Personal Data Protection Policy

PURPOSE

Unna Bilişim San. Tic. A.Ş. respects the privacy of your personal data, and we are attentive to the security of your data. With this awareness, we attach importance to ensuring that all kinds of personal data of the data subjects associated with Unna Bilişim San. Tic. A.Ş. who benefit from our products and services are processed, used securely and retained in accordance with Turkey’s Personal Data Protection Law No. 6698 (6698 KVKK).
This text has been prepared by Unna Bilişim San. Tic. A.Ş., in its capacity as “Data Controller”, to inform and notify you about our practices for the collection, processing, transfer, secure retention and destruction of personal data within the scope of 6698 KVKK and other relevant legislation.

RESPONSIBLE PERSONNEL
Data Controller : Unna Bilişim San. Tic. A.Ş.

Data Processors : All relevant parties processing data on behalf of Unna Bilişim San. Tic. A.Ş.

SCOPE
This policy covers the personal data and special categories of personal data of all our relevant parties that are collected, processed, transferred, archived and securely destroyed within all processes of Unna Bilişim San. Tic. A.Ş.

Your Rights as a Data Subject
Within the framework of Article 11 of KVKK, you have the right:

1. to learn whether your personal data are processed,
2. to request information about it if your personal data have been processed,
3. to learn the purpose of processing of personal data and whether they are used in accordance with their purpose,
4. to know the third parties to whom your personal data are transferred domestically or abroad,
5. to request the rectification of your personal data if they have been processed incompletely or inaccurately,
6. to request the erasure or destruction of your personal data within the framework of the conditions laid down in KVKK legislation,
7. when you request the rectification of incomplete or inaccurate data or the erasure or destruction of your personal data, to request that this
   be notified to the third parties to whom your personal data have been transferred,
8. to object to a result arising against you from the analysis of the processed data exclusively through automated systems,
9. to request compensation for the damage if you suffer damage due to the unlawful processing of personal data.

These are your rights.

To exercise the rights set out above, you may submit your written request, together with the information necessary to identify you and your explanations regarding the right you wish to exercise;

by the Applicant applying in person or by registered mail with return receipt to the address “Unna Bilişim San. Tic. A.Ş. TOSB OSB, 1. Cadde, B Blok, No:8/3 Çayırova / KOCAELİ / TÜRKİYE”, with the “Personal Data Information Request Form” bearing a wet-ink signature,
through a notary public, to the address
“Unna Bilişim San. Tic. A.Ş. TOSB OSB, 1. Cadde, B Blok, No:8/3 Çayırova / KOCAELİ / TÜRKİYE”
with the “Personal Data Information Request Form” bearing a wet-ink signature,

by e-mail from the Applicant, with a “secure electronic signature” as defined in Electronic Signature Law No. 5070, or signed, scanned and with a declaration of identity from your other e-mail addresses, to our registered electronic mail addresses “unnabilisim@hs01.kep.tr”, “kvkk@unna.com.tr”.
Your applications must be made in Turkish or English. In the application you make to exercise your rights set out above as a data subject, containing your explanations regarding the right you request to exercise;

1. the matter/subject you request must be clear and understandable,
2. if you apply in writing, the wet-ink signed approval of the data subject is required,
3. the subject you request must relate to you personally,
4. if you are acting on behalf of someone else, you must be specifically authorised to do so and your authority must be documented,
5. the application must contain identity and address information (place of residence or workplace address for service of notifications, e-mail address for notifications if any, telephone or fax number),
6. documents verifying your identity (Turkish ID number for citizens of the Republic of Türkiye; nationality and passport number/identity number for foreign nationals) must be included with the application.

Pursuant to Article 13(2) of the KVK Law, your applications submitted to us will be answered within thirty days of the date on which your request reaches us, depending on the nature of the request. Pursuant to Article 13 of the KVK Law, our responses will be delivered to you in writing or electronically. Pursuant to Article 14 of 6698 KVKK, where the application is rejected, the response given is found insufficient or the application is not answered in time, the data subject may lodge a complaint with the Board within thirty days of the date on which they learn of our Company’s response and, in any event, with the person’s approval, within sixty days of the application date. If an additional cost arises within the framework of Article 13 of the Law, the Company reserves the right to charge you a fee in accordance with the tariff to be determined by the Personal Data Protection Board.

Pursuant to Article 28/2 of 6698 KVKK, in the cases listed below, data subjects cannot assert their other rights set out above, except for the right to request compensation for damage:

1. Where the processing of personal data is necessary for the prevention of crime or for a criminal investigation.
2. The processing of personal data that have been made public by the data subject themselves.
3. Where the processing of personal data is necessary for the performance of supervisory or regulatory duties, or for disciplinary investigations or prosecutions, by public institutions and organisations assigned and authorised by law and by professional organisations with public institution status.
4. Where the processing of personal data is necessary to protect the economic and financial interests of the State in relation to budgetary, tax and financial matters.