Personal
Data Protection
Notice
Element Boya San. ve Tic. A.Ş. — Prepared pursuant to the Law on Protection of Personal Data No. 6698 (KVKK).
Pursuant to the Law on Protection of Personal Data No. 6698 ("KVKK"), your personal data, including all information that identifies or makes you identifiable and your special categories of personal data, may be processed by Element Boya Sanayi ve Tic. A.Ş. ("Company") as the data controller.
Processing of personal data refers to any operation performed on personal data, such as collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, classification, or blocking of use.
The protection of your personal data is of vital importance to us. We wish to inform you that we will take all necessary measures and continue to be fully transparent in this regard.
What Personal Data Do We Process?
| Data Category | Data Subject Group |
|---|---|
| Identity | Job Applicant, Employee, Shareholder/Partner, Supplier Employee, Supplier Representative, Product/Service Recipient, Visitor, Prospective Customer, Guardian / Legal Representative |
| Contact | Job Applicant, Employee, Shareholder/Partner, Supplier Employee, Supplier Representative, Product/Service Recipient, Prospective Customer, Guardian / Legal Representative |
| Location | Employee |
| Personnel | Employee |
| Legal Proceedings | Employee, Shareholder/Partner, Job Applicant, Supplier Employee, Supplier Representative, Product/Service Recipient, Guardian / Legal Representative, Visitor |
| Customer Transactions | Product/Service Recipient, Supplier Employee, Supplier Representative |
| Physical Security | Employee, Shareholder/Partner, Supplier Employee, Supplier Representative, Visitor, Job Applicant, Prospective Customer, Product/Service Recipient, Guardian / Legal Representative |
| Transaction Security | Employee |
| Risk Management | Employee, Visitor |
| Finance | Employee, Product/Service Recipient |
| Professional Experience | Job Applicant, Employee |
| Marketing | Prospective Customer |
| Visual & Audio Recordings | Employee |
| Dress Code | Employee |
| Health Data | Employee |
| Criminal Convictions & Security Measures | Employee |
| Biometric Data | Employee |
Purposes of Processing Personal Data
Your collected personal data may be processed for the following purposes: ensuring the legal and commercial security of the Company and persons in a business relationship with the Company; conducting customer satisfaction evaluations; managing organisations and events; managing sales and procurement processes; carrying out finance and accounting transactions; conducting internal audit processes; managing environmental protection and waste processes; conducting occupational health and safety activities; fulfilling notification obligations to relevant/authorised public authorities (Courts, Ministry of Environment and Urbanisation, Ministry of Finance, Ministry of Labour and Social Security, Ministry of Interior, etc.); ensuring the implementation of the Company's human resources policies; and conducting information and physical security processes.
Transfer of Your Personal Data
Your personal data is shared with persons explicitly authorised by law. In addition, your personal data may be shared with authorised persons or institutions upon a court order or at the request of authorised administrative authorities, to the extent required by law.
Your personal data may be shared with our suppliers for the purpose of managing supply chain processes and performing contracts, in relation to products or services to be procured from suppliers under the service agreement between us.
Your personal data may be shared with our business partners with whom we cooperate, for the purpose of conducting business activities and performing contracts under the service agreement between us.
Methods of Collecting Your Personal Data
Your personal data is collected by the Company through different channels and on different legal grounds for the purpose of conducting our commercial activities. Within the scope of conducting commercial processes; it is collected through various methods including written documents/forms such as customer introduction forms, supplier information forms, contact information forms, other commercial documents, payment information, negotiable instruments and job application forms, as well as your notifications made verbally, in writing or electronically, whether fully or partially automated or non-automated as part of any data recording system, and may also be obtained from our domestic/foreign subsidiaries, partner institutions, official authorities and other third parties.
Your Rights Under Article 11 of the KVKK
As personal data owners, if you submit your requests regarding your rights to our Company through the methods specified in this Notice below, our Company will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee set in the tariff determined by our Company will be charged.
In this context, you have the right to:
- a)Learn whether personal data is being processed,
- b)Request information if personal data has been processed,
- c)Learn the purpose of processing personal data and whether it is being used in accordance with its purpose,
- d)Know the third parties to whom personal data has been transferred, domestically or abroad,
- e)Request the correction of personal data if it has been processed incompletely or inaccurately, and request that this correction be notified to the third parties to whom the data has been transferred,
- f)Request the deletion or destruction of personal data if the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the KVKK and other relevant legal provisions, and request that this transaction be notified to third parties to whom the data has been transferred,
- g)Object to the occurrence of a result against the person themselves by exclusively automated analysis of the processed data, and
- h)Request compensation for damages in case personal data is processed unlawfully and causes damage.
Data Controller and Methods for Data Subject Information Requests
You may submit your request regarding the exercise of your rights specified above pursuant to the KVKK to our Company in writing or through other methods determined by the Personal Data Protection Board, via the channels specified below.
As the data subject, you must submit your rights requests to our Company in writing, along with the necessary identification documents. In this context, to ensure that your applications to our Company under Article 11 of the KVKK are managed efficiently, you must submit them in person or by post, along with the relevant documents/information that may be requested and the necessary identification documents.
Alternatively, you may submit your information request to elementboya@hs03.kep.tr with a secure electronic signature, or via sevda@elementboya.com as an online user.