Customer Clarification on Personal Data
CUSTOMER/VISITOR CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA
Data Officer: Erginoğlu ve Çalışlar Mimarlık İnşaat Ticaret ve Turizm A.Ş.
Address: Şair Necati Cad. No:16 Ortaköy, Beşiktaş, İstanbul
Erginoğlu ve Çalışlar Mimarlık İnşaat Ticaret ve Turizm A.Ş. with registered office address Şair Necati Cad. No:16 Ortaköy, Beşiktaş, İstanbul and the taxpayer to the Beşiktaş Tax Office with number 3560364646, Data Supervisor with Mersis number 0356036464600001 attaches great importance to ensuring the security of your personal information you have provided to them.
As Erginoğlu ve Çalışlar Mimarlık İnşaat Ticaret ve Turizm A.Ş. (“The Company”), we have prepared this disclosure text to inform you, our valued customers/visitors, regarding the processing, storage and transfer of your personal data within the framework of the Law No. 6698 on Protection of Personal Data (“KVKK”), EU General Data Protection Regulation (GDPR) and related legislation and legal regulations.What personal data is being processed and what are the purposes for which your personal data is being processed?
1- What personal data is being processed and what are the purposes for which your personal data is being processed?
Within the scope of our activities, we collect your data below from our customers and process them for the purposes specified.
2- Data categorization
| Credentials | Name, surname, TR ID number, date of birth, birthplace, marital status, Passport information, Nationality information, license plate information, Province, county, Volume, Serial No |
| Contact Information | Phone number, e-mail address, address, Kep address, etc. |
| Financial Information | Such as tax identification number, credit card information, Bank IBAN number, bank account number, billing information |
| Physical Space Safety Information | As recorded images with camera recordings |
| Gender Data | Gender |
| Family Members and Relatives Information | Family members and relatives information |
| Audio and visual recordings | Such as photo(s) taken at events and posted on the website |
| Legal Process Information | Such as information found in judicial correspondence with authorized public bodies |
| Customer transaction information | Such as Order Information, request information, Complaint Information |
| Marketing Data | Such as the data obtained by survey work |
| Health Data | Health related data such as Food alergy, Height, Weight, Body Mass Index within the scope of pandemic measures, whether they have a chronic illness, Covid-19 or not and/or whether they have contact or not |
| Travel Data | Data on whether they had travelled abroad in the last 14 days or not |
3- The Purposes for Which Personal Data is Processed
| Data Category | Purpose of Data Processing | Legal Reason for Data Processing |
Physical Location Security Information |
Ensuring Physical Space Security |
Clearly stipulated in the law on the protection of personal data article 5 clause f paragraph 2a |
Credentials, Contact Information |
Execution of Emergency Management Processes Execution of Finance and Accounting Conduct of communication activities Conduct / Audit of Business Activities Execution of Services Sales Processes Execution of Services Production and Operation Processes Execution of Customer Relationship Management Processes Organization and Event Management Monitoring of Insurance Transactions Execution of contract processes Follow-Up of Claims/Complaints |
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Credentials, Contact Information, Financial Information | Execution of Finance and Accounting Carrying Out Activities in Accordance with The Legislation Execution of Services Sales Processes Execution of contract processes |
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Customer Transaction Information | Conduct / Audit of Business Activities Follow-Up of Claims/Complaints Execution of Services Sales Processes |
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Gender | Conduct / Audit of Business Activities | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Family Members and Relatives Information | Conduct of communication activities | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Audio and visual recordings | Execution of Services Production and Operation Processes | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Identity, Communication | Execution of Information Security Processes Carrying Out Activities in Accordance with The Legislation Providing information to Authorized Persons, Institutions and Organizations |
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç; Obligation to Fulfill Legal Liability |
| Physical Location Security Information | Ensuring Physical Space Security | The Law on the Protection of Personal Data article 5 clause f paragraph 2ç; Obligation to Fulfill Legal Liability |
| Legal Process |
Follow-up and execution of Legal Affairs Execution of contract processes Providing information to Authorized Persons, Institutions and Organizations |
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç; Obligation to Fulfill Legal Liability |
| Family Members and Relatives Information, gender | Providing information to Authorized Persons, Institutions and Organizations | The Law on the Protection of Personal Data article 5 clause f paragraph 2ç; Obligation to Fulfill Legal Liability |
| Gender | Execution of Services Production and Operation Processes | The law on the protection of personal data article 5 clause f paragraph 2f; Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned. |
| Physical Location Security Information | Ensuring Physical Space Security | The Law on the Protection of Personal Data article 5 clause f paragraph 2f; the necessity of processing data for the legitimate interests of the data principal |
| Audio and visual recordings | Providing Security of Movable Goods and Resources Ensuring the Security of Chief Data Officer Operations |
The Law on the Protection of Personal Data article 5 clause f paragraph 2f; the necessity of processing data for the legitimate interests of the data principal |
| Physical Location Security Information | Ensuring Physical Space Security | The Law on the Protection of Personal Data article 5 clause f paragraph 2f; the necessity of processing data for the legitimate interests of the data principal |
