Privacy Notice on Protection and Processing of Personal Data


Privacy Notice on Protection and Processing of Personal Data

AMES EUROPE TEKSTİL SANAYİ VE TİCARET ANONİM ŞİRKETİ

PRIVACY NOTICE ON PROTECTION AND PROCESSING OF PERSONAL DATA

("Privacy Notice")

1. General Description

Personal data includes all kinds of data relating to an identified or identifiable natural person. Sensitive personal data, which is a special type of personal data, is based on race, ethnicity, political thought, philosophical belief, religion, sect, other beliefs, association, foundation or union membership, health, sexual life, criminal conviction and security measures, biometric and genetic data.
Processing of personal data refers to all kinds of operations performed on personal data, such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system. 

2. Data Controller

Your personal data may be processed by Ames Europe Tekstil Sanayi ve Ticaret Anonim Şirketi ("Data Controller") in the capacity of data controller, in accordance with the Personal Data Protection Law No. 6698 ("Law") within the scope described below.

3. Collection of Personal Data, Legal Basis and Purposes of Processing 

Your personal data, in accordance with the Law, may vary depending on the service provided by the Data Controller and the commercial activities of the Data Controller, and collected verbally, in writing or electronically, automatically or non-automatically.
Your collected personal data, in accordance with the basic principles stipulated in the Law and within the personal data processing conditions (legal reasons) specified in Articles 5 and 6 of the Law and shown below;It can be processed by the Ames Europe Tekstil Sanayi ve Ticaret Anonim Şirketi for the purposes stated below. You can examine what your personal data is, how they are collected, what personal data may be subject to processing by us, and the details of the purposes of processing this data from the tables below.

A. GROUPS OF PEOPLE 

Collection and Processing of Personal Data

(Person Groups)

Data Acquisition Method

Purposes of Processing Personal Data

 Employee

 Original Document

 Execution / Supervision of Business Activities

 Supplier Employee

 Form - Document

 Execution of Goods / Services Production and Operation Processes

 Potential Product or Service Purchaser

 Software Program - Domestic

 Execution of Management Activities

 Supplier Representative

 Information Technologies Data Recording System

 Ensuring the Security of Movable Property and Resources

 Product or Service Purchaser

 Document Management Software

 Execution of Marketing Processes of Products / Services

 Shareholder/Partner

 E-Mail - Abroad

 Execution of Finance and Accounting Affairs

 Parent / Guardian / Representative

 E-Mail - Domestic

 Execution of Logistics Activities

 Employee Candidate

 Hard Copy

 Execution of Activities in Compliance with the Legislation

 Visitor

 Computer Environment

 Execution of Occupational Health / Safety Activities

 Intern

 Accounting Program

 Execution of Risk Management Processes

 

 Digital Methods

 Ensuring the Security of Data Controller Operations

   

 Execution of Business Continuity Ensuring Activities

   

 Receiving and Evaluating Suggestions for Improvement of Business Processes

   

 Execution of Goods / Service Procurement Processes

   

 Execution of Supply Chain Management Processes

   

 Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees

   

 Monitoring and Execution of Legal Affairs

   

 Execution of Contract Processes

   

 Execution of Goods / Service Sales Processes

   

 Providing Information to Authorized Persons, Institutions and Organizations Organization and Event Management

   

 Creating and Tracking Visitor Records

   

 Tracking Requests / Complaints

   

 Execution of Information Security Processes

   

 Execution of Goods / Services After Sales Support Services

   

 Execution of Social Responsibility and Civil Society Activities Conducting 

   

 Planning Human Resources Processes

   

 Execution of Employee Satisfaction and Loyalty Processes

   

 Execution of Fringe Benefits and Benefits Processes for Employees

   

 Conducting Audit / Ethics Activities

   

 Conducting Internal Audit / Investigation / Intelligence Activities

   

 Execution of Emergency Management Processes

   

 Execution of Access Authorizations

   

 Ensuring Physical Space Security

   

 Conducting Training Activities

   

 Execution of Employee Candidate Application Processes

   

 Execution of Employee Candidate / Intern / Student Selection and Placement Processes

   

 Execution of Assignment Processes

   

 Execution of Human Resources Processes

   

 Execution of Personnel Attendance Control System

   

 Execution of Performance Evaluation Processes

   

 Audit / Ethical Activities

   

 Execution of Termination Procedures

   

 Execution of Communication Activities 

   

 Execution of Wage Policy

   

 Execution of Strategic Planning Activities

   

 Execution of Company / Product / Service Loyalty Processes

   

 Conducting Marketing Analysis Studies

   

 Execution of Customer Relationship Management Processes

   

 Execution of Activities for Customer Satisfaction

Legal Reasons

 Legitimate Interests of the Data Controller

 Fulfillment of Legal Obligation

 Stipulated by Law

 Establishment, Exercise or Protection of a Right

 Contract Signing

 Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning, management and financing of health services

 Obtaining Explicit Consent

 Publicization by the Data Owner

B. OTHER GROUPS OF PEOPLE

Purposes of Collection and Processing of Personal Data

(Person Groups)

