INFORMATION ON PRIVACY AND PROTECTION OF PERSONAL DATA
FOR WEBSITE VISITORS
Adatech Otomasyon ve Bilişim Sistemleri İnşaat Sanayi Dış Ticaret Limited Şirketi (Adatech) attaches great importance to protecting individuals’ fundamental rights and freedoms, particularly the privacy of private life as regulated in Article 20 of the Constitution. In this context, Adatech ensures that personal data is protected and processed in compliance with the law and acts with this understanding in all its planning and activities.
Adatech does not evaluate the protection and lawful processing of personal data, which is the foundation of privacy, merely as compliance with the legislation but places the value it gives to humans at the center of its approach. Acting with this awareness, Adatech takes all necessary administrative and technical measures to securely store personal data and to prevent it from being unlawfully processed.
Within this framework, information on the conditions of processing and transferring personal data produced or shared during the use of the (https://www.adatech.com.tr/) website in accordance with the Personal Data Protection Law No. 6698 is provided below.
- Definitions
Website: The website located at “https://www.adatech.com.tr/”.
Law: Personal Data Protection Law No. 6698.
Personal Data: Any information relating to an identified or identifiable natural person.
Online Visitor/Relevant Person: All individuals accessing the Website. It falls under the Visitor group in relevant company policies.
Board: Personal Data Protection Board.
Company: Adatech Otomasyon ve Bilişim Sistemleri İnşaat Sanayi Dış Ticaret Limited Şirketi.
Service Provider: Real or legal persons providing or operating systems that host services and content on the internet.
- Processed Personal Data
The personal data processed based on the Online Visitor’s access to the Website and the transactions performed on the Website are as follows:
For Online Visitors visiting the Website,
– Transaction Security Information (IP address, site traffic information, etc.)
For Online Visitors filling out forms on the Website,
– Identity Information (first name, last name)
– Contact Information (email address, phone number)
Besides those listed above, other data essential for the operation, development, and security of the Website may also be processed in compliance with the Law.
- Method and Legal Reason for Collecting Personal Data
Personal data is collected through the use of the Website and the completion of the contact form, fully or partially automated, to be stored for the duration necessary for the processing purpose.
Personal data is processed based on the explicit consent of the Online Visitor. Additionally, personal data can also be processed without seeking explicit consent, based on one of the legal reasons stated in Article 5, Paragraph 2 of the Law: (i) explicitly stipulated in the laws, (ii) necessary to fulfill the legal obligation of the data controller, (iii) mandatory for the establishment, use, or protection of a right, (iv) necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of personal data owners.
- Purposes of Processing Personal Data
Personal data may be processed in case it is explicitly stipulated in the laws or within the framework of other conditions stated in Article 5, Paragraph 2 of the Law, based on the transactions performed by the Online Visitor on the Website;
- “Identity and contact information” if the contact form is filled out, for the purposes of conducting/monitoring business activities (conducting the business activities carried out by us and ensuring the monitoring of our business activities), managing customer relations processes (managing our relationships with customers regarding the products and services offered, meeting requests), tracking requests/complaints (responding to incoming complaints, requests, thank you, and suggestion applications), and conducting communication activities within this scope (contacting you when necessary based on the information provided),
- Within the scope of “Cookie Record”, your personal data under the category of Transaction Security, for the purposes of conducting information security processes (ensuring transaction security in form creation processes), managing access authorizations (ensuring authorized access to restricted data), conducting/monitoring business activities, creating/tracking visitor records,
- Within the scope of “Website Visitor Records”, your personal data under the categories of Identity, Contact, and Transaction Security, for the purposes of conducting information security processes, managing access authorizations, conducting/monitoring business activities, creating/tracking visitor records, conducting communication activities. Additionally, the Service Provider has an obligation to record and store site traffic information under Law No. 5651 and other relevant legislation.
Processing personal data for the purpose of sending commercial electronic messages is subject to the explicit consent of the Online Visitor.
