PERSONAL DATA PROTECTION LAW CLARIFICATION TEXT
BDH Bilişim Destek Hizmetleri Sanayi ve Ticaret A.Ş. takes the highest level of security measures possible to ensure that your personal data is collected, stored, and shared in accordance with the law and to protect your privacy.
Our aim, pursuant to Article 10 of the “Personal Data Protection Law” No. 6698 and in line with your satisfaction, is to inform you in the most transparent manner regarding the methods of obtaining your personal data, the purposes of processing, the persons with whom it is shared, the legal grounds, and your rights.
- a) Data Controller
In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data will be collected and processed by BDH Bilişim Destek Hizmetleri Sanayi ve Ticaret A.Ş. (BDH) as the data controller within the scope explained below.
- b) Purpose of Processing Personal Data
BDH may collect personal data from parties such as customers, employees, potential customers, employee candidates, business partners, and suppliers in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing/sales information.
Provided that it is not limited to the following and is in accordance with the requirements of the law, your collected personal data will be processed for:
- Ensuring that BDH products and services can be offered to you, including pricing and invoicing of products, sales of products and services, fulfillment and monitoring of transactions you request regarding purchased and/or used products and services, delivery of products, and performance of after-sales services such as installation, maintenance, repair, etc.
- Planning and execution of customs operations, production and/or operational processes, supply chain management, and customer relationship management processes.
- Planning and execution of call center services, reception services, defective product returns, maintenance and repair services, on-site repair services, and customer information services.
- Planning and execution of consultancy services, maintenance, support, and reporting services.
- Fulfillment of our obligations to you, arrangement of records and documents, and compliance with information storage, reporting, notification, tax, and other obligations stipulated by local and international legislation.
- Offering special promotions, advertisements, campaigns, discounts, benefits, conditions, pricing, and advantages for sales and marketing activities aimed at increasing the quality of services and products, and communicating with you regarding these.
- Communicating for the purpose of information technology requirements, systemic structure, the necessity of received IT support services, and transferring necessary information regarding these services and products to you.
- Conducting traffic measurement, statistical analyses, segmentation/profiling, and CRM studies for sales and marketing activities.
- Measuring and increasing customer satisfaction, complaint management, receiving your opinions and suggestions regarding new services and products, receiving problem-error reports, and providing information to you regarding products, services, complaints, and requests.
- Receiving your orders, performing payment transactions, ensuring product shipment through logistics cooperation with 3rd parties, recommending products and services that may interest you, online behavioral advertising and marketing, customer portfolio management, measurement and development of service quality, communication, optimization, auditing, risk management and control, promotion, analysis, determination of interests, scoring, profiling, marketing, sales, advertising, and communication.
- Comparative product and/or service offers, modeling, existing or new product studies and/or developments, use in all kinds of products and services to be offered to you within the scope of the law and related legislation regulating the works written in the BDH articles of association, which is the subject of your disclosure of personal data to BDH.
- Complying with information storage, reporting, and notification obligations stipulated by official institutions, fulfilling the requirements of contracts, and performing the legal obligations to which BDH is subject regarding the utilization of these services.
- In line with the purpose of determining and implementing BDH’s commercial and business strategies; managing finance operations, communication, market research and social responsibility activities, purchasing operations (request, offer, evaluation, order, budgeting, contract), internal system and application management operations, and legal operations conducted by BDH.
- Reviewing, evaluating, and responding to requests from official authorities or from you.
These data will be processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
- c) To Whom and For What Purpose the Processed Personal Data May Be Transferred
Your collected personal data may be transferred, limited to the achievement of the purposes stated above, to:
- Business partners, shareholders, and affiliates of BDH.
- Persons or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Laundering Proceeds of Crime, Law on Prevention of Money Laundering, Turkish Commercial Code, Code of Obligations, and other legislative provisions.
- Legally authorized public institutions and organizations, administrative authorities, and legal authorities.
- Overseas companies and affiliates.
- Consultants, auditors, lawyers, and other third parties from whom services are received.
- Real or legal persons, program partner institutions and organizations, and our customers from whom we receive services or cooperate with for product/service comparison, analysis, evaluation, advertising, and the realization of the aforementioned purposes, to institutions we have contracted with for sending messages to our customers, and to cargo companies that deliver your orders, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.
ç) Method and Legal Ground for Personal Data Collection
Your personal data is collected by BDH for the purposes stated above within the framework of legal legislation and the performance of the contract, in verbal, written, or electronic media, through channels such as BDH Headquarters, applications made via contracted websites, other institutions we provide/receive support from, real and/or legal persons with whom transactions are made within the scope of any legislation or contract, dealers, short messages (SMS) and electronic mail, voice response systems, our website and mobile application, our call centers, and social media accounts, as well as other channels that may be established/formed in the future.
- d) Rights of the Personal Data Owner Enumerated in Article 11 of Law No. 6698
As personal data owners, if you submit your requests regarding your rights through the methods set out below, BDH will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for the response up to ten pages. A processing fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be requested by our company will not exceed the cost of the recording medium.
In this context, personal data owners have the right to:
- Learn whether personal data is processed or not,
- Request information if personal data has been processed,
- Learn the purpose of processing personal data and whether they are used in accordance with the purpose,
- Know the third parties to whom personal data are transferred domestically or abroad,
- Request rectification of personal data if they are processed incompletely or inaccurately and request notification of this transaction to third parties to whom personal data are transferred,
- Request the erasure or destruction of personal data in the event that the reasons requiring processing no longer exist, despite being processed in accordance with Law No. 6698 and other relevant law provisions, and request notification of this transaction to third parties to whom personal data are transferred,
- Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- Request compensation for damages in case of loss due to unlawful processing of personal data.
Pursuant to Article 13, Paragraph 1 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 (No. 30356), you may submit your request to exercise your aforementioned rights in Turkish and in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address previously notified to BDH and registered in our system. In applications, information will only be provided about the applicant, and it will not be possible to obtain information about other family members or third parties. BDH reserves the right to verify your identity before responding.
The following information is mandatory in your application:
- Name, surname, and signature if the application is in writing,
- T.C. identity number for citizens of the Republic of Turkey; nationality, passport number, or identity number (if any) for foreigners,
- Residential or workplace address for notification,
- E-mail address, telephone, and fax number for notification (if any),
- Subject of the request,
- Information and documents related to the subject must also be added to the application.
You may submit your written applications, along with the necessary documents, as the data controller to our company’s address at Defterdar Mahallesi Otakçılar Caddesi No:70/1 34050. You may send your applications via e-mail to our KEP address bdh@hs02.kep.tr or to kvkk@bdh.com.tr for matters related to KVKK.
Depending on the nature of your request, information and documents that will allow identification must be provided to us completely and accurately. In case the requested information and documents are not provided as required, there may be disruptions in the full and qualified conduct of the research to be carried out by BDH based on your request. In this case, BDH declares that it reserves its legal rights. Therefore, your application must be sent in a way that includes the information and documents requested according to the nature of your request and for the purpose of identification.
