Clarification Text Regarding Processing Faralya Gayrimenkul Customer Data
This Clarification Text has been written by Faralya Gayrimenkul in order to enlighten the data owners regarding the procedures and principles regarding the processing of personal data belonging to its customers, in accordance with the Law on Protection of Personal Data No.6698 ("Law").
Detailed information regarding the matters within the scope of this Clarification Text can be accessed from Faralya Gayrimenkul Personal Data Protection and Processing Policy at this address.
1. Purpose of Processing Personal Data
Personal data related to customers, within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, the products and services offered by the Company are customized according to the likes, usage habits and needs of the relevant persons and planning the activities necessary for the recommendation and promotion of the relevant persons and Carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company and carrying out the relevant business processes, Carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and carrying out the related business processes, / or planning and execution of business strategies and for the purpose of ensuring the legal, technical and commercial-business security of the Company and the relevant persons in business relations with the Company.
2. Parties to Which Personal Data Can Be Transferred and Transfer Purpose
Personal data related to customers, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, the products and services offered by the Company are customized according to the likes, usage habits and needs of the relevant persons and planning the activities necessary for the recommendation and promotion of the relevant persons and Carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company and carrying out the relevant business processes, Carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and carrying out the related business processes, Real persons or private law legal entities, Business Partners, Group Company for the purposes of planning and execution of business strategies and ensuring the legal, technical and commercial-business security of the Company and the relevant persons in business relations with the Company. Authorized Public Institutions and Organizations can be shared.
3. Method and Legal Reason for Collecting Personal Data
Personal data is collected from customers in electronic or physical environment. Personal data collected for the legal reasons stated above can be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No.6698, for the purposes specified in Articles 1 and 2 of this Clarification Text.
4. Rights of Data Owners and Exercise of These Rights
Data owners in accordance with Article 11 of the Law,
• Learning whether personal data is being processed,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to third parties to whom personal data have been transferred,
• To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and to request notification of the transaction made within this scope to third parties to whom the personal data has been transferred,
• Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• Has the right to demand the compensation of the damage in case of damage due to the unlawful processing of personal data.
Faralya Gayrimenkul PERSONAL DATA PROTECTION AND PROCESSING POLICY
ABOUT THE POLICY
Law No. 6698 on the Protection of Personal Data (the "Law") entered into force on 7 April 2016 and includes regulations on the processing of all kinds of information concerning natural persons whose identity is known or can be identified.
This Faralya Gayrimenkul Personal Data Protection and Processing Policy includes Faralya Gayrimenkul declarations and explanations regarding the processing of personal data of real persons in the categories listed below within the scope of the Law. In this context, the application area of the Policy is the processing of personal data belonging to the following data owners:
- Parent / Guardian / Representative
-Product or Service Receiver
-Intern
Potential Product or Service
Shareholder / Partner
-Working
Employee Candidate
-Supplier Officer
-Supplier Employee
-Visitor
This Policy may be updated from time to time in order to adapt to changing conditions and legislation.
1. PRINCIPLES ON THE PROCESSING OF PERSONAL DATA
Faralya Gayrimenkul, as the data controller in accordance with Article 4 of the Law, acts in accordance with the following principles in the processing of personal data:
• Compliance with the law and honesty rules:
Personal data are processed in accordance with the law and good faith. In this direction, Faralya Gayrimenkul, as the data controller, acts in accordance with the legislation in force in all kinds of personal data processing processes and complies with the rules of honesty.
• Accuracy and timeliness:
Data controllers should set up the necessary processes to ensure that the personal data they process are accurate and up-to-date. In this direction, Faralya Gayrimenkul provides the data owners with the opportunity to update their data and takes the necessary measures to ensure the correct transfer of the data to the databases.
Processing for specific, explicit and legitimate purposes:
Data controllers are obliged to inform data owners about the purposes of processing personal data in line with the disclosure obligations under the Law. In this direction, Faralya Gayrimenkul, as the data controller, restricts data processing activities to specific and legitimate purposes and informs data owners clearly within the scope of clarification texts regarding these purposes.
• Being connected, limited and measured for the purpose of processing:
Personal data are processed by Faralya Gayrimenkul to the extent necessary for the purpose notified to the data owner when they are provided, in connection and limited to this purpose.
• Being kept for the period stipulated in the relevant legislation or required for the relevant purpose:
If a certain period of time is determined within the scope of the legislation in force, the data are stored for this period. If such a period is not specified in the legislation, reasonable retention periods are determined by considering the purpose of data use and company procedures, and the data is kept limited to this period. Following the expiry of the aforementioned periods, the data are deleted, destroyed or anonymized in line with company procedures.
2. PURPOSE OF PROCESSING PERSONAL DATA BY Faralya Gayrimenkul
Articles 5 and 6 of the Law lay down the conditions for the processing of personal data and special quality data. Personal data of special nature are limited in the Law, and the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data. While Article 5 of the Law determines the processing conditions for non-special personal data, the processing conditions for special data are regulated in Article 6.
