Privacy Notice (KVKK)

Who is the data controller, and what are the identity details of the controller and its representative?

1. The data controller

As Ceyhan Organised Industrial Zone (the “Data Controller”), we attach the utmost importance to the confidentiality and security of your personal data, to its lawful processing, and to your constitutional rights concerning the safeguarding of your fundamental rights and freedoms. In accordance with Law No. 6698 on the Protection of Personal Data and in our capacity as the “Data Controller” as defined in that Law, we would like to inform you about the processing of the data we obtain — including, but not limited to, its collection, storage and transfer — and about the purpose of that processing.

Under Law No. 6698 (KVKK), all information and documents containing any of your personal data (identity, contact, personnel file, location, legal transaction, logistics, physical premises security, transaction security, risk management, finance, professional experience, visual and audio recordings, IBAN details, network records on devices connected to the institution's network, login details for the institution's website and other identity-related data obtainable in this way, health information, criminal convictions and security measures, data declared in the Facility Use Agreement, land registry records, address, signature, vehicle licence plate, e-mail address, security camera recordings) may be processed, recorded, stored, transferred to third parties, shared and anonymised by Ceyhan Organised Industrial Zone and by the other public bodies and institutions with which this legal entity is legally obliged to share information, acting as data controllers in accordance with the Constitution, international agreements, Law No. 6698 and the relevant laws and legislation to which that Law refers; the data is also stored and retained in order to keep the services running. Ceyhan Organised Industrial Zone and the other public bodies and institutions with which this legal entity is legally obliged to share information take all necessary administrative and technical measures to protect the personal data processed in this context in accordance with the applicable laws and legislation.

For what purposes do we process your personal data?

Your personal data is processed, where needed in the relevant processes and within the conditions and purposes set out in Articles 5 and 6 of the Law, on the basis of all information and documents, for: carrying out, maintaining, conducting and developing our activities in accordance with all relevant laws and regulations; protecting and auditing commercial data; fulfilling the requirements of contracts that have been or will be drawn up; making strategic plans on the basis of data declared under the system; planning and distributing the services the organisation is obliged to provide, using land registry records and data obtained both on members and, under the institution's own ex officio authority, on non-members; ensuring security on that basis; maintaining the legal and commercial security of the persons with whom a business relationship exists, with regard to e-mails held in electronic media and special categories of personal data collected according to the nature of the work; determining and implementing legal and financial affairs and similar commercial and business strategies; carrying out human resources and accounting policies; ensuring physical security and oversight; complying with domestic and international legislation; complying with the information-transfer, retention and reporting obligations requested by public bodies or other authorities; and providing you with better, more reliable and uninterrupted service.

To whom and for what purpose may your processed personal data be transferred?

Within the framework of the activities of Ceyhan Organised Industrial Zone and of the other public bodies and institutions with which this legal entity is legally obliged to share information, and within the conditions and purposes set out in Articles 8 and 9 of the Law, your personal data may be transferred to the following, in order to fulfil those purposes, to determine and implement strategy, and to ensure that human resources policies are carried out: natural persons or private-law legal entities, company officers, shareholders and employees; lawyers responsible for following up files, to whom all contact details declared by members may be provided if enforcement proceedings are initiated under a legal obligation; persons or third parties from whom services are obtained; legal, financial and tax advisers and other advisers; auditors, organisations or individuals; authorities such as the Social Security Institution (SGK); the Governorship of Adana, to which the institution is principally affiliated, and the general public, limited to cases where this is made mandatory by the Regulation on Central Administrations; and ministries, judicial authorities and all other public bodies and institutions that are legally authorised.

What is the method and legal basis of collecting personal data?

Your personal data is obtained through any oral, written or electronic medium, for the purposes stated above, so that the products and services we provide as an institution can be offered within the established legal framework and our institution can fully and accurately discharge its contractual and statutory responsibilities, with the aim of enabling our institution to work more effectively, through your sharing it directly, and in accordance with the conditions and purposes for processing personal data set out in Articles 5 and 6 of the KVK Law.

What are your other rights listed in Article 11?

As data subjects, you may submit your written request concerning your rights, with a wet signature, to Sarımazı Mahallesi COSB 1025 Cadde No:3 Ceyhan/ADANA, or, signed with a secure electronic signature, to bilgi@ceyhanosb.org. Your application will be answered within thirty days at the latest from the date of your written application to us. If the process requires a separate cost, we reserve the right to request the fees in the tariff determined by the Personal Data Protection Authority.

In this context, data subjects have the right to:

• learn whether their personal data is being processed,
• request information if their personal data has been processed,
• learn the purpose of the processing of their personal data and whether it is used in line with that purpose,
• know the third parties to whom their personal data is transferred, in Türkiye or abroad,
• request the correction of their personal data if it has been processed incompletely or inaccurately, and request that the action taken in this context be notified to the third parties to whom the data has been transferred,
• request the erasure or destruction of their personal data where the reasons requiring its processing no longer exist, even though it was processed in accordance with the KVK Law and other relevant provisions of law, and request that the action taken in this context be notified to the third parties to whom the data has been transferred,
• object to the emergence of a result against themselves through the analysis of the processed data exclusively by automated systems,
• claim compensation for the damage they suffer as a result of the unlawful processing of their personal data.