This Clarification Text on Personal Data Protection has been prepared to inform you about the collection, processing, transfer of your personal data, and your rights under the Law in accordance with the Personal Data Protection Law No. 6698 (“the Law”).
As KMS Demir Çelik A.Ş. (“our Company” or “KMS Çelik”), residing at 1235. Cadde No: 152 Ostim – ANKARA, we process your personal data in the capacity of data controller in accordance with the Law and relevant legislation within the scope described below.
Personal Data We Process
In order to realize the personal data processing purposes specified in this Clarification Text, we process your following personal data:
- Identity information, including name, surname, Turkish ID number, other information on the identity document, and information on the driver’s license photocopy;
- Contact information, including e-mail, phone number, mobile phone, home and work address;
- Information about your family and relatives;
- Location information via your mobile application or website visit;
- Personnel (HR) information;
- Legal action information;
- Customer transaction information;
- Physical space security information, including visitor entry and exit records;
- Transaction security information, including IP address and website login/logout information;
- Risk management information;
- Financial information, including bank card and credit card information;
- Professional experience information, including your CVs and resume information;
- Marketing information, including your usage habits and past product/service purchase information;
- Visual and auditory data;
- Association and foundation membership information contained in your CVs;
- Blood type information contained in driver’s license photocopies.
Purposes of Processing Personal Data
We process your personal data limited to the following purposes:
- Offering our products and/or services and executing sales processes;
- Executing product and/or service procurement processes;
- Updating, customizing, and developing our products and services in line with your needs and requests;
- Solving problems in our products and services, detecting errors, issues, and bugs, and eliminating them;
- Informing you about our new products or services, changes in our existing products or services, campaigns, and promotions;
- Providing you with necessary training and information about our products and services, explaining how our programs will be used;
- Executing customer relationship management processes;
- Providing call center and remote support services;
- Realizing website membership transactions;
- Managing cookies to improve our visitors’ experience on our websites, detect requests and problems, and finalize their searches quickly (For more detailed information, you can check our Cookie Policy);
- Updating your contact information to continue conducting our commercial activities and providing this updated information to our relevant institutions, companies, contractors, and/or suppliers;
- Analyzing your business processes to make our products and services suitable for your processes and improving them in line with your suggestions, requests, or reports, examining and responding to any complaints made by you;
- Executing refund transactions to those who make incorrect payments;
- Executing activities for customer satisfaction, planning and execution of social media and communication processes;
- Executing marketing activities, execution of advertisement / campaign / promotion processes;
- Opening and updating current accounts and making name, title, and type changes of customers and business partners;
- Inquiring about business partner satisfaction;
- Managing, executing, and auditing our business activities, executing business continuity activities;
- Executing finance and accounting affairs;
- Ensuring the physical space security of our buildings and facilities, creating visitor records, and ensuring their tracking;
- Ensuring the security of our software and systems and executing information security processes;
- Providing fringe benefits and interests for our employees’ relatives;
- Evaluating job applications of employee candidates, conducting interviews and meetings, contacting persons shown as references in their resumes;
- Executing processes related to company acquisition;
- Issuing corporate credit cards by our Company;
- Complying with legal legislation and fulfilling our legal obligations.
Our Method of Collecting Personal Data
We collect your personal data through the following automated and non-automated channels:
- CCTV (Closed Circuit Camera Recordings),
- Cookies and similar tracking technologies,
- Printed and electronic forms,
- Postal, cargo, or courier services,
- Programs providing remote access,
- Our dealers and business partners in various parts of Turkey,
- Companies from which we receive services,
- Other physical and electronic environments.
Legal Grounds for Processing
We process your personal data within the scope of the processing conditions specified in Articles 5 and 6 of the Law.
Transfer of Your Personal Data
We may transfer your personal data within the scope of the processing conditions specified in Articles 8 and 9 of the Law, limited to the purposes stated above, to our employees, business partners, shareholders, suppliers, company representatives and legally authorized attorneys, and legally authorized public/private institutions and organizations.
Your Rights Regarding Your Personal Data
Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:
- To learn whether your personal data is processed or not,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
- To know the third parties to whom your personal data is transferred domestically or abroad,
- To request correction of your personal data if it is incomplete or incorrectly processed and to request that the transaction carried out in this context be notified to third parties to whom your personal data has been transferred,
- To request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the Personal Data Protection Law No. 6698 and other relevant laws, and to request that the transaction carried out in this context be notified to the third parties to whom your personal data has been transferred,
- To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
- To request compensation for the damage in case you suffer damage due to the unlawful processing of personal data.
You can submit your requests regarding these rights via the Application Form on our website.
Your application will be fulfilled free of charge. However, if the requested transaction requires an additional cost, the fees in the tariff determined by the Personal Data Protection Board will be requested from the applicant.