Information Text on Processing of Personal Data

ELİT PROCESS ENGINEERING LTD. ŞTİ. (“EP”), as the data controller defined in the Personal Data Protection Law No. 6698, attaches utmost importance to the protection and security of your personal data that we process.
During the collection, storage, processing and sharing of your personal data in accordance with the law, we take all necessary measures to protect the confidentiality of your data, to protect the privacy of all individuals whose personal data we process and to ensure the security of their personal data.
Your personal data is processed in accordance with the legal legislation within the framework of the Personal Data Protection Policies and Procedures put into effect within the EP.
Our aim with this information text is to inform you about the purposes of processing your personal data, to whom and for what purpose it can be transferred, the method of collection, the legal reasons for processing and your rights.
WHAT DOES PERSONAL DATA MEAN?
Personal data refers to any information related to an identified or identifiable natural person.
WHAT DOES PROCESSING OF PERSONAL DATA MEAN?
Processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, either fully or partially by automatic means or non-automatic means provided that it is part of any data recording system.
WHO IS THE DATA CONTROLLER?
The data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
WHAT ARE THE GENERAL PRINCIPLES REGARDING PROCESSING OF PERSONAL DATA?
Personal data is processed by the EP in accordance with the procedures and principles stipulated in the Personal Data Protection Law No. 6698 and other laws, a) Being in compliance with the law and rules of integrity.
b) Being accurate and up-to-date when necessary.
c) Processed for specific, clear and legitimate purposes.
ç) Being connected, limited and proportionate to the purpose for which they are processed.
d) Being stored for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
They are processed in accordance with the general principles.

PURPOSE AND LEGAL REASON FOR PROCESSING YOUR PERSONAL DATA Your personal data is processed primarily for the purposes of performing the activities required by our business processes and commercial activities, protecting our rights and interests, fulfilling our legal obligations, and following up and finalizing applications made to our company. Personal data is obtained and processed in physical and electronic environments, by automatic and non-automatic means. For the same purposes, personal data may be shared with our business partners, suppliers, EP Group companies, shareholders, authorized institutions and organizations. The legal reason for collecting personal data varies according to the processing activity, but is always determined as at least one of the bases defined in the legal legislation (Articles 5 and 6 of the Personal Data Protection Law No. 6698).
PERSONAL DATA PROCESSING ACTIVITIES
Your personal data,
fulfillment of legal obligations, compliance with legislation and exercising legal rights,
conducting the necessary work for establishing contracts and performing contracts,
determining appropriate products, projects and services for customers, customizing, developing and offering them to customers,
ensuring and developing coordination, cooperation and efficiency between EP departments,
ensuring the security of the website and other electronic systems,
making the necessary notifications to the parties,
conducting and developing advertising and marketing activities,
conducting audit activities,
conducting other events, promotions and campaigns that may be in favor of the data owner,
investigating, detecting, preventing and reporting violations of the contract and the law to administrative and judicial authorities,
resolving legal disputes,
evaluating and responding to requests and questions,
performing satisfaction, performance and similar measurements,
creating statistical information, executing operations, developing company policies and strategies
Processing activities based on the relevant persons listed above, in addition to the personal data processing activities listed above, your personal data is processed based on the relevant persons listed below and for the purposes and legal reasons specified below, in accordance with the Law No. 6698 on the Protection of Personal Data and the secondary regulations issued in accordance with this law:
Sales of Industrial Equipment and Systems – Customers
Provided by our company;
“name-surname, signature, T.R. Your personal data such as “ID Number, e-mail, address, telephone, purchased material/service information, identity information, sales price payment information” for the purpose of establishing and performing the equipment and systems sales contract in accordance with the legal reason of “establishment and performance of the contract” regulated in Article 5/2-c of the Law on the Protection of Personal Data No. 6698, Your personal data such as “name-surname, telephone, e-mail” for the purpose of informing about our company’s campaigns upon your approval within the scope of the Law on the Regulation of Electronic Commerce No. 6563 and based on the legal reason regulated in Article 5/2-a of the Law No. 6698,
Human Resources Processes – Candidates
Personal data regarding candidates are processed for the purposes of evaluating job applications and managing relevant processes. The legal basis for collecting and processing personal data of candidates is the establishment of a contract within the scope of the job application, the legitimate interests of the parties and, in some cases, your explicit consent.
Personal data of candidates may be transferred to EP Group Companies and/or third parties from whom services are received for the purpose of conducting personality inventories and similar tests.
Subcontractors, Suppliers and Consultants
Personal data regarding our subcontractors, suppliers and consultants and their employees and authorized representatives are processed for the purposes of communicating with our subcontractors, suppliers and consultants within the scope of business processes, making payments, conducting business processes, fulfilling tax obligations, recording commercial activities, reaching agreement on financial transactions, establishing and performing contracts. The legal basis for the collection and processing of personal data of our subcontractors, suppliers and consultants is the legitimate interests of the parties, the establishment or performance of contracts, the legal obligations of the parties and the definition and use of their rights.
Personal data of subcontractors, suppliers and consultants may be transferred to financial institutions, banks, EP Group Companies and/or subcontractor security companies and/or their personnel, official and/or legally authorized institutions and organizations; in order to make payments and other financial transactions, to establish and perform contracts and to fulfill legal obligations.
