K.V.K.K. PERSONAL DATA PROTECTION POLICY
As Budos Design, we respect the personal data you have shared with us and we care about the protection of fundamental rights and freedoms, especially the right to privacy. We would like to inform you in detail about the protection of your personal data you have shared in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), the ways your personal data is collected, the purposes of processing, legal reasons and our mutual rights and obligations.
Your personal data may be obtained, recorded, stored, maintained, disclosed, transferred to third parties or abroad to the extent permitted by the legislation, or processed in other ways by Budos Design, as Data Controller, in accordance with the provisions of the KVKK and within the framework described below.
Collection of Your Personal Data
Your personal data may be collected verbally, in writing or electronically by automatic or non-automatic methods in order to fulfill its legal obligations arising from the relevant legislation and to carry out collection, invoice issuance and order delivery processes.
For what purpose your personal data will be processed
Personal data within our company; planning and execution of commercial activities, receiving payment services on issues that are not directly provided by us and do not fall within our field of expertise, delivering orders, making collections, issuing invoices, resolving consumer complaints, sending commercial electronic messages if you give your explicit consent, providing information to authorized institutions and organizations arising from the legislation, planning and execution of the necessary audit activities to ensure that the activities are carried out in accordance with the procedures of our Company and the relevant legislation, For the purposes of planning and execution of corporate sustainability activities, carrying out activities to protect the reputation of our company, management of request and complaint processes, planning and execution of corporate governance and communication activities, it will be processed in accordance with the law and honesty rules and the principles of being connected, limited and measured for the purpose for which they are processed and retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
Transfer of Your Personal Data
In order to fulfill the above-mentioned purposes, the personal data obtained by you may be transferred to the Ministry of Commerce, domestic/foreign/international, public/private institutions and organizations that our company receives service/support/consultancy or cooperates with, in accordance with the law and honesty rules and the principles of being connected, limited and measured for the purpose for which they are processed and kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed, companies and our company's consultants or solution partners may be shared with other group companies, other authorized institutions and organizations, suppliers or subcontractors, the Turkish Commercial Code, persons or organizations permitted by the provisions of other relevant legislation, legally authorized public and/or private legal entities limited to the purpose requested within its legal authority, and persons or organizations permitted or obliged by other legislation provisions, and official authorities upon the requests of official authorities.
In addition, in accordance with Articles 5 and 8 of the KVKK and/or in the presence of exceptions in the relevant legislation, it may process and share personal data with third parties without obtaining the consent of the Data Owner. The main ones of these situations are stated below:
Explicitly stipulated in the law,
It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,
It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data subject and the Company,
It is mandatory for the fulfillment of legal obligations,
It has been made public by the data subject himself/herself,
Data processing is mandatory for the establishment, exercise or protection of a right,
Data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.
Method and Legal Grounds for Collecting Personal Data
Your personal data is obtained in all kinds of verbal, written or electronic media in order to provide the services we offer by the Company in accordance with the above-mentioned purposes within the legal framework determined and in this context, in order for our Company to fulfill its contractual and legal obligations in a complete and accurate manner. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in Articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.
Rights of the Personal Data Subject
As personal data owners, if you submit your requests regarding your rights to our Company by the methods set out below, our Company will finalize your request free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged.
In this context, personal data owners;
Learn whether personal data is being processed,
Request information if their personal data has been processed,
To learn the purpose of processing personal data and whether they are used for their intended purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.
You can send us your request to exercise these rights in writing or, if a separate method is determined by the Personal Data Protection Board, in accordance with this method, including the necessary information identifying your identity and your explanations regarding the right you request to exercise among the rights specified in Article 11 of the KVK Law.
Deletion, Destruction or Anonymization of Your Personal Data
Pursuant to Article 7 of the KVK Law, personal data shall be deleted, destroyed or anonymized by our Company ex officio or upon the request of the personal data owner, if the reasons requiring the processing of personal data disappear, although the personal data has been processed in accordance with the relevant legislation.
The procedures and principles regarding this matter will be fulfilled in accordance with the KVK Law and the Regulation on Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28.10.2017 and numbered 30224.
Personal data shall be deleted, destroyed or anonymized within 3 (three) months following the date on which our obligation to delete, destroy or anonymize personal data arises.
When you request the deletion or destruction of your personal data by applying to our company;
a) If all of the conditions for processing personal data have disappeared; your personal data subject to the request will be deleted, destroyed or anonymized. Your request will be finalized within thirty (30) days at the latest and you will be informed.
b) If all the conditions for processing personal data have disappeared and the personal data subject to the request have been transferred to third parties, this situation is notified to third parties; It is ensured that the necessary actions are taken within the scope of the Regulation.
c) If all the conditions for processing personal data have not disappeared, your request may be rejected by explaining the reason in accordance with the third paragraph of Article 13 of the KVK Law and the rejection response will be notified to you in writing or electronically within thirty days (30) at the latest.