GENERAL DATA PRIVACY NOTICE
UNDER THE SCOPE OF KVKK
1. PURPOSE
EMPA ELEKTRONİK SANAYİ VE TİCARET ANONİM ŞİRKETİ (“COMPANY”) located at Istanbul World Trade Center, Business Blocks A, 4th Floor, No:200, Yeşilköy Mah., Bakırköy, Istanbul, prepared this Data Privacy Notice (“Notice”) in accordance with Law No. 6698 on the Protection of Personal Data (KVKK), taking into account the importance we attribute to fundamental human rights and the high value of personal data.
Within the scope of KVKK, as the Data Controller, the COMPANY informs its employees, employee candidates, supplier employees, visitors, and third parties whose personal data will be processed, and provides the clarifications required under Article 10 of KVKK as follows:
2. DEFINITIONS
3. PURPOSES OF PERSONAL DATA PROCESSING, PERSONAL DATA PROCESSED, COLLECTION METHODS, AND LEGAL BASIS
i. Processing Purposes
Your personal data will be processed within the limits set by KVKK and used to achieve the purposes stated in the COMPANY’s Articles of Association. Processing purposes include:
a. Compliance with obligations regarding activities and audits as required by the Turkish Commercial Code (TTK) and Capital Markets Law, and informing shareholders.
b. Carrying out necessary works to enable you to benefit from the COMPANY’s products and services, determining and implementing commercial and business strategies, marketing activities, business development, and planning.
c. Execution of administrative operations related to communication conducted by the COMPANY.
ç. Communicating with you via the contact channels you provide to promote the COMPANY and its activities.
d. Recruitment and fulfillment of rights and obligations under labor laws, occupational health and safety, and social security regulations.
e. Personnel-related payroll, per diem payments, revolving fund payments, internal communications, and implementation of HR policies.
f. Management of relationships with business partners, customers, suppliers (including authorized persons or employees) and fulfillment of contractual and financial reconciliation requirements.
g. Provision of information and documents to competent public authorities and judicial institutions where legally required.
ğ. Management of company events (seminars, conferences, meetings, trainings, symposiums, etc.), maintaining public awareness, updating websites and social media accounts, and managing promotional and advertising activities.
h. Archiving and storage activities in accordance with legal procedures, and preparation of annual unit activity reports.
ı. Creation and tracking of visitor records.
i. Ensuring building, personnel, and visitor security.
j. Using anonymized data for research and statistical purposes.
k. Receiving and responding to relevant data subject requests under KVKK.
ii. Personal Data Processed
iii. Personal Data Collection Methods
Data is collected via:
It is the responsibility of the data subject to ensure that personal data provided is accurate, complete, and up-to-date.
iv. Legal Basis for Data Processing
Personal data is processed for purposes allowed under KVKK, including:
All data processing activities are conducted only within these legal bases.
4. PERSONAL DATA TRANSFER
Personal data may be shared with:
|
Recipient |
Examples of Transfer |
|
Legally Authorized Public/Private Institutions |
Ministry of Treasury and Finance, Capital Markets Board, Independent Audit Firms, Central Registry Agency, Trade Registry Offices, Banks, Judicial and Enforcement Authorities, Notaries, etc. |
|
Supplier/Partner/Consultant |
Companies providing services, partners, consultants, lawyers, auditors, transport companies, and other service providers, limited to the purposes of the COMPANY’s activities. |
Data not relevant to these purposes will not be transferred. Exceptions occur only if legally required.
5. RIGHTS OF DATA SUBJECTS UNDER KVKK
You have the right to:
i. Learn whether your personal data is processed.
ii. Request information if your personal data has been processed.
iii. Learn the purpose of processing and whether it is used accordingly.
iv. Know third parties your data is transferred to, domestically or abroad.
v. Request correction if data is incomplete or inaccurate.
vi. Request deletion or destruction under KVKK conditions.
vii. Request notification of corrective/deletion actions to third parties.
viii. Object to outcomes arising solely from automated processing.
ix. Claim compensation for damages caused by unlawful processing.
How to exercise your rights:
Download the application form from: https://www.empa.com/kisisel-veri-basvuru-formu, https://www.empastore.com/kisisel-veri-basvuru-formu, fill it, and submit via kvkk@empa.com or by post to Istanbul World Trade Center, Business Blocks A, 4th Floor, No:200, Yeşilköy Mah., Bakırköy, Istanbul.
Requests are evaluated within 30 days and are generally free, subject to conditions in the relevant regulation regarding excessive pages or electronic delivery media.
6. DATA CONTROLLER AND CONTACT PERSON
Data Controller:
Contact Person:
7. CHANGES
EN − TL
Türkçe