- Cookie Information
No third-party cookies are used on the Website. However, only cookies essential for the operation and security of the site may be used. The Online Visitor may refuse cookies or receive a warning by changing their browser settings. When the use of cookies is stopped, certain functions of the Website may not work properly.
- Purposes of Using Cookies
The following links provide information on how to manage (and disable) cookies in some commonly used browsers:
As ADATECH, we use cookies for various purposes on our site and application and process your personal data through these cookies. The main purposes are as follows:
- To perform the basic functions necessary for the operation of the Site and application. For example, ensuring that logged-in members do not need to re-enter their passwords when visiting different pages on the Site.
- To analyze the Site and application, increase the performance of the Site and application. For example, integrating different servers on which the Site operates, determining the number of visitors to the Site, and making performance adjustments accordingly, or making it easier for visitors to find what they are looking for.
- To increase the functionality of the Site and application and provide ease of use. For example, sharing content with third-party social media channels through the Site, remembering the username information or search queries of the visitor during subsequent visits to the Site.
- Cookies Used on Our Website
Only mandatory cookies are used on our site. The use of these cookies is essential for the proper functioning of our site and application. For example, authentication cookies activated when you log in to our site ensure the continuation of your active session as you move from one page to another on our site.
- How Can I Control the Use of Cookies?
The preferences of our visitors and users regarding the use of cookies and similar technologies are essential to us. However, the use of Cookies essential for the operation of the Platform is required. Additionally, if some cookies are turned off, some functions of the Platform may not work properly.
Information on How to Manage Your Cookie Preferences on the Platform:
- Visitors have the ability to personalize their preferences regarding cookies by changing the browser settings used to view the Platform. If the browser being used provides this capability, it is possible to change cookie preferences through the browser settings. Depending on the capabilities offered by the browser, data subjects may have options to prevent the use of cookies, receive a warning before cookies are used, or only deactivate or delete certain cookies.
- While these preferences may vary depending on the browser used, general information can be accessed at https://www.aboutcookies.org/. Preferences regarding cookies may need to be set separately for each device from which the visitor accesses the Platform.
- To disable cookies managed by Google Analytics, click https://tools.google.com/dlpage/gaoptout.
- To manage the personalized advertising experience provided by Google, click https://myaccount.google.com/not-supported.
- Preferences for cookies used by many companies for advertising activities can be managed through Your Online Choices (https://www.youronlinechoices.com/tr/reklam-tercihleriniz).
- To manage cookies through mobile devices, use the settings menu of the mobile device.
- You have the ability to personalize your preferences regarding cookies by changing your browser settings.
Adobe Analytics: [http://www.adobe.com/uk/privacy/opt-out.html](http://www.adobe.com/uk/privacy/opt-out.html)
AOL: [https://help.aol.com/articles/restore-security-settings-and-enable-cookie-settings-on-browser](https://help.aol.com/articles/restore-security-settings-and-enable-cookie-settings-on-browser)
Google Adwords: [https://support.google.com/ads/answer/2662922?hl=en](https://support.google.com/ads/answer/2662922?hl=en)
Google Analytics: [https://tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout)
Google Chrome: [http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647](http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647)
Internet Explorer: [https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies](https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies)
Mozilla Firefox: [http://support.mozilla.com/en-US/kb/Cookies](http://support.mozilla.com/en-US/kb/Cookies)
Opera: [http://www.opera.com/browser/tutorials/security/privacy/](http://www.opera.com/browser/tutorials/security/privacy/)
Safari: [https://support.apple.com/kb/ph19214?locale=tr_TR](https://support.apple.com/kb/ph19214?locale=tr_TR)
- Transfer of Processed Personal Data to Third Parties and Purposes
Personal data may be transferred to Adatech’s group companies, subsidiaries, affiliates, business partners, and authorized public institutions and organizations within the framework of the conditions specified in Articles 8 and 9 of the Law, provided that the necessary security measures are taken, and within the scope of the purposes specified in Article 4 of this text, if one of the conditions specified in Article 5(2) of the Law is present.