Personal data that are not of special nature according to the aforementioned articles may be processed in the following cases:
• The data subject has explicit consent.
• Data processing is clearly stipulated in laws.
• It is compulsory to process the relevant data for the protection of the life or body integrity of the person who is unable to disclose his consent due to the actual impossibility or whose consent is not legally valid.
• It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
• Data processing is mandatory for the data controller to fulfill its legal obligation.
• The personal data are made public by the person concerned.
• When data processing is mandatory for the establishment, use or protection of a right.
• If data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.
Special quality personal data can be processed subject to the conditions stipulated below:
• The data subject has explicit consent.
• Special quality personal data other than data related to health and sexual life (race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and dress, association, foundation or trade union membership, criminal conviction and security measures. data and biometric and genetic data).
• In terms of health and sexual life data, the protection of public health, preventive medicine, medical diagnosis, treatment and care services, health services and their financing are processed by persons or authorized institutions and organizations under the obligation of secrecy for the purpose of planning and management.
In this context, the personal data of real persons are processed by Faralya Gayrimenkul for the following purposes:
• Informing Authorized Persons, Institutions and Organizations
• Ensuring the Security of Data Supervisor Operations
• Execution of Custody and Archive Activities
• Execution of Risk Management Processes
• Conducting Marketing Analysis Studies
• Execution of Customer Relationship Management Processes
• Conducting Occupational Health / Safety Activities
• Execution / Supervision of Business Activities
• Planning of Human Resources Processes
• Conducting Communication Activities
• Following and Execution of Legal Affairs
• Execution of Recruitment Processes
• Execution of Loyalty Processes to Company / Products / Services
• Execution of Finance and Accounting Affairs
• Conducting Activities in Compliance with the Legislation
• Execution of Access Authorities
• Conducting Training Activities
• Conducting Audit / Ethical Activities
• Execution of Benefits and Benefits Processes for Employees
• Fulfilling Obligations Arising From Employment Contract And Legislation For Employees
• Execution of Employee Satisfaction and Loyalty Processes
• Execution of Employee Candidates' Application Processes
• Conducting Employee Candidate / Intern / Student Selection and Placement Processes
• Execution of Information Security Processes
• Execution of Emergency Management Processes
• Execution of Customer Relationship Management Processes
• Execution of Goods / Service Sales Processes
• Execution of Goods / Service Purchase Processes
• Conducting Audit / Investigation / Intelligence Activities
• Following and Execution of Legal Affairs
• Execution of Recruitment Processes
• Execution of Loyalty Processes to Company / Products / Services
• Execution of Finance and Accounting Affairs
• Conducting Activities in Compliance with the Legislation
• Execution of Access Authorities
• Conducting Training Activities
• Conducting Audit / Ethical Activities
• Conducting Marketing Analysis Studies
Organization and Event Management
• Conducting Activities for Customer Satisfaction
• Execution of Customer Relationship Management Processes
• Execution of Goods / Service Production and Operation Processes
• Execution of Goods / Service Sales Processes
• Execution of Goods / Service After Sales Support Services
• Execution of Goods / Service Purchase Processes
• Carrying Out Management Activities
• Ensuring Physical Space Security
• Execution of Risk Management Processes
• Carrying Out Management Activities
• Execution of Benefits and Benefits Processes for Employees
• Fulfilling Obligations Arising From Employment Contract And Legislation For Employees
• Conducting Employee Candidate / Intern / Student Selection and Placement Processes
TRANSFER OF PERSONAL DATA BY Faralya Gayrimenkul
General Conditions for Transfer
Article 8 of the Law makes a distinction regarding the transfer of personal data according to whether the data is personal data of special nature.
According to the aforementioned article, non-special personal data may be transferred to third parties in the presence of one of the processing conditions specified in Section 2 above. Accordingly, personal data;
• The data subject has explicit consent,
• Data processing is clearly stipulated in laws,
• It is compulsory to process the relevant data for the protection of the life or body integrity of the person who is unable to disclose his consent due to the actual impossibility or whose consent is not legally valid, or another person,
Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data belonging to the parties to the contract,
• Data processing is mandatory for the data controller to fulfill its legal obligation,
• The personal data are made public by the person concerned,
• Data processing is mandatory for the establishment, use or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary for the legitimate interests of the data controller,
may be shared by Faralya Gayrimenkul with people other than their legal personality.
Article 8 also made reference to the processing conditions specified in Section 2 in terms of special quality personal data, but also stipulated that adequate measures should be taken for the transfer. Accordingly, special quality personal data by Faralya Gayrimenkul,
• Special quality personal data other than health and sexual life data (race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and dress, association, foundation or trade union membership, criminal conviction and security measures. data and biometric and genetic data).
• In terms of health and sexual life data, the protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing by persons or authorized institutions and organizations under the obligation of secrecy.
Subject to its purpose, in any case, it is shared with third parties after adequate precautions are taken.
Transfer Abroad
Faralya Gayrimenkul does not transfer abroad.
