KVKK Privacy Notice
Visitor (Internet) Privacy Notice
Kartonsan Karton Sanayi ve Ticaret A.Ş. (Kartonsan), as the data controller, processes your personal data in accordance with the Personal Data Protection Law No. 6698 (KVKK) and other applicable legislation.
Pursuant to Article 10 of the KVKK, which regulates the Obligation to Inform, data controllers are obliged to inform the data subjects whose personal data they process on certain matters.
This privacy notice has been prepared in accordance with the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform published by the Personal Data Protection Authority, in order to fulfill this legal obligation.
Definitions
According to the Personal Data Protection Law No. 6698:
Personal data means any information relating to an identified or identifiable natural person;
Processing of personal data means any operation performed on personal data, such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, takeover, making available, classification or prevention of use, either wholly or partly by automated means or by non-automated means provided that it forms part of a data filing system;
Data subject means the natural person whose personal data is processed;
Data controller means the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system
Obligation to inform means the obligation of the data controller, or the person authorized by it, to inform the data subjects at the time personal data is obtained about the identity of the data controller, the purposes for which the personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal basis for collecting personal data, and the other rights listed in Article 11 of the Law;
respectively.
Data Subject
You, whose personal data is processed by Kartonsan, are defined as a Visitor (Internet) by reason of visiting our website and are also recognized as a Data Subject under the Law.
Data Controller
Kartonsan, which determines the purposes and means of processing personal data relating to you and is responsible for the establishment and management of the data filing system, is the data controller.
Collection of Your Personal Data
Your personal data and the methods by which they are collected are shown below. The same personal data may also be collected by more than one method.
Directly from you by automated means
in electronic form
Purposes of Processing Your Personal Data and Legal Bases
The legal bases and purposes for processing your personal data are listed in the table below.
On the basis that it is expressly provided for by law, in accordance with Article 5/2(a) of the KVKK
For the purpose of conducting activities in compliance with legislation
Pursuant to the Internet Law set out in Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications (Article 7/2);
For the purpose of carrying out retention and archiving activities
Pursuant to the Internet Law set out in Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications (Article 7/2);
Transaction Security (Connection Time, IP Address, IP Protocol Used, Page Visited, Connection End Time, Amount of Data Transferred, etc.)
On the basis that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, under Article 5/2(f) of the KVKK
For the purpose of carrying out activities aimed at customer satisfaction
Transaction Security (Session cookie, Persistent cookie)
Transfer of Your Personal Data
Where requested within the scope of Article 28/1 of the KVKK, your personal data may be transferred to the relevant authorities without any obligation to inform and without seeking your explicit consent.
Apart from this, in unforeseen circumstances, your personal data may also be transferred, where requested in cases expressly specified by law, to the public institutions specified by law (administrative authorities such as ministries and Presidential boards), within the purposes and limitations prescribed by law.
Your personal data is not transferred to any institution, person or organization other than as required by our legal obligations that do not entail an obligation to inform and do not require your explicit consent
Your Rights Regarding Your Personal Data
Data subjects must first apply to the data controller in order to exercise their rights regarding their personal data. Pursuant to Article 14 of the Law, a complaint cannot be lodged directly with the Personal Data Protection Board.
Under the Law, you have the right, with respect to your personal data,
to learn whether your personal data is being processed,
to request information regarding the processing if your personal data has been processed,
to learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
to know the third parties to whom your personal data is transferred, whether domestically or abroad,
to request the rectification of your personal data if it has been processed incompletely or inaccurately,
to request the erasure or destruction of your personal data if the reasons requiring its processing no longer exist,
to request that the operations carried out pursuant to paragraphs (d) and (e) be notified to the third parties to whom your personal data has been transferred,
to object to the occurrence of a result to your detriment through the analysis of your processed data exclusively by automated systems,
to claim compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data
You may exercise your rights by applying to the data controller, that is, to us.
Method of Application to the Data Controller
You may submit your application
in writing to the address Askerocağı Caddesi No: 6 Süzer Plaza, Elmadağ Cd. No: 82, Floor 2, 34367 Şişli / İstanbul;
to the registered electronic mail (KEP) address kartonsan@hs01.kep.tr using your own registered electronic mail address;
or by sending an e-mail to kvkk@kartonsan.com.tr using the e-mail address registered in our system.
More detailed information on the procedures and principles to be followed when submitting an application is available in the Personal Data Protection Authority's Communiqué on the Procedures and Principles of Application to the Data Controller.
