WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

GENERAL INFORMATION AND CLARIFICATION TEXT

This information and clarification text has been prepared by ceres vesta system, within the scope of the Personal Data Protection Law No. 6698 adopted on 24/3/2016 and other relevant legislation, in order to inform and enlighten the Data owners during the collection, acquisition, storage, sharing and privacy protection of personal data in accordance with the law.

In this context, this information text is presented for your information and review in order to fulfill our obligation to inform in accordance with Article 10 of the relevant law in terms of the conditions and purposes to be explained below and the data to be processed in accordance with the law.

Definition of Data Controller:

As defined in Article 3 of Law No. 6698, the data controller is defined as “the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system”.

In this context, ceres vesta system is also responsible for the processing of personal data in the capacity of Data Controller, and the fulfillment of the obligation to inform and clarify is provided by this clarification text.

Legal Basis and Reasons for Processing Personal Data:

In case personal data clearly defined in the Law No. 6698 on the Protection of Personal Data are obtained, these data are processed within the scope of Articles 5 and 6 of the relevant Law. In this context, your personal data will be processed based on the following legal reasons, and your explicit consent will be requested for the processing of your Personal Data in cases other than the specified legal reasons.

These legal purposes as required by law;

• To be provided when information is requested from competent public institutions and organizations, in particular when requested by the Court and authorized public officials,
• Fulfillment of legal obligations and exercise of rights arising from applicable legislation,
• If deemed necessary for the fulfillment of obligations arising from the establishment, performance and conclusion of the contract,
• The processing of personal data by our Company is mandatory for the establishment, use or protection of the rights of us or you or third parties,
• Provided that the fundamental rights and freedoms of the person are protected, it is mandatory to process data for the legitimate interests of our Company (carrying out satisfaction evaluation activities of existing customers, organization and event management, carrying out finance-accounting transactions, carrying out audit processes, carrying out occupational health and safety activities, fulfilling the obligation to notify authorized public institutions such as courts, etc.)
• It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,
• Personal Data has already been made public by the data subject,
• Processing of data is mandatory for the establishment, exercise or protection of a right.

Personal Data other than the purposes listed above will be processed by obtaining the explicit consent of the data subject. Personal data acquired and processed within the framework of the Law may differ depending on the legal relationship between our Company and the data subject.Personal data may be collected by our Company in accordance with the law through different platforms (manual ways, verbal/written statements, electronic channels, forms on the ceres vesta system website or by entering information such as name, surname, business or private e-mail address or through pages logged in using username and password, website visits and usage, within the scope of events and activities held by our Company).

Personal Data acquired by our Company may be obtained, stored, updated and processed as long as the above conditions are met and/or explicit consent is available.

Collection of Personal Data, Purpose of Processing

Your Personal Data obtained by us through our website or other means mentioned above will be processed by us for the following purposes according to its nature:

• Carrying out the necessary planning, evaluation and studies by our business units in order for our customers to benefit from the products and services we offer as ceres vesta system;
• Carrying out advertising and marketing activities for the services we offer, informing on similar issues, carrying out corporate communication activities,
• Conducting Marketing and Customer Relationship Management activities;
• Organizing corporate communication and other events, campaigns and invitations within this scope and informing about them, conducting market research studies;
• Improving and personalizing the digital platforms we offer to our customers, and if necessary, using cookies for this purpose;
• Monitoring and evaluating the requests, suggestions and complaints received from the relevant persons, customer management and planning in this context, conducting evaluation studies in all areas;
• Ensuring the sustainability of all kinds of activities carried out within the scope of MOSB, making improvements and auditing the persons and companies with whom we have contractual relations;
• Ensuring the legal and commercial security of persons with whom ceres vesta system has a business-service relationship,
• Planning and execution of occupational health and safety processes;
• Exercising legal rights by using the aforementioned information, using the information regarding the transaction history as evidence in case of dispute after the termination of the existing legal relationship with the relevant person / institution;
• Conducting planning, reporting, visitor/customer statistics and similar examinations within the scope of its activities and/or ensuring compliance with the relevant domestic legislation, providing information requested by public institutions and organizations, fulfilling reporting obligations.
• Confirming the identity information of the persons, visitors who make transactions on the website/mobile applications or on whose behalf transactions are made, and recording the address and other necessary information required for communication,
• Ensuring the security of the website and other electronic systems and physical environments established by ceres vesta system.

Rights of the Data Subject

The rights of natural/legal persons whose personal data are processed in accordance with Article 11 of the KVKK are as follows;

• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

In order to exercise the above-mentioned rights, the distinctive identity / registration information and the right to be used and the explanations regarding this matter will be processed as a written request, in accordance with Article 11 of the KVK Law No. 6698, if it is sent to the address of ceres vesta system headquarters address, “which company is the address information??” via registered letter with return receipt.

Evaluation of Data Subject’s Requests

Pursuant to Paragraph 1 of Article 13 of the KVK Law No. 6698, after the requests regarding the exercise of the above-mentioned rights are submitted to our Company in writing or by other methods determined by the Personal Data Protection Board, your application will be finalized free of charge as soon as possible (However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged) and will be returned via your contact information you have provided to us.

Links to third party websites

Our Company’s website may contain links to third party websites. Our Company assumes no responsibility for the privacy policies of these sites and in no way guarantees that the data protection practices of these Web sites comply with all applicable legislation and regulations.