Protection Of Personal Data/Privacy Disclosure
This document gives information on the data processing in connection with visiting the websites and consent forms of
Kordsa Teknik Tekstil A.Ş., Alikahya Fatih Mah. Sanayici Cad. No:90 İzmit / Kocaeli / Turkey Post Code : 41310, E-mail: [email@example.com], as data controller („Kordsa", "Company", „us“ or „we“).
As we may collect personal data under Article 10 of the Privacy Act No 6698 (“the Act”) and the European General Data Protection Regulation ("GDPR"), we are required to make a disclosure on the method and lawful basis of personal data collection, the purposes our Company may process your personal data, disclosure/transfer of your personal data to third parties and reasons for disclosure, and your legal rights as the owner of the data.
The personal data that you provide to us is processed accurately and is kept up-to-date according to the requirements of the applicable laws (especially the Act and the GDPR) and in connection with the purposes set out in these regulations.
1. Visiting our company websites and use of our online contact forms
The cookies that are used when visiting our Company Kordsa Teknik Tekstil A.Ş., http://www.kordsa.com/ and http://www.kordsa.com/capmax/, http://www.kordsa.com/monolyx/,
http://www.kordsa.com/twixtra/, http://www.kordsa.com/kratos/, http://composite.kordsa.com/en/ (collectively referred to as “microsites”), which are accessible from the Company’s website, may collect your personal data through the completed forms available as hardcopies or softcopies on the websites.
Method and Lawful Basis for Collection of Personal Data
Method of Collection of Personal Data: Our Company collects your personal data (i) indirectly when you visit our Company website http://www.kordsa.com/ or its microsites (the website and the microsites are collectively referred to as “Websites”) through cookies, or when you complete the “Contact Details Form” available (ii) as a hardcopy, or (iii) on the Websites.
The personal data that you provide to us by voluntarily completing the “Contact Details Form”, accessible from our Websites, will be used for legitimate purposes including responding to and contacting you related to your inquiries, and managing customer satisfaction processes.
You may connect to social networks like Facebook, Twitter, Instagram, Google Plus, and YouTube from Kordsa’s website at http://www.kordsa.com/. As a default, these links are disabled when you visit our website and no data is sent unless you choose to connect to these social networks. If you, however, click on the related link to enable the social network, the connection will remain enabled until you manually disable the connection or erase the cookies. After you enable the connection, data may be collected independent of the use of the social network.
Purposes for Processing Data: In the context of the lawful basis described above, we process your personal data to improve our Websites, to provide a relevant and customized user experience based on visitor preferences, to monitor customer preferences in order to offer a more relevant and customized web site experience, to identify frequently used/visited parts of our Websites to match our Websites’ content to visitors’ needs and improve our services, to obtain your feedback on our products and services, to respond to your related inquiries, to improve our products and services to match your needs, and to conduct analyses related to Kordsa reporting and business development activities, to conduct various types of statistical analysis, to carry out market research, to respond to and contact you regarding your inquiries, to manage customer satisfaction processes and contact you in related issues, to send you updates on our products and services by email, e-bulletin, and/or journals, to introduce our company-specific solutions, to inform you about news regarding our Company, to invite you to exhibitions, meetings, seminars and similar events, for digital marketing, advertising, and research and to conduct our quality and standard audits as required by applicable laws and regulations, and to comply with other legal requirements.
Disclosure of Personal Data to Third Parties: In accordance with the basic principles and Articles 8 and 9 of the Privacy Act, our Company may disclose or transfer your personal data to our suppliers and business partners we cooperate with or obtain services from for the purposes of providing our services, ensuring data safety and storage, responding to, resolving, and contacting you with regard to your inquiries, responding to your requests for information related to our products and services, ensuring safe use of the website, improving user experience, digital marketing, advertising, and offering you a personalized website experience based on your interests; to Hacı Ömer Sabancı Inc. Group companies and other business partners we are affiliated with for the purposes of auditing and reporting, or to legally authorized public authorities and natural persons, both locally as well as internationally. When disclosing your personal data, our Company meets the requirements set out in Articles 8 and 9 of the Act and takes any technical and administrative measure to protect the security of your data.
2. Using our offline contact forms
Method and Lawful Basis for Collection of Personal Data
Method of Collection of Personal Data: Our Company collects your personal data when you fill out our contact form (i. e. name, contact details, company, position), e. g. on a trade fair.
