Information on Personal Data Processing and Protection
The Personal Data Protection Law no. 6698 (Law) was enacted on March 24, 2016, and published on the Official Gazette no. 29677, dated April 07, 2016.
Purpose of the Law is to protect fundamental rights and freedoms of persons, privacy of personal life in particular, in processing of personal data, and set forth the obligations, principles and procedures that shall be complied with by natural and legal persons during the course of processing the data. Personal Data Protection Authority, with an administrative and financial autonomy and public legal personality, has been established in order to perform the duties stipulated by this Law.
We, GAMA Holding, Inc. (“Company”), as the data controller, would like to inform you of the following issues.
What is Personal Data?
Personal data shall mean any information relating to “natural persons”.
Such data as your name, TR Identity Number, demographic profiles, telephone number, home address, your communications that are sent or received through Company e-mail address, your vehicle plate number, social security number, passport information, your background story, your photograph, blood group, and your health information shall be deemed to be personal data under the Law.
The data relating to legal entities (companies/corporations) are, however, not within the scope of this Law.
Who is Data Controller?
Data Controller is the legal person who determines the purposes and means of the processing of your personal data if your personal data you have shared with our company is to be processed, and who is responsible for establishment and management of a personal data recording and filing system.
What is the Definition of the Processing of Your Personal Data?
Processing of Your Personal Data shall mean any operation to be performed on your personal data such as collection of the data in any form -oral, written or electronic-, and recording, storage, and classification of the same.
For What Purposes Do We Process Your Personal Data?
We may process your personal data in order to be able to fulfill our responsibilities under the Labor Law, the Turkish Commercial Law, the Social Security Law, and other applicable legislation; in order to be able to protect your personal data you have shared with the Company; to ensure health and security of our personnel and visitors; to maintain a healthy business relationship with our personnel, subcontactors, suppliers and our other service providers, and with the entities whom we are rendering services to; and within this scope, to gain acess to such necessary information as the identity, address and images; to prepare all records and documents on paper or in electronic environment; to meet our obligations with respect to the storage, reporting, and giving of information in accordance with the legislation or as required by the administrative and/or judicial authorities.
With Whom Do We Share Your Personal Data and For What Purposes?
Within the framework of the purposes stated above, the followings are the natural and/or legal persons/entities to whom we may disclose your Personal Data you have shared with our Company: the Ministry of Labor and Social Security, the Ministry of Customs and Trade, the Ministry of Science, Industry and Technology, the Social Security Institution; other natural and/or legal persons/entities, financial institutions and other third parties that are entitled to receive such information under the Capital Market Law and other applicable legal provisions; such statutory bodies as the Capital Markets Board; the Central Bank of Turkey; our principal shareholders; all our participations -direct or indirect, domestic or foreign-; public and private enterprises or companies and any other third parties either located inside or outside Turkey, who are our program partners, or whom we receive services from or we collaborate with to carry on our activities.
How Do We Collect Your Personal Data?
We may collect your personal data in electronic, paper-based, verbal or digital formats through our Head Office and/or Branches or Offices when you visit our websites; when you complete surveys; when you fill out enquiries, forms, applications; when you enter into a contract with us, when you request or submit a proposal, and when you provide any electronic, written, verbal and/or visual information during the course of interviews, meetings and visits.
What are Your Rights Under the Article 11 of the Personal Data Protection Law no. 6698?
By applying to our Company, you may exercise your rights to (i) request information as to whether your personal data has been processed; (ii) if processed, request information regarding the data processing; (iii) learn purpose of processing of the personal data, and whether the data is used in accordance with their purpose; (iv) know third parties, either located in the country or abroad, whom your personal data has been transferred to; (v) request correction if your personal data is processed incompletely or inaccurately; (vi) request deletion or destruction of your personal data within the framework of the conditions set forth in the article 7 of the Law; (vii) request notification of the third parties whom your personal data has been transferred to, about such actions that have been made as per the above items (v) and (vi); (viii) raise objection to any results against yourself that may arise due to the analysis of processed personal data exclusively by automated systems; (ix) request compensation for any damages you may incur due to unlawful processing of your personal data.
You may apply to the Company, either personally or through a notary public, if and when you decide to exercise any of your above described rights, by filling out the application form. The form can be available by clicking here.
The said application from shall contain identity and address information (if you are not a Company employee, you will need to add documents proving your identity); you shall also specify which of the above rights you would like to enforce; the requested action shall be clearly explained, and the requested action shall be associated with yourself.
GAMA Holding, Inc.