This Clarification Text has been prepared by BRANDENN LLC Company (“BrandEnn”) for the purpose of enlightening the Company’s customers regarding the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (“Law”).
You can find detailed information on the processing of your personal data within the scope of this Clarification Text from the BRANDENN LLC Company Personal Data Protection and Processing Policy at the address [www .brandenn.com]
a) Methods of Obtaining Personal Data and Legal Reasons
Your personal data is collected electronically or physically. Your personal data collected for legal reasons specified in this Clarification Text 5. and It can be processed and shared within the framework of the personal data processing conditions specified in Article 6.
b) Purposes of Processing Personal Data
Your personal data, 5. and Planning and executing the activities necessary for the products and services offered by the Company to be customized according to the tastes, usage habits and needs of the persons concerned, within the framework of the personal data processing conditions specified in Article 6, and for the promotion and promotion of the relevant persons, to be carried out by the business units and to carry out the relevant business processes, to carry out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and to carry out the related business processes, to plan and execute the commercial and/or business strategies of the Company and to It is processed for the purposes of ensuring the legal, technical and commercial-occupational safety of the persons who are in a business relationship with the Company.
c) Parties and Purposes of Sharing Personal Data
Your personal data, 8. and Planning and executing the activities required to customize the products and services offered by the Company according to the tastes, usage habits and needs of the relevant persons, and to offer and introduce them to the relevant persons, within the framework of the personal data processing conditions and purposes specified in Articles 9, to carry out the necessary work by the business units and to carry out the relevant business processes, to carry out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and to carry out the related business processes, to plan and execute the commercial and/or business strategies of the Company and to and with the Company’s business partners and suppliers, legally authorized institutions and organizations and legally authorized private law legal entities within the scope of ensuring the legal, technical and commercial-occupational safety of the persons who have a business relationship with the Company.
d) Rights of Data Owners and Use of These Rights
As personal data owners, if you submit your requests regarding your rights stated below to the Company through the methods specified under the heading Exercise of Rights by Data Owners, your requests will be evaluated and finalized by our Company as soon as possible and in any case within 30 (thirty) days.
11 of the Law. You have the following rights as a personal data owner in accordance with Article
Learning whether your personal data is processed,
If your personal data has been processed, requesting information about it,
To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom your personal data is transferred, in the country or abroad,
Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
Requesting the deletion or destruction of your personal data in the event that the reasons requiring its processing cease to exist even though it has been processed in accordance with the provisions of the law and other relevant laws, and requesting that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing your processed data exclusively through automated systems,
Requesting the compensation of the damage in case of loss due to unlawful processing of your personal data.
28 of the Law. 2 of the article. The paragraph lists the cases where data subjects do not have the right to request and within this scope;
Processing of personal data is necessary for the prevention of crime or criminal investigation,
Processing of personal data made public by the person concerned,
Processing of personal data by authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law, it is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution,
the processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial matters,
Article 28 of the Law 1 of the article. According to the paragraph of the Law, the requests of the data subjects will not be processed in terms of these data, as the data will be outside the scope of the Law in the following cases:
Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that the personal data is not disclosed to third parties and the obligations regarding data security are complied with.
Processing personal data for purposes such as research, planning and statistics by making it anonymous with official statistics.
Processing personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or does not constitute a crime.
Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.
Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.
Exercise of Rights by Data Subjects
Data subjects may exercise the above-mentioned rights by [www .brandenn.com] They will be able to use the “Form for Applications to be made by the Personal Data Owner to the Data Controller” available at the link. Applications, together with the documents that will identify the identity of the relevant data owner, will be made by one of the following methods:
Filling out the form and sending the wet signed copy to [Esentepe Mah. Büyükdere Cad. No:199/6, Şişli, Istanbul .-Turkey] by hand, through a notary public or by registered letter with return receipt,
Signing the form with a secure electronic signature issued within the scope of the Electronic Signature Law No. 5070
[law@brandenn .com]
Following a method stipulated by the Personal Data Protection Board.
The Company responds to data owners who wish to exercise such rights within the limits set forth in the Law, within a maximum of thirty (30) days, as stipulated in the Law. In order for third parties to make an application request on behalf of personal data owners, there must be a special power of attorney issued by the data owner through a notary public on behalf of the person who will make the application.
Although data owner applications are processed free of charge as a rule, fees may be charged based on the fee tariff[1] stipulated by the Personal Data Protection Board.
The Company may request information from the relevant person in order to determine whether the applicant is a personal data owner or not, and may ask the personal data owner questions about the application in order to clarify the issues specified in the application.
[1] In accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of the data owners is to be answered in writing, no fee is charged for up to ten pages. A transaction fee of $1 may be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD or flash memory, the fee that may be requested by the Institution cannot exceed the cost of the recording medium.