Lawful Basis: The lawful basis for processing your data and contact you for the purpose described below is your consent (Art. 5 of the Act / Art. 6 (1) s. 1 a GDPR). You are not obliged to consent. If you do not consent, we will not contact you for this purpose based on your consent.
Purposes for Processing Data: In the context of the lawful basis described above, we process your personal data to regularly inform you via mail, phone and e-mail with the following content:
- information about our products and services including the content of our website, our blog and publications as well as news and updates related to Kordsa;
- invitations to trade fairs and other events as well as surveys;
- promotional and introductory materials.
Disclosure of Personal Data to Third Parties: We do not transfer your personal data to third parties.
We may engage external service providers as data processors (according to Art. 28 GDPR) that support us in the e-mail dispatch and related activities. These service providers process data only pursuant to our instructions and under our control and solely for the purpose mentioned in this Data Protection Information. These are namely: 1) Luckyeye Bilgisayar Tanıtım Hizmetleri Yayıncılık Ve Tic. A.Ş. (Yüzbaşı Kaya Aldoğan Sok. Serhan Apt. 3/10 Esentepe, Şişli, Istanbul, Türkiye). 2) DHL Worldwide Express Taşımacılık ve Ticaret A.Ş (Yalçın Koreş Cad. No:20 Yenibosna 34209 Güneşli/ İstanbul / Türkiye) 3) Yurtiçi Kargo Servisi A.Ş. (Eski Büyükdere Cad.No:17-19 Maslak / İstanbul / Türkiye)
Duration of storage of your personal data: Your personal data is stored as long as you wish to get contacted by us with the contents as described above. This means your personal data generally is stored and processed until you withdraw your consent or object to receive the abovementioned information and/or materials. However, if we do not use your data for such purpose for more than 6 (six) months, we will delete it.
3. Data processing outside the European Economic Area ("EEA")
Since Kordsa is located in Turkey, your personal data will be processed in Turkey and therefore outside of the European Economic Area. There does not exist a decision of the European Commission that Turkey provides for an adequate level of protection with regard to personal data. However, we ensure that the personal data that is processed by us and the third parties mentioned above is protected in the same way as it would be if it was processed within the EEA. Legal basis for processing your data outside the European Economic Area is your consent (Art. 6 (1) s. 1 a GDPR).
4. Your Rights as Personal Data Owner
Subject to applicable laws and regulations (especially Articles 10 to 16 of the Act and Articles 15 to 21 GDPR), you as the data owner may exercise a number of rights by applying to our Company, including;
a) The right to be informed whether your personal data is being processed,
b) The right to request information regarding the processing of your personal data, especially which data we process including the right to request a copy of your data stored by us,
c) The right to request information about the purpose of processing of your personal data and whether this was done legitimately,
d) The right to be informed about any third parties your personal data was disclosed to locally or internationally,
e) The right to request rectification of any inaccuracies of your personal data and, if applicable, completion of your data,
f) The right to request, on legitimate grounds (especially if the data is not necessary anymore for the abovementioned purposes, if you have withdrawn your consent, if you have objected to the data processing or if we process your personal data unlawfully), erasure or disposal of your personal data,
g) The right to request that any third parties your personal data has been disclosed to are informed about the procedures carried out under (e) and (f),
h) The right to lodge complaints regarding any adverse outcomes that may result from the analysis of your processed data exclusively by automated systems,
i) The right to seek damages should you sustain any harm as a result of illegitimate processing of your personal data,
j) The right to withdraw your consent at any time with effect for the future (any data processed until then, however, remains lawful),
k) The right to request a limitation of the processing of your personal data in case you dispute the correctness of your personal data or if the processing is unlawful, but you do not wish to have your personal data deleted,
l) The right to receive the personal data you made available to us in a structured, standardized machine-readable format and to have this data submitted by us to third parties (details and restrictions may be drawn from Art. 20 GDPR, the exercise of this right does not affect your right of deletion),
m) The right to raise a complaint at a competent supervisory authority, in particular the respective supervisory authority in the Member State of your habitual residence if you live within the European Union, your place of work or the place of the presumable data protection breach if you are of the opinion that the processing of your personal data by us is against current data protection regulations.
To exercise one or more of these rights under the applicable laws and regulations, please complete the Data Owner Application Form or contact us directly in written form (contact details see above) or via email to firstname.lastname@example.org.
Please note: To stop the processing of your personal data for the purpose of contacting you with the contents as described above, you can also object to the data processing by clicking on the respective "unsubscribe" hyperlink in each e-mail.