ZUKUTU STONE ART INDUSTRY AND TRADE LIMITED COMPANY
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
This Information Notice has been prepared by Zukutu Stone Art Industry and Trade Limited Company (“Company”) for the purpose of informing the Company’s customers about the processing of their personal data by the Company within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”).
Detailed information regarding the processing of your personal data within the scope of this Information Notice can be accessed through the Company’s Personal Data Protection and Processing Policy available at (www.zukutustore.com) and at https://zukutu-store.webtasarim.link/.
a) Methods and Legal Grounds for the Collection of Personal Data
Your personal data are collected through electronic or physical means. The personal data collected based on the legal grounds specified in this Disclosure Text may be processed and shared within the scope of the personal data processing conditions set forth in Articles 5 and 6 of the Law.
b) Purposes of Processing Personal Data
Your personal data are processed, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law, for the purposes of planning and carrying out the necessary activities to customize and recommend the products and services offered by the Company in line with the preferences, usage habits, and needs of the relevant persons; enabling the relevant persons to benefit from the products and services offered by the Company through the execution of necessary works by the relevant business units and the management of related business processes; carrying out the commercial activities conducted by the Company through the execution of necessary works by the relevant business units and the management of related business processes; planning and executing the Company’s commercial and/or business strategies; and ensuring the legal, technical, and commercial–occupational security of the Company and the relevant persons who have a business relationship with the Company.
c) Parties to Whom Personal Data May Be Transferred and Purposes of Data Transfer
Your personal data may be shared, within the scope of the personal data processing conditions and purposes set forth in Articles 8 and 9 of the Law, with the Company’s business partners and suppliers, as well as with legally authorized public institutions and organizations and legally authorized private legal entities, for the purposes of: planning and carrying out the necessary activities to customize, recommend, and promote the products and services offered by the Company in accordance with the preferences, usage habits, and needs of the relevant individuals; performing the necessary work by the relevant business units to enable the relevant individuals to benefit from the products and services offered by the Company and conducting the related business processes; carrying out the necessary work by the relevant business units for the realization of the commercial activities conducted by the Company and managing the related business processes; planning and executing the Company’s commercial and/or business strategies; and ensuring the legal, technical, and commercial–occupational security of the Company and the relevant persons who have a business relationship with the Company.
d)Rights of Data Subjects and the Exercise of These Rights
As data subjects, if you submit your requests regarding your rights listed below to the Company by the methods specified under the heading “Exercise of Rights by Data Subjects”, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.
Pursuant to Article 11 of the Law, as a personal data subject, you have the following rights:
- To learn whether your personal data are processed,
- To request information if your personal data have been processed,
- To learn the purpose of the processing of your personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your personal data are transferred, domestically or abroad,
- To request the correction of your personal data if they are incomplete or inaccurate and to request that the actions taken within this scope be notified to the third parties to whom the personal data have been transferred,
- To request the deletion or destruction of your personal data, even though they have been processed in accordance with the Law and other relevant legislation, if the reasons requiring their processing no longer exist, and to request that the actions taken within this scope be notified to the third parties to whom the personal data have been transferred,
- To object to the occurrence of a result against the data subject arising from the analysis of the processed data exclusively through automated systems,
- To request compensation for damages in the event that the personal data are processed unlawfully and cause damage to the data subject.
- Pursuant to Article 28, paragraph 2 of the Law, the cases in which data subjects do not have the right to make a request are listed. Within this scope;
- Where the processing of personal data is necessary for the prevention of crime or for criminal investigations,
- Where the personal data have been made public by the data subject himself/herself,
- Where the processing of personal data is necessary for the performance of supervisory or regulatory duties, or for disciplinary investigations or proceedings, carried out by authorized public institutions and organizations or professional organizations having the status of public institutions, based on the authority granted by the Law.
- Where the processing of personal data is necessary for the protection of the State’s economic and financial interests in relation to budgetary, tax, and financial matters, the rights specified above regarding the data cannot be exercised.
- Pursuant to Article 28, paragraph 1 of the Law, in the following cases, the data shall fall outside the scope of the Law; therefore, the requests of data subjects regarding such data will not be processed:
- Processing of personal data by natural persons solely within the scope of activities related to themselves or their family members living in the same household, provided that such data is not disclosed to third parties and that obligations regarding data security are complied with.
- Processing of personal data for purposes such as research, planning, and statistics by rendering them anonymous for official statistical purposes.
- Processing of personal data for artistic, historical, literary, or scientific purposes, or within the scope of freedom of expression, provided that such processing does not violate national defense, national security, public security, public order, economic security, the right to privacy, or personal rights, and does not constitute a criminal offense.
- Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order, or economic security.
Processing of personal data by judicial authorities or enforcement authorities in relation to investigation, prosecution, trial, or execution proceedings.
Exercising the Rights by Data Subjects
- Data subjects may exercise their rights specified above by using the “Application Form for Data Subjects to Apply to the Data Controller” available at (www.zukutustore.com).
- Applications shall be submitted together with documents verifying the identity of the relevant data subject, through one of the following methods: By filling out the form and submitting the wet-signed hard copy in person, via a notary public, or by registered mail with return receipt, to the following address: Hacıhalil Mahallesi, 1207. Street No: 1, Apartment No: 5, Gebze / Kocaeli – Türkiye
- By following a method prescribed by the Personal Data Protection Board.
- By following a method prescribed by the Personal Data Protection Board.
- Within the limits stipulated under the Law, the Company responds to requests submitted by data subjects who wish to exercise their rightswithin a maximum period of thirty (30) days,in accordance with the procedures set forth in the Law.
- In order for third parties to submit an application on behalf of a personal data owner, a special power of attorney duly issued via a notary public by the data subject in favor of the applicant must be submitted.
- Although applications submitted by data subjects are, as a rule, processedfree of charge, a fee may be charged in accordance with the fee schedule determined by the Personal Data Protection Board
- The Company may request information from the applicant in order to verify whether the applicant is the personal data owner, and may direct questions to the personal data owner regarding their application in order to clarify the matters stated in the application.
[1] Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller published in the Official Gazette dated 10.03.2018 and numbered 30356, no fee shall be charged for written responses to data subjects’ applications up to ten (10) pages.
For each page exceeding ten (10) pages, a processing fee of 1 Turkish Lira may be charged per page.
In cases where the response to the application is provided on a recording medium such as aCD or flash drive, the fee that may be requested by the Authority shall not exceed the cost of the recording medium.