We, Aydoğan Plastik Ambalaj San. ve Tic. A.Ş. (Company), approach the security of your personal data with great sensitivity. In this context, we attach great importance to the processing and preservation of all kinds of personal data belonging to individuals associated with the Company, in accordance with the Law on Protection of Personal Data No. 6698 (GDPR). As the “Data Controller” defined in the GDPR, we process your personal data within the framework of the principle of proportionality, limitation, and purpose compatibility as described below. In accordance with this obligation, we would like to inform you as the Data Controller within the scope of the GDPR.

WHAT IS PERSONAL DATA?
Personal data is any kind of information related to an identified or identifiable real person. For there to be personal data, the data must relate to a real person and that person must be identifiable.

Personal data may consist of data recorded and processed individually relating to an identified or identifiable real person (such as TCKN, IP address, name, surname, etc.), as well as reports associated with an identified or identifiable real person (such as customer complaint reports, employee performance evaluation reports, interview evaluation reports), records (audio or video recordings, images, user transaction records), documents (such as resumes, payroll, invoices, bank statements, photocopies of identity cards), writings (such as letters, invitations), etc.

WHAT DOES PROCESSING OF PERSONAL DATA MEAN?
Processing of personal data refers to all kinds of operations carried out on data, whether by automatic means or non-automatic means, including collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, takeover, making available, classification, or preventing its use.

FOR WHAT PURPOSES AND HOW DO WE PROCESS YOUR PERSONAL DATA?
Your personal data, depending on the services provided by our company and our commercial activities, may be collected and processed verbally, in writing, or electronically through automatic or non-automatic methods by our company units and offices, cooperation partners, suppliers, website, social media channels, mobile applications, and similar means. Your personal data may be processed to better understand your needs, respond to your requests more quickly, improve our communication with you, and be updated while benefiting from the products and services offered by our company and as long as our cooperation continues.

Furthermore, when you use our company’s services via our website, visit our company or our website, or participate in trainings, seminars, or events organized by our company, your personal data may be processed.

Your personal data may be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the GDPR for the purpose of conducting necessary studies by our business units to benefit you from the products and services offered by our company, measuring your satisfaction regarding our company and the products and services offered, improving and diversifying our products and services in line with your requests and needs, and conducting the necessary quality and standard controls as required by the relevant laws and regulations or reporting and other obligations prescribed by the laws and regulations applicable to us and our affiliated companies and subsidiaries.

The data of our employees may be processed by our company or by real or legal persons authorized by our company or with whom our company collaborates or authorizes, in addition to the obligations stipulated by the Labor Law and other legislation in force, within the framework of our human resources policy or for operational reasons such as increasing performance level and employee satisfaction, ensuring occupational safety and peace.

TO WHOM AND FOR WHAT PURPOSES CAN THE PROCESSED PERSONAL DATA BE TRANSFERRED?
Your personal data may be shared within our company, including our affiliates and subsidiaries, and not limited to the mentioned purposes, in compliance with the legislation, primarily including the Turkish Constitution and the GDPR, as well as with our business partners, suppliers, company officials, shareholders, competent public institutions and private persons, domestically or abroad, within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the GDPR.

RIGHTS OF THE DATA SUBJECT ACCORDING TO ARTICLE 11 OF THE GDPR
The rights of the individuals whose personal data is processed under Article 11 of the GDPR are as follows:

• To learn whether personal data is processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request the correction of personal data if it is incomplete or incorrectly processed and to request notification of the transaction made within this scope to third parties to whom personal data are transferred,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in the GDPR and to request notification of the transaction made within this scope to third parties to whom personal data are transferred, despite being processed in accordance with the GDPR and other relevant laws,
• To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• To demand compensation for damages in case personal data is processed unlawfully and causes damage.

   

As data subjects, if you submit your requests regarding your rights, as stated in this Privacy Notice, to our Company through the methods specified in this Privacy Notice, our Company will conclude the request as soon as possible and within a maximum of thirty days free of charge depending on the nature of the request. However, if the Personal Data Protection Board foresees a fee or requires an additional cost for the transaction, a fee will be charged by us according to the tariff determined by the Personal Data Protection Board.
Pursuant to the first paragraph of Article 13 of the GDPR, you can submit your requests regarding the exercise of your rights mentioned above to our Company in writing or through other methods to be determined by the Personal Data Protection Board. In this context, the channels and methods to be used when making applications to our Company within the scope of Article 11 of the GDPR are explained below.

In order to use the rights mentioned above, you can send your request including your explanations regarding the right you wish to exercise, which are clear and understandable, related to yourself or if you are acting on behalf of someone else, it is necessary to be specifically authorized in this regard and document this authorization, also including your identity and address information, along with the necessary information to identify your identity, by filling out the Data Subject Application Form available at this link, signing a copy of the form with wet signature, and sending it to Akçaburgaz Mah. 3108 Sok. No: 7/1 Esenyurt, ISTANBUL, 34538 address with the identity verification documents by registered mail or through a notary or other methods specified in the GDPR.

We respectfully request your attention.