Personal Data Protection and Processing Policy (KVK)

 

Protection of personal data is a constitutional right and a key priority for our Company. Accordingly, we have established a system, which is regularly updated. As Data Controller, Nursanlar Holding Kustepe, Leyla Sokak, No: 1, Sisli, 34387 Istanbul, Turkey - www.nursanlar.com) acts diligently to ensure that your personal data is protected and processed according to applicable laws and regulations. As a Company aware of its responsibilities, we ensure that the personal data of our existing and prospective customers, employees and candidates, interns and trainees, employees of suppliers/sub-suppliers, our shareholders and partners, visitors and third parties are processed and protected in accordance with Law No. 6698 on the Protection of Personal Data (“KVK Law”). Furthermore, as Data Controller, as defined in the KVK Law, we process your personal data for the purposes and under the conditions explained below and to the extent allowed by the Constitution and other applicable laws and regulations.

 

Why do we process your personal data?

 

We process your personal data for the following purposes: enabling our departments to engage in activities to offer the benefits of the Company’s products and services; offering recommendations about the Company’s products and services by customizing them according to your preferences, use habits and needs; executing the Company’s human resources policies; ensuring the legal and commercial security of our company and the individuals or organizations in business relationship with our company; and engaging in commercial activities according to the Company strategies within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698. More information on why the company processes your personal data can be found in the Personal Data Protection and Processing Policy, publicly available on the corporate website www.nursanlar.com.

 

To whom and why do we transfer the personal data we process?

 

We may transfer the data we process to our business partners, suppliers, shareholders, affiliates, group companies, subsidiaries, legally authorized public institutions and real persons within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698 to the extent allowed in the Personal Data Protection and Processing Policy for the purposes specified herein: enabling our departments to engage in activities to offer the benefits of the Company’s products and services; offering recommendations about the Company’s products and services by customizing them according to your preferences, use habits and needs; executing the Company’s human resources policies; ensuring the legal and commercial security of our company and the individuals or organizations in business relationship with our company; and engaging in commercial activities according to the Company strategies. More information regarding to whom and why we transfer the personal data we process can be found in the Personal Data Protection and Processing Policy, publicly available on the corporate website www.nursanlar.com.

 

How do we protect your personal data?

 

We implement various security measures to protect your Personal Data against unauthorized access, use, and disclosure. We also take technical and organizational measures, which are generally recognized as adequate security standards in the industry, such as access controls, passwords, and regular security assessments.

 

What are your rights as a data subject?

 

As the data subject whose personal data has been processed by our Nursanlar Holding, and to the extent that Nursanlar Holding has acted as data controller with regard to your data, you may exercise the following rights by filing an application with us via email. Depending on the nature of your request, your application will be resolved as early as possible and within maximum 30 days after receipt. In case your application incurs additional costs, we may charge you the amount determined by the Personal Data Protection Board.

 

As the data subject, you have the right to:

• ask whether any of your personal data is processed,
• request information on the processing activity,
• ask the purposes of the processing and whether your personal data is processed within the scope of such purposes,
• in the event that your personal data is shared with third parties within or outside the country, request information on such third parties,
• request correction of the personal data if the data is processed incompletely or inaccurately,
• request the deletion or destruction of personal data if the reasons for the processing of the personal data no longer exist or if the Company has no legal grounds or legitimate interest to process such data;
• ask he Company to ensure that the third persons who process personal data under the authorization given by the Company respect your rights described under this section,
• object to negative consequences that may occur as a result of the processing of personal data by automatic means, and
• request indemnification if the you have incurred damages due to illegal processing of your personal data.