 Data Acquisition Method

 Purposes of Processing Personal Data

 Public Official

 Information Technologies 

 Execution of Activities in Compliance with the Legislation

 Employee Relative

 Form - Document

 Execution / Supervision of Business Activities

 Workplace Physician

 Computer Environment

 Execution of Business Continuity Ensuring Activities

 Doctor

 Original Document

 Providing Information to Authorized Persons, Institutions and Organizations

 Occupational Health and Safety Specialist

 Software Program - Domestic

 Execution of Management Activities

 Party to Lawsuit, Enforcement Case

 Data Recording System

 Execution of Employee Satisfaction and Loyalty Processes

 Website Visitors

 

 Execution of Fringe Benefits and Benefits Processes for Employees

   

 Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees

   

 Execution of Occupational Health / Safety Activities

   

 Execution of Employee Candidate Application Processes

   

 Follow-up and Execution of Legal Affairs

   

 Execution of Information Security Processes

 Legal Reasons

 Fulfillment of Legal Obligation

 Stipulated by Law

 Legitimate Interests of the Data Controller

 Establishment, Exercise or Protection of a Right

 Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning, management and financing of health services 

4. The Parties and Purposes of Transfer of Your Personal Data

Your personal data may be transferred by the Data Controller to the domestic and foreign recipient groups listed below, limited to the above-mentioned purposes, in accordance with the basic principles stipulated in the Law and within the personal data transfer conditions specified in Articles 8 and 9 of the Law.

A. GROUPS OF PEOPLE

Parties to which Personal Data are Transferred and Purposes of Transfer

 Transferred Parties_Domestic

 Transferred Parties_Abroad

 Employee

 Suppliers

 Suppliers

 Supplier Employee

 Authorized Public Institutions and Organizations

 Natural Persons or Private Law Legal Entities

 Potential Product or Service Purchaser

 Natural Persons or Private Law Legal Entities

 Business Partners

 Supplier Representative

 Shareholders

 Associates and Subsidiaries

 Product or Service Purchaser

 Associates and Subsidiaries

 Authorized Public Institutions and Organizations

 Shareholder/Partner

   

 Parent / Guardian / Representative

   

 Employee Candidate

   

 Visitor

   

 Intern

   

 

Purpose of Transfer of Personal Data

Domestic

Abroad

 Operational Operations

 Operational Operations

 Legal Obligation

 Informing subsidiaries

 Information

 Information

 Court Order

 Contract

 Administration Request

 Legal Obligation

 Monitoring the Legal Affairs and Transactions of the Data Controller

 Commercial Purpose

 Contract

 

 Transmission to Data Processors

 

 Commercial Purpose

 

Legal Resons

Domestic

Abroad

 Being mandatory for the fulfillment of obligations and commitments

 Explicit Consent

 Legal Regulation

 

 Legitimate Interest of the Data Controller

 

 Existence of other processing conditions arising from the law

 

 Existence of a Contract

 

 Explicit Consent

 

B. OTHER GROUPS OF PEOPLE

Parties to which Personal Data are Transferred and Purposes of Transfer

 Transferred Parties _Domestic

 Transferred Parties_Abroad

 Public Official

 Suppliers

 Authorized Public Institutions and Organizations

 Employee Relative

 Authorized Public Institutions and Organizations

 Natural Persons or Private Law Legal Entities

 Workplace Physician

 Natural Persons or Private Law Legal Entities

 

 Doctor

   

 Occupational Health and Safety Specialist

   

 Party to Lawsuit, Enforcement Case

   

 Website Visitors 

   

 

Purpose of Transfer of Personal Data

Domestic

Abroad

 Operational Operations

 Briefing

 Legal Obligation

 Legal Obligation

 Information

 

 Administration Request

 

 Monitoring the Legal Affairs and Transactions of the Data Controller

 

Legal Reasons

Domestic

Abroad

 Being mandatory for the fulfillment of obligations and commitments

 Explicit Consent

 Legal Regulation

 

 Legitimate Interest of the Data Controller

 

 Existence of other processing conditions arising from the law

 

5. Your Rights Enumerated in Article 11 of the Law as Personal Data Owner

In accordance with Article 11 of the Law, we declare that you have the following rights as data owners:

• Learning whether your personal data is processed,
• If your personal data has been processed, requesting information about it ,
• To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom your personal data is transferred, in the country or abroad ,
• Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the Law and other relevant law provisions, and requesting that the transaction carried out within this scope be notified to the third parties to whom your personal data has been transferred,
• Objecting to this if a result arises against you by analyzing the processed data exclusively through automated systems,
• To request the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data .

If you submit your requests regarding your rights to us through the methods stated below, the request will be finalized as soon as possible and within thirty days at the latest, free of charge, depending on its nature.

In order to exercise your rights, after filling and signing the relevant person/data owner application/request form, a copy of which is available at www.ames-europe.com or you can get physically from the Data Controller, this application form or your originally signed petition to use your rights;

• It can be hand-delivered to the secretariat of the data controller at Zafer SB Mahallesi Mümtaz Sokak No:29/0 Gaziemir/İZMİR address (Data Controller address) with documents identifying your identity,
• It can be sent to our address above via a notary public or registered mail,
• If you have a kep address, you can send it to ames@hs03.kep.tr with a secure electronic signature.

Thank you for reading our privacy notice.
Ames Europe Tekstil Sanayi ve Ticaret Anonim Şirketi