Yılmaz Vatka

This English translation is provided for information purposes only. In case of any discrepancy, the Turkish version shall prevail.

This privacy notice has been prepared within the scope of the obligations arising from Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). We hereby share this notice and the necessary explanations with the persons concerned. Our company always reserves the right to make the necessary updates to this notice within the framework of the law. Our company is Yılmaz Vatka (“yilmazvatka.com”). As the data controller, we value and respect your personal data, your privacy and its security, and we are committed to fulfilling our responsibilities under the KVKK. For this reason, in our capacity as data controller, we explain below the purposes for which your personal data is processed, the methods and legal grounds of data collection, and your rights listed in Article 11 of the KVKK. We publish this notice for all our customers, our employees, our former employees whose employment has ended, guests visiting our workplace, our suppliers, visitors to our website, users connecting to our guest network, customers in our company database, third parties we meet in marketing settings such as trade fairs, job applicants who apply through career portals, are referred to us or fill in a physical application form, all our business partners within the scope of our commercial activities and their employees, and, without being limited to these, all natural persons who have shared or will share their personal data with us face to face, remotely, verbally, in writing or electronically.

1. For what purposes and on what legal grounds do we process your personal data?

First of all, we would like to state that your personal data may be processed by the COMPANY in accordance with the provisions of Law No. 6698 on the Protection of Personal Data, based on the explicit consent you have given. We would also like to remind you that consent is not required in cases falling under Article 5/2 of the Law. The personal data we collect generally includes identity, contact, personnel, financial, audio and visual records, customer transaction information, bank details, address and the information you provide in job application forms. The personal data collected from you is processed:

1. to provide information when requested by authorized public institutions and organizations, in particular by courts and authorized public officials;
2. to fulfil our legal obligations and exercise our rights arising from the applicable legislation (personnel file records required under employment contracts, health records, obligations arising from commercial and tax laws);
3. to fulfil our contractual obligations (such as fulfilling our company’s responsibilities under transport law and service contracts, delivering products, identifying the person receiving the product, and managing invoicing, commercial activities and risk processes), and to respond to customer complaints and suggestions in the course of providing our services;
4. to contact counterparties while managing purchasing processes as part of our company operations;
5. to recruit employees in line with the company’s human resources policies and needs, to carry out and improve recruitment processes, to evaluate and conclude job applications and contact applicants, to implement our human resources policy, and to evaluate employee performance in order to assess, develop and improve this policy and our services;
6. to obtain visitor information in order to ensure the security of our workplace and employees;
7. to manage marketing processes, promote our services, carry out sector-related activities and develop business volume at trade fairs and similar events.
8. We would like to inform job applicants who send us their CV that the information obtained at the time of application may be used to evaluate them for the position they applied for or for possible future positions, and may be retained in the company’s human resources data and physical records for the specified periods.
9. We would also like to state that the personal data of all our business partners and their employees who benefit from the protection of the Law on the Protection of Personal Data within the scope of our commercial activities may be processed as part of the company’s customer portfolio, during and after the commercial relationship, in order to fulfil contractual obligations.

2. To whom and for what purposes your personal data may be transferred

First of all, your personal data is safe with our Company. We do not share your data with third parties without your explicit consent. However, we are required by law and regulations to share it with certain third parties and institutions. Even in such legally mandatory transfers, we take the necessary technical, administrative and legal measures to prevent any violation of your rights, and we attach importance to confidentiality during the transfer. The personal data you provide to our company may be transferred, for the purposes listed above, to our business partners, service providers, suppliers, group companies, company officers and shareholders, authorized public institutions and organizations, and private legal persons, in compliance with the conditions set out in Articles 8 and 9 of the KVKK. Examples include sharing your address and other information with authorized public institutions when requested by courts, or with our business partners so that the products we deliver reach you. In addition, personal data may be transferred abroad by the Company for the purposes stated above: with the explicit consent of the data subject, or, where there is no explicit consent but one or more of the other conditions above are met, provided that the country of transfer offers adequate protection, or, where it does not, provided that the company and the data controller in the relevant foreign country undertake adequate protection in writing and the permission of the Personal Data Protection Board is obtained. For example, personal data is shared to provide the information and documents required under the legislation of the relevant foreign countries and our country for our staff’s international transport activities, or by our export department while carrying out export transactions and invoicing processes. Your special categories of personal data are not transferred abroad.

3. How and on what legal grounds your personal data is collected

We process your personal data for the purposes listed above in accordance with the Turkish Code of Obligations No. 6098, the Turkish Commercial Code No. 6102, various tax regulations, social security regulations, the Highway Traffic Law No. 2918, the Labour Law No. 4857, Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6331, the Customs Law No. 4458, the regulations and communiqués issued under these laws and all other applicable legislation, or based on your explicit consent. Processing of personal data means any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of such data, wholly or partly by automatic means, or by non-automatic means provided that it forms part of a data recording system. At our Company, personal data may be obtained and collected for the purposes stated above, verbally, in writing or electronically, through the Company’s workplaces, departments, website, cameras and other similar means, wholly or partly by automatic means or by non-automatic means provided that it forms part of a data recording system, including but not limited to the following:

1. security camera recordings at our workplace;
2. complaint and suggestion forms filled in by our customers, and documents they are required to submit to us under the legislation;
3. calls to our company phones, emails sent to our company or to our employees’ company email addresses, faxes, and written messages sent to our employees’ mobile phones;
4. personal data relating to job applications is collected through career portals, email, İŞKUR (Turkish Employment Agency), referrals and physical application forms;
5. documents submitted to us for presentation to the relevant public institutions and for carrying out transport services in compliance with the legislation of foreign countries while fulfilling responsibilities arising from transport law, and the mandatory use of tachographs and GoBox devices under certain laws.

4. Rights of data subjects under the Law

By applying to our company, you may:

• learn whether your personal data is processed, the purpose of processing and whether it is used in accordance with that purpose, learn the third parties in Turkey or abroad to whom your data is transferred, and request information about the processed data;
• if incorrect or incomplete processing is detected, request its correction and request that this be notified to the third parties to whom your personal data has been transferred;
• in addition, upon your request and without the need to give any reason, have your personal data deleted, destroyed or anonymized;
• even where your data has been processed in accordance with the KVKK and other relevant laws, request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist, and request that this be notified to the third parties to whom your personal data has been transferred; you also have the right to object to any result against you arising from the analysis of your processed data exclusively by automated systems.

However, we would like to remind you that personal data we are legally required to keep cannot be deleted, destroyed or anonymized.

Pursuant to Article 13(1) of the KVKK, you may submit your requests regarding the exercise of the above rights to our Company in writing or by other methods determined by the Personal Data Protection Board. Our Company will conclude your application free of charge within 30 days at the latest (however, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Board) and will respond via the contact information you have provided. You can reach us through one of the contact channels listed below. We kindly ask you to include an email or postal address to which we can send a written response after your application.