EN EN Chek TR TR Chek
EN EN TR TR

Confidentiality of personal information and conditions for its transfer

Provision of information by the Site Visitor:

1.1. When filling out any forms on the website «d-it.com.tr » (hereinafter referred to as the «Site») A site visitor can provide the following information:

Surname, First name, patronymic, e-mail address, residential address, contact phone number, your ip address, location and Cookies, information about education and marital status, as well as any other information that may be his personal data or filled in by him on the website in the fields manually;

1.2. By submitting their personal data, the Site Visitor agrees to their processing by the Site Administration (hereinafter referred to as the «Administration»), in order for the Administration and/ or its partners to fulfill their obligations to the Site Visitor, provide services, provide background information, as well as for the promotion of goods, works and services, and also agrees to receive advertising and informational messages and service messages. When processing personal data of a Site Visitor, the Administration is guided by the Federal Law «On Personal Data», the Federal Law «On Advertising» and local regulatory documents.

1.2.1. If the Site Visitor wishes to clarify his personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, or if the Site Visitor wishes to withdraw his consent to the processing of personal data or eliminate illegal actions of the Site Administration in relation to his personal data then he must send an official request to the Administration in order, provided by the Policy of the Site Administration regarding the processing of personal data.

If a Site Visitor wishes to delete his account on the Site, the Site Visitor contacts us at info@d-it.com.tr with a corresponding request. This action does not imply revocation of the Site Visitor’s consent to the processing of his personal data, which, according to the current legislation, occurs in the manner provided for in paragraph 1 of this document.

1.3. Use of information provided by the Site Visitor and received by the Administration.

1.3.1 The Administration uses the data provided by the Site Visitor during the entire period of existence of this Internet resource, except for the cases described in paragraph 1.2.1 for the purposes of:

  • registration/authorization of a Site Visitor on the Site;
  • processing orders of the Site Visitor and to fulfill their obligations to the Site Visitor;
  • to carry out activities to promote goods and services;
  • evaluation and analysis of the Site;
  • determining the winner in promotions conducted by the Site Administration;
  • analyzing the purchasing characteristics of the site visitor and providing personal recommendations;
  • informing the site visitor about promotions, discounts and special offers through electronic and SMS mailings.

1.3.2. The Administration has the right to send advertising and informational messages to the site Visitor. If a site visitor does not want to receive advertising and informational messages from the Site Administration, he must notify the Administration. Within one working day, the site Administration promises to delete personal data from the database and stop sending messages.

Provision and transmission of information received by the Administration:

2.1. The Administration undertakes not to transfer the information received from the Site Visitor to third parties. It is not considered a violation to provide the Site Administration with information to agents and third parties acting on the basis of an agreement with the Administration to fulfill obligations to the Site Visitor and only within the framework of contracts. It is not considered a violation of this clause to transfer the Site Administration to third parties data about Site Visitors in an impersonal form for the purpose of evaluating and analyzing the Site, analyzing the purchasing characteristics of the Site Visitor and providing personal recommendations.

2.2. The transfer of information in accordance with the reasonable and applicable requirements of the legislation of  Turkey is not considered a violation of obligations.

2.3. The Administration has the right to use the «cookies» technology. «Cookies» do not contain confidential information and are not transmitted to third parties.

2.4. The Administration receives information about the IP address of the Site visitor and information about the link from which Internet site the visitor came. This information is not used to identify the visitor.

2.5. The Administration is not responsible for the information provided by the Site Visitor on the Site in a publicly available form.

2.6. When processing personal data, the Administration takes the necessary and sufficient organizational and technical measures to protect personal data from unauthorized access to them, as well as from other illegal actions with respect to personal data.

Storage and use of Site Visitor information

3.1. The site visitor undertakes not to disclose to third parties the login and password used by him for identification on the Site

3.2. The site visitor undertakes to ensure due diligence when storing and using the login and password (including, but not limited to: using licensed antivirus programs, using complex alphanumeric combinations when creating a password, not providing a computer or other equipment with the login and password of the Site Visitor entered on it, etc.) to third parties.)

3.3. If the Administration has suspicions about the use of the account by a Site Visitor by a third party or malicious software, the Administration has the right to unilaterally change the password of the Site Visitor.

Personal Data Processing Policy

1 INTRODUCTION

1.1 This document defines the policy of this website (hereinafter referred to as the Website Administration) regarding the processing of personal data (hereinafter referred to as PD).

1.2 This Policy has been developed in accordance with the current legislation of  Turkey on personal data.

1.3 This Policy applies to all processes for the collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data carried out using automation tools and without the use of such tools.

2 PRINCIPLES OF PERSONAL DATA PROCESSING

The processing of personal data is carried out on the basis of the following principles:

  • The processing of personal data is carried out on a legal and fair basis;
  • The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals. Processing of personal data incompatible with the purposes of personal data collection is not allowed;
  • It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
  • Only those personal data that meet the purposes of their processing are subject to processing;
  • The content and volume of the processed personal data correspond to the stated purposes of processing. The processed personal data is not redundant in relation to the stated purposes of processing;
  • When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the stated purposes of their processing is ensured.
  • The storage of personal data is carried out in a form that allows determining the subject of personal data for no longer than the purposes of personal data processing require, unless the period of personal data storage is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor. The processed personal data is subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.