Commercial Customers Personal data of our commercial customers and their employees and authorized representatives are processed for the purposes of communicating with commercial customers, making payments, conducting business processes, fulfilling tax obligations, recording commercial activities, reaching agreement on financial transactions and establishing and performing contracts. The legal basis for the collection and processing of personal data of commercial customers is the legitimate interests of the parties, legal obligations, exercising their rights and existing or to be established contractual relationships. The personal data of commercial customers may be transferred to financial institutions, banks, EP Group Companies and/or subcontractor security companies and/or personnel, official and/or legally authorized institutions and organizations; in order to make payments and other financial transactions, to establish and execute contracts and to fulfill legal obligations.
Website Visitor The purposes of processing personal data regarding visitors to our website located at “www.elitprocess.com.” are to provide a faster and more secure experience through our website, to collect statistical information, and to make improvements on our website. Personal data is collected by automatic methods during the visit to our website, and the legal basis in this context is the legitimate interests of our company. The personal data of visitors to our website may be transferred to third parties and business partners from whom we receive services; in order to improve and develop the experience on the website, to ensure proper access to the website, and to obtain statistical information. EP may use cookies from time to time to provide a faster and more secure experience to visitors to the website. For detailed information on this matter, you can review our Cookie Policy published on our company’s website (https://elitprocess.com).
Other Processing Activities In addition to those mentioned above, your personal data may also be processed. Personal data in the content of applications, complaints, requests and demands sent to our company by mail or e-mail may also be processed by our company. The purpose of the processing activities within this scope is to be able to communicate with the other party, fulfill the purpose of the relevant correspondence, protect our rights and finalize the applications, complaints, requests and demands that are processed. In essence, these personal data can only be shared with EP Group companies in order to fulfill the requirements of the relevant transaction. On the other hand, depending on the nature of the situation, it can be transferred to various third parties, including our shareholders, consultants, public institutions and organizations.
PERSONAL DATA COLLECTION METHODS
Personal data can be obtained by EP directly through written, verbal and electronic means, as well as from institutions with which we have business relations and from real and legal persons (including but not limited to business partners, subcontractors, suppliers, service providers, agencies, agents, contractors, subcontractors, consultants) through verbal, written or electronic means.
Your personal data can be collected completely or partially by automatic means or by non-automatic methods provided that it is part of the data recording system.
In addition to these, your personal data is also collected in cases where you disclose it by contacting our company through other methods.
TRANSFER OF PERSONAL DATA Our company may share your personal data with notaries, suppliers, relevant site managements, banks or financial institutions, project partners, customers, legally authorized public or private institutions, domestic and/or foreign partners, affiliates, business partners, suppliers and subsidiaries (and/or third party business partners that need to be shared for the performance of the work) in accordance with the purposes specified above and your will expressed in the disclosure text and explicit consent form, or with legally authorized public and private institutions in case of official request or necessity, in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698.
Your personal data is processed and transferred in accordance with Article 5 of the Personal Data Protection Law No. 6698, and EP may process and transfer special data in accordance with Article 6 of the Personal Data Protection Law, provided that it complies with the legal requirements.
STORAGE OF PERSONAL DATA
Personal data may be retained for the period accepted in the relevant policies of EP or stipulated in the legislation.
Regarding real estate sales, your personal data processed for the establishment and execution of the contract such as name-surname, signature, Turkish Republic Identity Number, e-mail, address, telephone, purchased product information, sales price payment information and for the purpose of informing about our company’s campaigns with your approval within the scope of the Law on Regulation of Electronic Commerce, will be processed and stored for the duration of the statutory limitation periods in accordance with Articles 5/2-c and 5/2-a of the Law on Protection of Personal Data No. 6698, and your personal data such as “identity information and real estate information” processed based on your explicit consent will be processed and stored for the period you do not withdraw your explicit consent.
You can withdraw your explicit consent at any time.
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
According to Article 11 of the Law on the Protection of Personal Data No. 6698:
to learn whether your personal data has been processed, to request information about your personal data if it has been processed, to learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
to know the third parties to whom your personal data has been transferred domestically or abroad, to request correction of your personal data if it has been processed incompletely or incorrectly and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
to request deletion or destruction of your personal data if the reasons requiring its processing have been eliminated despite the fact that it has been processed in accordance with the provisions of the Law on the Protection of Personal Data No. 6698 and other relevant laws and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred, to object to the emergence of a result against the person by analyzing your processed data exclusively through automated systems, to request that your personal data be processed against the law If you suffer damage, you have the right to demand compensation for the damage. In order to exercise your rights specified above, if you submit your requests to our company in accordance with the application procedures stipulated in the “Communiqué on the Procedures and Principles of Application to the Data Controller”, our company will finalize your request free of charge, depending on its nature, as soon as possible and within 30 (thirty) days at the latest. However, if the transaction requires an additional cost, it may request a fee in accordance with the Communiqué regulations. In accordance with Article 13, paragraph 1 of the Law on the Protection of Personal Data No. 6698, you may submit your request to our company in writing or through other methods to be determined by the Personal Data Protection Board in the future. In your applications to our company to exercise your rights specified in Article 11 of the Law on the Protection of Personal Data No. 6698, you may submit your wet-signed petition through a notary public to “İvedik OSB Mah. Melih Gökçek Bulvarı Köşe İvedik Business Center Bagimsiz bolum 71 No:4AT Yenimahalle/Ankara” or you can forward it to info@elitprocess.com with a secure electronic signature.