| Travel Data | Providing information to Authorized Persons, Institutions and Organizations | The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
| Healthcare | Providing information to Authorized Persons, Institutions and Organizations To provide personalized service |
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
| Identity Data, Communication Data | Execution of Activities for Customer Satisfaction Execution of Advertising / Campaign / Promotion Processes |
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
| Identity Data, Communication Data, Marketing | Execution of Company/Product / Service Commitment Processes Conducting Marketing Analysis Studies Taking and Evaluating Suggestions for Improvement of Business Processes Execution of Marketing Processes of Products/Services |
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
4- To whom and for what purpose personal data may be transferred
| Recipient Group | Transfer Purpose | Legal Reason for The Transfer |
| Authorized public institutions and organizations | Security Unit under the identity Reporting Act Courts, Public Prosecutors and police departments in case of written request Ministries |
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç; Obligation to Fulfill Legal Liability |
| Business Partner (Banks, financial advisors) | Audit of financial records | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Business partner (financial advisor) | Approval of financial and financial statements by accounting company (SMMM) | The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
| Business Partner (Broker Insurance Company) | Monitoring of Insurance Transactions | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Supplier (e-mail service supplier) | Delivery of Correspondence information such as purchase of services | The Law on the Protection of Personal Data article 5 clause f paragraph 1f ; Explicit Consent |
| Supplier (Information Systems supplier company) | To provide Information Technology Support Services |
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Shareholders | Conduct / audit of business activities | The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
| Supplier (Measurement and Evaluation Specialist) | Customer satisfaction, market research, etc. studies | The Law on the Protection of Personal Data article 5 clause 1 Explicit Consent |
| Authorized public institutions and organizations | Providing information to authorized public institutions and organizations, such as the Ministry of Health, per request due to the pandemic | The Law on the Protection of Personal Data article 5 clause 1 Explicit Consent |
5- Methods of Collecting Your Personal Data
Your personal data as set out above ; printed/electronic forms, contracts/agreements, E-Mail, reports, contacts, events, Wi-Fi ,security cameras, car license plate, partners, and face to face interviews depending on the method by means of physical or electronic form will be collected and processed within the purposes specified above, and is transmitted.
6- What are the rights of contacts to their personal data and how they can exercise those rights
By applying to us as the person concerned in accordance with the Law on the Protection of Personal Data article 11 you have the rights;
- To learn whether personal data is processed or not,
- To request information about personal data if it has been processed,
- To learn the purpose of processing personal data and whether they are used conforming the purpose,
- To know the third parties which personal data is transferred domestically or abroad,
- If your personal data is incomplete or improperly processed, request that they be corrected and that the transaction in this context be notified to third parties that your personal data has been transferred,
In the event that the reasons for processing your personal data for consideration within the scope of the purpose, duration and constitutional principles are eliminated, you must request the deletion or destruction of your personal data and request that the transaction carried out in this context be notified to third parties to whom the personal data was transferred, even though it has been processed in accordance with, - To object the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- To claim damages in the event of a corruption due to the processing of personal data in a way that violates the law.
If you wish, your applications and requests regarding your personal data can be:
- By using the Application Form,
- By sending a petition with an original signature and a photocopy of identity to the address of Şair Necati Cad. No:16 Ortaköy, Beşiktaş, İstanbul,
- By applying to our company’s commercial center address, Şair Necati Cad. No:16 Ortaköy, Beşiktaş, İstanbul, with a valid ID card.,
- By sending an email/application form to our e-mail address kvkk@ecarch.com
In accordance with the communiqué on the procedures and principles of application to the data officer, the person concerned, name, last name in the application, if the application is written signature, T.R. ID number (in case of foreign applicant, passport number), notification mainly residential or business address on the basis of the notification e-mail address, telephone number, and fax number on the topic of demand information should be available.
The person concerned must clearly and explicitly state their claims in the application, which includes explanations of their rights to exercise the above-mentioned rights. Information and documents regarding the application must be attached to the application.
Although the subject of the request must be related to applicant, if the applicant is acting on behalf of someone else, the applicant must be specially authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information and documents confirming the identity must be attached to the application.
Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.
7- How Long Will Your Requests Regarding Processing Your Personal Data Be Answered
Your requests regarding your personal data will be evaluated and answered within 30 days at the latest starting from the date they reach us. If your request is evaluated negatively, the reasons for the rejection are sent to the address you specified in the application via e-mail or mail.