PERSONAL DATA PROCESSING DISCLOSURE NOTICE

This disclosure and consent notice has been prepared by Siltaş Yapı İnşaat Sanayi ve Ticaret Anonim Şirketi (the “Company”) as the data controller, in order to obtain the explicit consent of data subjects regarding the processing of personal data of the Company’s customers within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”), and to inform data subjects regarding the matters specified in Article 10 of the Law and the rights specified in Article 11 during the acquisition of personal data.

1. DEFINITIONS

In this disclosure notice:
Personal Data: Any information relating to an identified or identifiable natural person.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller.
KVKK: Refers to the Law No. 6698 on the Protection of Personal Data.

2. METHODS AND LEGAL GROUNDS FOR OBTAINING PERSONAL DATA

Within the scope of the Law No. 6698, your personal data are processed by Siltaş Yapı İnşaat Sanayi ve Ticaret A.Ş. as the data controller. Your personal data may be collected verbally, in writing, or electronically in order to provide the Company’s products and services within the legal framework and to fulfill contractual and legal obligations accurately and fully. Your personal data may be collected via physical documents (forms), the Company’s website and contact forms, social media messages, digital application channels, email correspondence, agreements and proposals, by automated or non-automated methods. Your personal data collected for the legal reasons stated in this Disclosure Notice may be processed and shared within the scope of the personal data processing conditions stated in Articles 5 and 6 of the Law.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed for the purposes of customizing Company products and services in line with your preferences and needs, planning and execution of promotional activities, ensuring that relevant business units perform necessary activities to provide products and services, execution of commercial activities and related business processes, planning and implementation of commercial and business strategies, and ensuring legal, technical, and commercial security of the Company and individuals in business relations with the Company. Additionally, your personal data may be processed when you contact our call centers, visit our website, or participate in Company events, seminars, or organizations.

4. PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be shared within the framework of the conditions and purposes of personal data transfer specified in Articles 8 and 9 of the Law, with business partners, suppliers, legally authorized institutions and organizations, and legally authorized private legal entities, for the purposes stated in Section 3 above.

5. RIGHTS OF THE DATA SUBJECT

Data subjects may apply to the Company and request:
– Information as to whether personal data is processed,
– Information and documentation if personal data has been processed,
– Examination of whether personal data has been processed lawfully,
– Information on third parties to whom personal data has been transferred,
– Correction of incomplete or inaccurate personal data,
– Deletion of personal data under the conditions specified in Article 7 of the Law,
– Notification to third parties of correction or deletion requests,
– Objection to adverse results arising from analysis of personal data exclusively through automated systems,
– Compensation for damages in case of unlawful processing.

6. EXERCISING RIGHTS BY DATA SUBJECTS

In accordance with Article 13 of the Law, you may submit your requests regarding your rights listed above to the Company in writing. Since no other application method has yet been determined by the Personal Data Protection Board, you must submit your application in writing. You can submit your request:

• By applying in person with identity verification to the address: Yenişehir Mah. Millet Cad. No:26 Pendik / ISTANBUL
• Or by sending it to: info@siltasyapi.com along with identity verification, or via other methods defined in the Law and related regulations.

The Company will respond to data subject requests within a maximum of thirty (30) days as stipulated in the Law. If the request is rejected, the reasons for rejection will be provided in writing or electronically.