DENTOPOL COMPANY
CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA
This Clarification Text has been prepared by Dentopol Company (”Dentopol”) in order to inform the Company’s customers regarding the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (“Law”).
You can access detailed information regarding the processing of your personal data within the scope of this Clarification Text from the Personal Data Protection and Processing Policy of Dentopol Company available at [www.dentopol.com].
- a) Methods of Obtaining Personal Data and Legal Grounds
Your personal data is collected in electronic or physical environments. Your personal data collected for the legal reasons specified in this Clarification Text may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.
- b) Purposes of Processing Personal Data
Your personal data, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, are processed for the purposes of planning and executing the activities necessary for customizing and recommending and promoting the products and services offered by the Dentopol according to the tastes, usage habits and needs of the relevant persons, carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Dentopol and conducting the related business processes, carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Dentopol and conducting the related business processes, planning and executing the commercial and/or business strategies of the Dentopol and ensuring the legal, technical and commercial-occupational security of the Dentopol and the relevant persons who have a business relationship with the Dentopol.
- c) Parties to Whom Personal Data May Be Transferred and Purposes of Transfer
Your personal data, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of planning and executing the activities necessary for customizing and recommending and promoting the products and services offered by the Dentopol according to the tastes, usage habits and needs of the relevant persons, carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Dentopol and conducting the related business processes, carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Dentopol and conducting the related business processes, planning and executing the commercial and/or business strategies of the Dentopol and ensuring the legal, technical and commercial-occupational security of the Dentopol and the relevant persons who have a business relationship with the Company, may be shared with the business partners and suppliers of the Dentopol, legally authorized public institutions and organizations and legally authorized private law legal entities.
- d) Rights of Data Subjects and Exercise of These Rights
If you submit your requests regarding your rights listed below as personal data owners to the Company through the methods specified under the heading Exercise of Rights by Data Subjects, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.
Pursuant to Article 11 of the Law, as a personal data subject, you have the following rights:
- To learn whether your personal data is processed or not,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your personal data is transferred domestically or abroad,
- To request correction of your personal data if it is processed incompletely or incorrectly and to request notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
- To request deletion or destruction of your personal data in the event that the reasons requiring its processing are eliminated despite it being processed in accordance with the Law and other relevant law provisions and to request notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
- To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
- To request compensation for the damage in case you suffer damage due to unlawful processing of your personal data.
- Paragraph 2 of Article 28 of the Law lists the cases where data subjects do not have the right to request, and within this scope;
- Processing of personal data is necessary for the prevention of crime or criminal investigation,
- Processing of personal data that has been made public by the data subject himself/herself,
- Processing of personal data is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,
- Processing of personal data is necessary for the protection of the economic and financial interests of the State regarding budget, tax and financial matters,
- in such cases, the rights specified above regarding the data cannot be exercised.
- According to paragraph 1 of Article 28 of the Law, in the following cases, since the data will be outside the scope of the Law, the requests of data subjects will not be processed regarding these data:
- Processing of personal data by natural persons within the scope of activities related to himself/herself or family members living in the same household, provided that they are not given to third parties and obligations regarding data security are complied with.
- Processing of personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
- Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.
- Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security.
- Processing of personal data by judicial authorities or execution authorities regarding investigation, prosecution, trial or execution procedures.
Exercise of Rights by Data Subjects
- Data subjects may use the “ _Application Form to be Submitted to the Data Controller by the Personal Data Subject _” available at [ww……………..………..com] to exercise the above-mentioned rights.
- Applications will be carried out together with documents that will identify the relevant data subject, through one of the following methods:
- Sending the completed and wet-signed copy of the form by hand, via notary or by registered mail with return receipt to [………………………………………………………..-Turkey],
- Sending the form signed with a secure electronic signature regulated within the scope of the Electronic Signature Law No. 5070 via registered electronic mail to [……………………..@hs02].kep.tr,
- Following a method prescribed by the Personal Data Protection Board.
- Company responds to data subjects who wish to exercise their rights within the limits stipulated in the Law, within a maximum of thirty (30) days in accordance with the Law. In order for third parties to apply on behalf of personal data subjects, there must be a special power of attorney issued through a notary in the name of the person who will apply by the data subject.
- Applications of data subjects are processed free of charge as a rule; however, a fee may be charged according to the tariff determined by the Personal Data Protection Board[1].
- Company may request information from the applicant in order to determine whether the person applying is the personal data subject and may ask questions to the personal data subject regarding the application in order to clarify the issues specified in the application.
[1] Pursuant to the “Communiqué on the Principles and Procedures for Application to the Data Controller” published in the Official Gazette dated 10.03.2018 and numbered 30356, if a written response is given to the application of the data subject, no fee is charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD or flash memory, the fee that may be requested by the Authority cannot exceed the cost of the recording medium.