If one of the conditions specified in Article 5(2) of the Law is not present, the transfer of personal data is subject to the explicit consent of the Online Visitor.
- Measures Taken for Data Security
Adatech is obliged to take all necessary administrative and technical measures to prevent the unlawful processing and access of personal data and to ensure the preservation of personal data, providing an appropriate level of security.
In case of redirection to other sites or applications via the website, Adatech is not responsible for the compliance of the directed sites and applications with the legislation on the protection of personal data and their privacy policies and content.
- Administrative Measures
As Adatech, we provide our personnel with necessary training for the lawful processing and protection of your personal data and regularly audit our employees to measure compliance with the Law. The compliance and diligence shown by our personnel towards the Law is adopted as a criterion in our personnel performance evaluation.
While these measures are taken within the company, we ensure the security of your data by signing confidentiality agreements and commitments with the groups with whom we share your personal data lawfully (suppliers, business partners), ensuring that our stakeholders also show sufficient sensitivity towards your personal data.
In addition to these training, audit, and measures, intervention plans have been created to address any violations of your personal data, and necessary preparations have been made to remedy the violation by working with the Board as a company.
- Technical Measures
A data security infrastructure equipped with security measures in accordance with international standards has been established to ensure data security and prevent unlawful access to your data. This infrastructure is constantly audited internally to ensure the smooth operation of the system built upon it.
Encryption, authorization matrix, application and network security, data masking, firewalls, backup, key management, and up-to-date anti-virus systems are among the technical measures provided by the Personal Data Protection Authority and are adhered to in our IT infrastructure where the data we collect through our website is processed and stored.
Additionally, attack detection and prevention systems have been established to prevent attacks on our IT infrastructure, and regular risk analysis, data classification, vulnerability scans, and penetration tests are conducted to ensure the security of the system. In order to perform all these operations, software programs and support that comply with international standards are also utilized as a requirement of the importance we attach to your personal data.
- Rights of the Data Subject Under Article 11 of the Law
Adatech informs the data subject of their rights under Article 10 of the Law, guides on how to exercise these rights, and carries out all necessary internal operations and administrative and technical arrangements for these.
Under Article 11 of the Law, personal data subjects have the right to:
– Learn whether their personal data is processed or not,
– Request information if their personal data has been processed,
– Learn the purpose of processing their personal data and whether it is used in accordance with its purpose,
– Know the third parties to whom their personal data is transferred domestically or abroad,
– Request correction of their personal data if it is incomplete or incorrectly processed,
– Request deletion or destruction of their personal data under the conditions set forth in Article 7 of the Law,
– Request notification of the operations carried out pursuant to subparagraphs (d) and (e) of Article 11 to third parties to whom their personal data has been transferred,
– Object to the occurrence of a result against them by analyzing the processed data exclusively through automated systems,
– Demand compensation for the damages in case of suffering loss due to unlawful processing of personal data.
Requests and applications regarding the implementation of the Law can be made by filling out the Data Subject Application Form and delivering it in person to “Esenyalı Mahallesi Yanyol Caddesi Varyap Plaza No:61-222 Pendik İstanbul” address, sending it via Notary, or by sending it electronically via registered electronic mail (KEP) address (………….) using secure electronic signature or mobile signature.
Requests and applications can also be sent to …………….. email address if the data subject has previously notified Adatech of this email address and it is registered in Adatech’s system.
In requests and applications, the following information must be included:
– Name, surname, and if the application is in writing, signature,
– For Turkish citizens, T.C. identification number; for foreigners, nationality, passport number, or if available, identification number,
– The place of residence or workplace address for notification,
– If available, the notification email address, telephone, and fax number,
– The subject of the request.
Relevant information and documents must be attached to the application.
Adatech will respond to the requests included in the application, based on the nature of the request, as soon as possible and within thirty days at the latest.