learning the answer of our Company and within sixty days (60 days) from the date of application in case the application is rejected, the answer given is insufficient or the application is not responded within the time limit.