3 TERMS OF PERSONAL DATA PROCESSING

3.1 The processing of personal data is carried out in compliance with the principles and rules established by the Federal Law «On Personal Data». Processing of personal data is allowed in the following cases:

  • The processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
  • The processing of personal data is necessary to achieve the goals stipulated by an international agreement Turkey or a law, for the implementation and fulfillment of the functions, powers and duties assigned to the operator by the legislation of Turkey;
  • The processing of personal data is necessary for the administration of justice, the execution of a judicial act, an act of another body or official subject to execution in accordance with the legislation of Turkey on enforcement proceedings;
  • The processing of personal data is necessary for the execution of a contract to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of a contract on the initiative of the personal data subject or a contract under which the personal data subject will be the beneficiary or guarantor;
  • The processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if obtaining the consent of the subject of personal data is impossible;
  • The processing of personal data is necessary to exercise the rights and legitimate interests of the operator or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the personal data subject are not violated;
  • The processing of personal data is carried out for statistical or other research purposes, subject to mandatory depersonalization of personal data. The exception is the processing of personal data for the purpose of promoting goods, works, services on the market by making direct contacts with a potential consumer using means of communication, as well as for the purposes of political agitation;
  • Personal data is processed, access of an unlimited number of persons to which is provided by the subject of personal data, or at his request (hereinafter referred to as personal data made publicly available by the subject of personal data);
  • Personal data subject to publication or mandatory disclosure in accordance with federal law is processed.

3.2 The site Administration may include the personal data of subjects in publicly available sources of personal data, while the site Administration takes the written consent of the subject to the processing of his personal data.

3.3 The site Administration may process special categories of personal data related to race, nationality, health status, while the site Administration undertakes to take the written consent of the subject to the processing of his personal data

3.4 Biometric personal data (information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity and which are used by the operator to establish the identity of the subject of personal data) are not processed by the site Administration.

3.5 The site administration carries out cross-border transfer of personal data only to the territory of foreign states that ensure adequate protection of the rights of personal data subjects.

3.6 Making decisions based solely on automated processing of personal data that generate legal consequences for the subject of personal data or otherwise affect his rights and legitimate interests is not carried out.

3.7 In the terms of the license to carry out the activities of the Site Administration, there is no prohibition on the transfer of personal data to third parties without the written consent of the subject of personal data.

3.8 If there is no need for the subject’s written consent to the processing of his personal data, the subject’s consent may be given by the subject of personal data or his representative in any form that allows to obtain the fact of its receipt.

3.9 The site Administration has the right to entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of an agreement concluded with this person (hereinafter referred to as the operator’s order). At the same time, the Site Administration in the contract obliges the person processing personal data on behalf of the Site Administration to comply with the principles and rules of personal data processing provided for by this Federal Law.

3.10 If the Site Administration entrusts the processing of personal data to another person, the site Administration is responsible to the subject of personal data for the actions of this person. The person who processes personal data on behalf of the Site Administration is responsible to the Site Administration.

3.11 The site administration undertakes and obliges other persons who have gained access to personal data not to disclose to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.

4 RESPONSIBILITIES OF THE SITE ADMINISTRATION

In accordance with the requirements of Federal Law No. 152-FZ «On Personal Data», the site Administration is obliged to:

To provide the subject of personal data, upon his request, with information concerning the processing of his personal data, or to legally provide a refusal.

At the request of the personal data subject, clarify the processed personal data, block or delete if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing.

Keep a Log of the requests of personal data subjects, which should record the requests of personal data subjects to receive personal data, as well as the facts of providing personal data on these requests.

Notify the subject of personal data about the processing of personal data if the personal data was not received from the subject of personal data. The following cases are an exception:

  • The PD subject has been notified about the processing of its PD by the relevant operator;
  • PD was received by the Site Administration on the basis of a federal law or in connection with the execution of an agreement to which the PD subject is a party or beneficiary or guarantor;
  • PD are made publicly available by the PD subject or obtained from a publicly available source;
  • The site administration processes PD for statistical or other research purposes, for the professional activity of a journalist or scientific, literary or other creative activity, if the rights and legitimate interests of the PD subject are not violated;
  • Providing the PD subject with the information contained in the PD Processing Notification violates the rights and legitimate interests of third parties.

If the purpose of personal data processing is achieved, immediately terminate the processing of personal data and destroy the relevant personal data within a period not exceeding thirty days from the date of achievement of the purpose of personal data processing, unless otherwise provided by the contract to which the personal data subject is a party, beneficiary or guarantor, by another agreement between the Site Administration and the subject of personal data, or if the site Administration does not have the right to process personal data without the consent of the subject of personal data on the grounds provided for by No. 152-FZ «On Personal Data» or other federal laws.
If the subject of personal data withdraws consent to the processing of their personal data, stop processing personal data and destroy personal data within a period not exceeding thirty days from the date of receipt of the said withdrawal, unless otherwise provided by an agreement between the Site Administration and the subject of personal data. The site Administration is obliged to notify the subject of personal data about the destruction of personal data.
In case of receipt of the subject’s request to stop processing personal data in order to promote goods, works, services on the market, immediately stop processing personal data.

5 MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA DURING THEIR PROCESSING

5.1 When processing personal data, the Site Administration takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other illegal actions with respect to personal data.

5.2 Ensuring the security of personal data is achieved, in particular:

  • identification of threats to the security of personal data during their processing in personal data information systems;
  • the application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to meet the requirements for the protection of personal data, the implementation of which ensures the levels of personal data protection established by the Government of Turkey;
  • the use of information security tools that have passed the compliance assessment procedure in accordance with the established procedure;
  • assessment of the effectiveness of the measures taken to ensure the security of personal data prior to the commissioning of the personal data information system;
    taking into account machine-based personal data carriers;
  • detection of unauthorized access to personal data and taking measures;
  • recovery of personal data modified or destroyed due to unauthorized access to them;
  • establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and accounting of all actions performed with personal data in the personal data information system;
  • control over the measures taken to ensure the security of personal data and the level of security of personal data information systems.