PERSONAL DATA PROCESSING AND PROTECTION
Illumination of Personal Data
As Popseecul Design and Textile Trade Company (”PSC ”), we attach importance to your security and privacy of your personal data and inform you about the Personal Data Protection Law which protects the fundamental rights and freedoms of individuals, especially the privacy of private life.
According to Personal Data Protection Law no. 6698 the data controller PSC will be responsible for recording, storing, and updating, your personal data as well as explaining, classifying and transferring the data abroad to third parties following the General Data Protection Regulation (GDPR).
The purpose of processing personal data for legal reasons is to; provide a better service to our customers, to inform you about innovations, campaigns and developments such as; marketing and business development which aims to fulfill the requirements of our sales and/or contracts.
The purposes mentioned above, is related to services such as; organizations, persons, domestic and international business partners and other related third parties whom the personal data can be transferred to.
In regards to section 11 in GDPR, by providing us with your personal data you will be obliged to; a) learning whether it has been processed, b) requesting information if it has been processed, c) learning the purpose of processing and whether it has been used in accordance with its purpose, d) knowing the third persons whom it has been transferred in domestic / abroad, e) asking for correction if it has been processed incorrectly, f) requesting the third parties to whom it is transferred to be notified of the transactions carried out in accordance with paragraphs (g) and (h) above, i) objecting to the occurrence of a consequence against you as it is analyzed exclusively by automated systems; , j) you have the right to claim the damages if you have faced due to unlawful processing.
Please have a look at Personal Data Protection and Processing Policy for further details about the protection and processing of your personal data.
Data Owner Application Form for Personal Data
The data owner PSC (Popseecul Design and Textile Trade Limited Company) has rights to keep personal datas as mentioned in article 11 of Personal Data Protection Law no: 6698;
(i) find out whether or not Personal Data has been processed, (ii) request information if Personal Data has been processed, (iii) learn the purpose of processing Personal Data and whether the data is used for its purpose, (iv) learn from third parties to whom the Personal Data has been transferred, (v) Have the right to request modification of Personal Data if it is incomplete or incorrect, and request that it be notified to third parties to whom the Personal Data has been transferred; and (vi) to claim damages due to the processing of Personal Data in violation of the Law; and complaints will be responded and resolved by the PSC as soon as possible.
In this context, Data Holders may submit their requests and complaints electronically to firstname.lastname@example.org or mail to PSC office address with the attached Application Form. Identity check will be performed before approval of the application form.
Taking into account the PSC Personal Data Protection and Processing Policy aapplications shall be replied as soon as possible and without any additional cost to the Data Holder, provided that the request is applied within 30 days.
According to the law, the Data Holder is entitled to apply within thirty days from the date on which the PSC has learned the answer, and in any event within sixty days from the date of the first application.
DATA OWNER APPLICATION FORM
APPLICATION SUBJECT DATA GROUP
DETAILS ABOUT THE APPLICATION
DATE AND SIGNITAURE OF THE APPLICANT
DATA OWNER APPLICATION FORM
The provided information I have given in the form in addition to my name, surname, e-mail, mobile phone, home phone, address, ID number and all other related personal information as supported by the Personal Data Protection Law no 6698, dated in April 07, 2016, Popseecul Design and Textile Trade Company (PSC) has rights to fulfill the requirements of the complaints and requests, analyzes and similar purposes of data processing purposes and to ensure that the PSC is protected in accordance with the principles, operations, processes, objectives and strategies of the PSC and to protect the rights and interests and reputation of the PSC. Third-party business partners, services / supporters, and / or the purpose of archiving, and where the service requires, transferring the principles, operations, processes, objectives and strategies of Popseecul Design and Textile Trade Limited Company and its affiliates. To be shared with private individuals and institutions with whom consultancy is received or cooperated with all public institutions and organizations including Personal Data Protection Institution and Board and other third parties or organizations; (i) learn whether my personal data has been processed, (ii) request information on my personal data if it has been processed, (iii) learn the purpose of processing personal data and whether my data is used for its purpose, (iv) learn from third parties to whom my personal data have been transferred; and (v) if there is missing and incorrect personal data you have my consent to transfer my personal data to third parties and request that they be corrected.(vi) I have rights to request for an atonement in the consequences of falsely published information during the personal data transaction. This will be kept confidential.
In order to ensure the security of PSC and prevent unlawful data sharing in accordance with this Application Form, PSC Personal Data Protection and Processing Policy, PSC employees may request all kinds of data and documents for authentication. PSC will have no responsibility if the information and documents I submit with this form are not correct and up to date.
NAME SURNAME :
PSC Personal Data Protection and Processing Policy
This policy underlines that Popseecul Design and Textile Trade limited Company is capable for the administrative structure,
process and procedures and also the rights of storing data collection appropriately according to law.
Personal Data by Popseecul Design and Textile Trade Company;
a) Must be processed appropriately and in accordance with law
b) Must be processed for specific, clear and legitimate purposes
c) Must be processed through limited, measured and necessary purposes
d) Must be accurate and up to date
e) The data collection must not be kept, stored and archived for longer than the period prescribed in accordance with the relevant legislation or the period required by the purpose of data collection
f) Must be processed in accordance with the rights of the Data Owner
g) Must be Kept safe
h) Must not be shared with people or organizations in countries that do not have adequate protection
According to article 11 in Personal Data Processing and Policy Law, the data owners have rights to request information about their Personal Data. If the Personal Data has been processed, the owner of the personal data may request further information about whether the data has been used in an appropriate manner or not. If the process has been approved, it may be transferred to third parties, and the owner of the Personal Data has rights to query third parties and their use of the information they provided. To claim compensation in case of damages, caused by the processing of Personal Data in violation of the Law; action will be taken and the data owner will be provided with detailed information about the procedure. In these circumstances the data owner has rights to process with the appropriate atonement applications. If this request has been made, PSC will take the fastest action, by providing information about the demands of the procedure of the application process.