Transferred Parties by Faralya Gayrimenkul
- Real persons or private law legal persons
-Work partners
-Community Companies
-Authorized Public Institutions and Organizations
4. PERSONAL DATA PROCESSED BY Faralya Gayrimenkul YAPI
You can access the categorization of personal data processed by Faralya Gayrimenkul on the verbis.kvkk.gov.tr screen with the registry query option. You can also access data categorization at.
5. PROCESSING OF PERSONAL DATA BY Faralya Gayrimenkul
Faralya Gayrimenkul, as stipulated in the Law, informs the personal data owners as the data controller for the purpose of processing the personal data, to whom and for what purposes the processed personal data can be transferred, the method of personal data collection and the legal reason, and the rights of the data owner during the acquisition of personal data.
If any process requires explicit consent pursuant to the Law, the explicit consent of the data owners is obtained after the aforementioned notification by Faralya Gayrimenkul.
6. DETERMINATION OF THE STORAGE PERIOD OF PERSONAL DATA BY Faralya Gayrimenkul OFFICE
Faralya Gayrimenkul determines the retention periods of personal data by considering the legislation in force and the purposes of processing the data subject to the process. In any case, Faralya Gayrimenkul determines the retention periods in the light of its legal obligations and the relevant statute of limitations.
In the event that the purpose of data processing disappears, the data are deleted, destroyed or anonymized unless there is another legal reason or basis that allows the data to be kept.
7.RIGHTS OF DATA OWNERS AND THE USE OF THESE RIGHTS
Rights of Data Owners
According to Article 11 of the Law, personal data owners have the following rights against the data controller:
• Learning whether personal data related to him / her is being processed.
• To request information about personal data if it has been processed.
• Learning the purpose of processing personal data and whether they are used appropriately for their purpose.
• To know the third parties in the country or abroad to whom personal data are transferred.
• To request correction of personal data in case of incomplete or incorrect processing.
• Request the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation.
• Request notification of the transactions made as a result of rectification, deletion and destruction requests to third parties to whom personal data have been transferred.
• To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems.
• To request the compensation of the damage in case of damage due to the processing of personal data illegally.
Paragraph 2 of Article 28 of the Law lists the cases where data owners do not have the right to request, and within this scope;
• Processing of personal data is necessary for the prevention of crime or for a criminal investigation,
• Processing of personal data made public by the person concerned,
• The processing of personal data is necessary for the execution of supervision or regulation duties and for disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations having the status of public institutions, based on the authority granted by the law,
• Where the processing of personal data is necessary for the protection of the economic and financial interests of the State with regard to budget, tax and financial issues, the abovementioned rights regarding the data cannot be used.
According to paragraph 1 of Article 28 of the Law, as the data will be outside the scope of the Law in the following cases, the requests of the data owners will not be processed in terms of these data:
• Processing of personal data by real persons within the scope of activities related to him or his family members living in the same residence, provided that they are not given to third parties and obligations regarding data security are complied with.
• Processing personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
• Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that they do not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security.
• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.
Exercise of Rights by Data Owners
Data owners can apply to our company to use the rights mentioned above.
Faralya Real Estate responds to data owners who want to exercise the said rights within the limits stipulated in the Law, within a maximum of thirty days as stipulated in the Law. In order for third parties to make an application request on behalf of personal data owners, a special power of attorney issued by the data owner through a notary public must be available on behalf of the applicant.
As a rule, data owner applications are processed free of charge, however, if a fee tariff is stipulated by the Personal Data Protection Board, charges may be made on this tariff.
Faralya Gayrimenkul may request information from the relevant person in order to determine whether the applicant is the owner of personal data, and in order to clarify the matters specified in the application, it may ask a question to the personal data owner about his application.
8. PROTECTION OF PERSONAL DATA BY Faralya Gayrimenkul
Faralya Gayrimenkul takes reasonable technical and administrative measures to prevent unauthorized access risks, accidental data loss, deliberate deletion or damage of data in order to ensure the security of personal data.
In this context, Faralya Real Estate;
• Records access to personal data,
• Ensures data security by using software and hardware including virus protection systems and firewalls,
• Follows personal data processing activities on the basis of business unit,
• Ensures the necessary inspections are carried out in order to ensure the implementation of the provisions of the Law in accordance with Article 12 of the Law
• Ensures compliance of data processing activities with the Law through internal policies and procedures,
• Gives authorizations in accordance with the nature of the data accessed within the company,
• Subjecting access to special quality personal data to more stringent measures,
• Subjecting individuals who have access to special quality personal data through additional security checks,
• Outsourcing personal data, etc. Faralya Real Estate takes commitments by the external service provider to ensure compliance with the Law in case of access from outside the company for reasons,
• Takes necessary actions to inform all employees, especially those who are authorized to access personal data, about their duties and responsibilities under the Law.
You can always contact us about your questions and comments regarding this Privacy Policy by writing to info@faralya.org or the postal address below. Mailing address: Faralya real estate, Baris Manco Boulevard neighborhood Foca 64B, Muğla / Fethiye Turkey