Within the scope of the Law No. 6698 on the Protection of Personal Data
INFORMATION NOTICE UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA
Ekomaxi, in connection with its activities, processes your personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). Data subjects may find detailed information in this Information Notice regarding the processing of their personal data, transfers to third parties, the legal grounds for collecting personal data, and their rights under the KVKK.
A. Purposes of Processing Personal Data
Your personal data is processed by Ekomaxi, as the data controller, or by natural/legal persons appointed by Ekomaxi, for the following purposes:
Fulfilling our obligations related to our field of activity and carrying out our activities in compliance with applicable legislation,
Improving, developing and diversifying our services and activities, producing alternatives and offering them to persons with whom we have commercial relationships,
Establishing business relationships and expanding our customer portfolio,
Fully performing the contracts to which our company is a party and monitoring whether the counterparty fully performs its contractual obligations,
Preparing various reports, studies and presentations, planning emergency management processes, and monitoring finance and accounting activities,
Determining and implementing our business strategies, and conducting marketing, analysis and customer satisfaction activities,
Ensuring the legal security of natural and legal persons who are in a relationship with our company,
Receiving and evaluating suggestions aimed at improving processes,
Conducting necessary quality and standards audits and fulfilling other obligations prescribed by laws and regulations,
Managing complaint, request and suggestion processes and informing applicants about the results,
Ensuring the security of buildings and working areas belonging to our company through camera recordings and other security measures, and controlling entrances and exits,
Where communication is established with our call centers or through company telephone lines, recording the communication and determining its content through audio and call recordings,
Promoting and announcing events in which we participate or which we organize, and informing third parties about such events,
Evaluating the recruitment processes of job candidates and maintaining our Human Resources policies,
Taking the necessary occupational health and safety measures within the scope of our obligations arising from legislation, planning and conducting training processes, and enabling early intervention in health-related matters where necessary,
Carrying out sponsorship, social responsibility and advertising projects,
Providing internet access to our guests,
Monitoring and concluding legal proceedings,
Planning and carrying out logistics activities,
Creating statistical data when our website is visited, recording visitor information and providing feedback upon request,
Informing data subjects about changes in legislation or policies adopted by us, and making notifications concerning the data subject.
B. Transfer of Personal Data
Your processed personal data may be transferred, within the scope of applicable laws and other legislation, for the purposes stated above and in accordance with the conditions stipulated by the KVKK, to:
Competent and relevant public institutions and organizations, upon their requests and within the framework of legal regulations, to the extent related and limited to their legally authorized requests,
Banks, suppliers and business partners for the exercise of contractual rights and fulfillment of obligations and for carrying out transactions specific to the sector in which we operate,
Independent audit companies, expert consultants, regulatory and supervisory authorities, and professional organizations for the fulfillment of our contractual and legal obligations,
Our service providers, audit companies and information security companies for the establishment of necessary quality, confidentiality and standards,
Our business partners and suppliers for the preparation and implementation of strategies concerning our activities,
Natural and legal persons and public institutions and organizations with whom we cooperate for carrying out the activities of our company,
Our business partners and suppliers for carrying out advertising, promotional and marketing processes,
Third parties, agencies, event organization companies, consulates, visa application centers and legally authorized persons for the management of domestic and international travel and accommodation processes,
Solution partner companies, suppliers and companies operating in the field of repair, maintenance and servicing,
Third parties and institutions requesting references, limited to the subject matter of the request and based on a valid legal ground,
Software companies established in Türkiye and abroad, and suppliers operating in this field, for the operation of the operating systems, computer programs, software and cloud services used within our company and for their maintenance and repair,
Our suppliers located in Türkiye and/or abroad for increasing the recognition of our company and the value of our brand, developing our internet infrastructure and maintaining its up-to-date status,
Institutions and organizations located in Türkiye and/or abroad that provide services in the fields of security, technology and cloud services.
Such transfers may be carried out accordingly.
Our company carries out the aforementioned transfer operations in compliance with the provisions of the KVKK. Due to the information technologies used by our company and/or the companies listed above, personal data may be transferred to servers located abroad or to cloud environments where cloud computing services are used.
C. Methods and Legal Grounds for Collecting Personal Data
Personal data held by Ekomaxi is processed in accordance with the data processing conditions stipulated under the KVKK, primarily through the following methods, without limitation thereto: contracts, references, business and solution partners, official correspondence received from public institutions and organizations, face-to-face meetings, cookies and log records, social media and mobile applications, call center applications, surveys, applications and interviews submitted or conducted in person, by mail or electronically, as well as CCTV devices recording audio and video within and around our working areas, and through all kinds of verbal, written or electronic means.
This information is obtained for the purposes of providing our processes in accordance with applicable laws, enabling our company to carry out its services, maintaining its commercial activities, and fulfilling its legal obligations completely and accurately.
D. Retention and Destruction of Personal Data
Our company retains personal data in accordance with the purpose of processing and in a manner proportionate to such purpose. Where the purpose and/or legal basis for processing personal data ceases to exist, personal data is retained until the end of the period required by the relevant legislation.
When the purpose and legal basis for processing personal data cease to exist and the applicable statutory limitation periods necessary to fulfill our legal obligations have expired, personal data will be destroyed in accordance with applicable legislation.
E. Rights of the Data Subject
Pursuant to Article 11 of the KVKK, every data subject has the following rights:
To learn whether their personal data has been processed,
To request information regarding their personal data if it has been processed,
To learn the purpose of processing their personal data and whether such data is used in accordance with that purpose,
To know the third parties to whom their personal data has been transferred, either within Türkiye or abroad,
To request correction of their personal data if it has been processed incompletely or inaccurately, and to request that the third parties to whom the personal data has been transferred be notified of such correction,
To request the deletion or destruction of their personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the KVKK and other applicable laws, and to request that the third parties to whom the personal data has been transferred be notified of such deletion or destruction,
To object to the occurrence of a result against themselves arising from the analysis of processed data exclusively through automated systems,
To demand compensation for damages if they have suffered damage due to the unlawful processing of their personal data.
The data subject may submit requests concerning these rights in writing to the address of our company stated below, either by sending a formal notice through a notary public or by applying personally upon presentation of an identity document.
Requests submitted by the data subject shall be evaluated and resolved free of charge as soon as possible and, in any event, within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee stipulated in the tariff determined by the Personal Data Protection Board shall apply.