Popseecul Design and Textile Trade Limited Company is obliged to take all necessary technical and administrative measures in order to prevent the unlawful processing of Personal Data, to prevent unlawful access to Personal Data and to ensure the protection of Personal Data.
Ensuring data security means ensuring confidentiality, integrity and access to personal data, as defined below. Confidentiality means that only authorized persons have access to the data. Integrity means that personal data is accurate and appropriate for the purpose for which it is processed. Access means that authorized users can access the data if they need it for the purposes for which they are entitled to.
All employees of PSC will be informed and trained in accordance with the procedures for data security. Personal Data will not be disclosed to third parties and unauthorized employees, which requires log-in information of the user. Users who have access to Personal Data must ensure that information is not shown to others whom are close to the computer screens/sessions.
The transfer of Personal Data to third parties in Turkey is compulsory for the purposes of processing Personal Data and for the fulfillment of the agreements concluded with the Data Holders and to the extent required by the Company's legitimate interests. Data is not transferred for any purpose other than the processing of Personal Data. However, even if the Processing is considered within the scope of the exceptions that require consent, the consent of the respective Data Owner shall be obtained for the transfer of the Personal Data of the new Data Owners to the PSC among themselves and to the business partners who take the security measures required by the PSC. Personal Data is not transferred abroad by PSC.
The transfer of Personal Data to third parties in Turkey is compulsory for the purposes of processing Personal Data and for the fulfillment of the agreements concluded with the Data Holders and to the extent required by the Company's legitimate interests.
Data is not transferred for any purpose other than the processing of Personal Data. However, even if the Processing is considered within the scope of the exceptions which requires the consent of the respective Data Owner shall be obtained for the transfer of the Personal Data of the new Data Owners to PSC and to the business partners who take the security measures required by PSC. PSC cannot transfer personal data internationally.
1-The Procedure of Eliminating Personal Data
PSC will remove all Personal Data at the request of the person who is in accordance with the Law, provided that the reasons for its processing are also removed, and the minimum retention periods prescribed in the applicable law and legislation are respected. Personal data can also be processed in non-automated ways, provided that it is part of any data recording system. Once the data is removed from the system, it can never be accessed again.
2-Procedure for Making Personal Data Anonymous
By using the term ‘anonymous’ in the context of Personal Data collection means that the personal data cannot be associated with any specific or identifiable person, even by pairing it with other data.
Procedures used for anonymization: Masking, Aggregation, Data Derivation, Data Shuffling, Permutation.
3-Purposes of processing personal data
The main purpose for Personal Data processing by Popseecul Design and Textile Trade Limited Company are as follows:
Name, surname, address, e-mail, mobile phone, home phone, business phone, date of birth, identity number, gender and size.
Personal Data is unlimited to all Data processed, but is limited to creating sales history,
creating invoices, invoicing, delivering products, sending e-invoices, sending newsletters, marketing communications and etc.
Obligation to Disclose Personal Data Contact
Popseecul Design and Textile Trade Limited Company is obliged to inform the real persons whose data will be processed during the acquisition of Personal Data. The scope of this information obligation is as follows:
• The identity of the data officer and the representative, if any,
• The purpose for which the Personal Data will be processed,
• Who and for what purpose the Personal Data processed can be transferred,
• Management of personal data collection and legal reasons,
• Specified rights of the Data Contact.
Exceptions to the Policy
As envisaged under Article 28 of the Law, this Policy shall not apply if:
- the processing of Personal Data in the context of activities relating to it or to family members living in the same dwelling by natural persons, provided that they are not passed on to third parties and that data security obligations are followed;
- Processing of Personal Data for purposes such as research, planning and statistics by means of anonymization with official statistics;
- the processing of personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, without prejudice to national defense, national security, public security, public order, economic security, privacy or privacy;
- Processing of Personal Data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to provide national defense, national security, public security, public order or economic security;
- Processing of Personal Data by judicial authorities or enforcement authorities in relation to investigations, prosecutions, proceedings or executions.
With the exception of the disclosure obligation, Data Holders shall not exercise their rights under the Law and this Policy in the presence of one of the following exceptions:
- Personal data processing is necessary for crime prevention or crime investigation;
- Processing of Personal Data publicized by the Data Owner itself;
- Personal data processing is necessary for the conduct of supervisory or regulatory duties and disciplinary investigations or prosecutions by authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law;
- Personal data processing is necessary to protect the economic and financial interests of the State in relation to budget, tax and financial matters
Apart from the above, Personal Data that is either fully or partially automated or obtained by non-automated means provided that it is part of any data recording system is also outside the scope of this Policy. In this context, the Law and this Policy shall not apply to all data not included in any data recording system with the PSC. Vakko's responsibility for the data in question is T.C. It shall be limited to the provisions of the Constitution and the Turkish Penal Code.
Conclusion and Responsibility
If it is considered that this Policy is not observed in respect of the personal data of the Data owner, the issue will be referred to the PSC GDPR Committee.
In the event of any changes in this Policy, all Data Holders shall be notified of such change and the Data Holders shall be made aware of the contact addresses required for access to the current Policy and the channels through which they may receive information regarding the updated Policy.
PSC is improving the harmonization process with the international general principles relating to personal data protection with the current Constitution of Turkey and the Turkish Criminal Law in order to fulfill the entire process of managing in accordance with the law and requirements pursuant to the Law. In this context, in accordance with this general Policy, which is prepared to be applied to all business units, it binds all business units and employees with the principles of processing of Personal Data by PSC.