DISCLOSURE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

DISCLOSURE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

As ERTA BAĞIMSIZ DENETİM VE YMM LTD.ŞTİ İLE ERTA SMMM VE BAĞIMSIZ DENETİM A.Ş. (“Company”), we show the utmost sensitivity to the security of your personal data. With this awareness, we attach great importance to the processing and storage of personal data of real persons with whom the Company interacts in accordance with the Law on Protection of Personal Data No. 6698 (“Law”) and secondary regulations enacted or to be enacted together with the Law (regulation, communiqué, circular) and the binding decisions made or to be made by the Personal Data Protection Board. With the full understanding of this responsibility, we process your personal data in the capacity of “Data Controller” as defined in the Law, within the scope of account opening procedures, as explained below, and within the limits stipulated by the legislation.

  1. Information on Data Controller

In accordance with the law, ERTA BAĞIMSIZ DENETİM VE YMM LTD.ŞTİ AND ERTA SMMM VE BAĞIMSIZ DENETİM A.Ş. at the address of Halaskargazi cad no.114 k.7 d.14 Sisli/Istanbul/Turkey is the Data Controller.

  1. Purposes of Processing Personal Data

Your personal data are processed by the Company in order to carry out the necessary studies by the business units of the Company to perform the commercial activities of the Company in accordance with the legislation and Company policies, to carry out the activities in this direction, to determine, plan and implement the commercial policies of the Company in the short, medium and long terms, to design and conduct human resources activities of the Company, to fulfill the obligations of the Company arising from the relevant legislation, to manage customer relations and corporate communication processes, and to ensure the commercial and legal safety of real and legal persons with whom the Company has business relations, within the limits specified in the Law, in accordance with the rules of honesty and in a connected, limited and measured manner for these purposes at all times.

  1. Transfer of Personal Data

Your personal data are transferred within the scope of the above-mentioned purposes, to legally authorized public institutions, judicial and administrative authorities, private law legal and real persons allowed in other legislation, institutions, and organizations authorized to audit the Company in accordance with the conditions specified in Articles 8 and 9 of the Law, to the contracted payment institutions in order to fulfill the payments and financial obligations, to business partners from whom services are received or cooperated with for the performance and development of the Company’s activities, and only when necessary, to the Company’s suppliers, and if you reach us via e-mail, to abroad due to the fact that the e-mail servers are abroad, ensuring that data security measures specified in the Law are fully taken.

  1. Personal Data Collection Method and Legal Grounds

Your personal data is collected by the authorized units and employees of the Company through automatic and non-automatic methods, verbally, in writing, or electronically. Within this context, personal data in the category of identity, communication, location, personnel, legal action, customer transactions, physical space security, transaction security, risk management, finance, professional experience, marketing are processed based on the mandatory grounds that it is mandatory to process the personal data of the parties to the contract due to the fact that it is directly related to the establishment or performance of a contract indicated in the second paragraph of article 5 of the Law, that the data processing is mandatory for the data controller to fulfill its legal obligation, that the data subject has made such public and that such data do not harm the fundamental rights and freedoms of the data subject, and that data processing is mandatory for the legitimate interests of the Company.

  1. Rights of Data Subjects Under the Law

By applying to the Company at any time, you can demand your right to

  • Learn whether your personal data is processed or not,
  • Request information about your personal data if they have been processed,
  • Learn the purpose of processing the personal data and whether they are used appropriately for their purpose,
  • Know the third parties to whom personal data is transmitted in the country or abroad,
  • In case personal data is processed deficiently or incorrectly, request the correction of such,
  • Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
  • Request the notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the Law, to third parties to whom your personal data has been transferred,
  • Object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,
  • Request the remedy of damages in case of any damages suffered due to illegal processing of the Personal Data

. You can submit your requests regarding your rights and the implementation of the Law by filling in the application form, which you can obtain at www.ertadenetim.com, and sending it to the address of Halaskargazi cad no.114 k.7 d.14 Sisli / Istanbul / Turkey with signature, through a notary, registered mail or personally, or you can e-mail the electronically filled application form to haber@ertadenetim.com via your KEP address or the e-mail address already registered in the Company’s data registration system after signing the form with your mobile signature, secure electronic signature. If the company is to respond to such requests in writing, it will do so without any charges for up to ten pages without charge, and by charging 1 Turkish Lira transaction fee for each page over ten pages. If the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be requested by the Company will not exceed the cost of the recording medium.