Disclosure Text In Relation To Processing Of Personal Data

This disclosure text in relation to processing of personal data has been prepared as per the “Communique on Procedures and Principles Applicable to Fulfilment of Disclosure Obligation” which sets forth the procedures and principles that are required to be complied with while fulfilling the disclosure obligation under the Law No. 6698 on Protection of Personal Data.

Our company acts in the capacity of “Data Controller” as defined in the Law No. 6698. Within the framework of our activities, we attach utmost importance to process and store any personal data of all data subjects, in compliance with the Law No. 6698 on Protection of Personal Data.

What Are the Purposes for which Your Personal Data are processed?

Your personal data are obtained and stored for the purposes of commercial activities, human resources activities and security measures. Visitors are requested to register at the entrance to the building for security purposes and indoor and outdoor areas of our Company are monitored by surveillance cameras.

What Are the Methods used in Collecting Your Personal Data?

Your personal data are collected through automatic or non-automatic means and stored in verbal form or in written or electronic medium for the purposes of conducting our Company’s activities.

What is the Legal Ground for Collecting Your Personal Data?

Your personal data are collected within the scope of our Company’s activities, in accordance with the Turkish Commercial Code, the Turkish Code of Obligations, the Law on Protection of Personal Data and other relevant legislation and regulations as well as in line with our legitimate interests.

Do We Transfer Your Personal Data to a Third Party?

Your personal data may be transferred as per the legal regulations to competent public authorities and institutions in Turkey for their information, for the purposes of ensuring performance of the activities in line with the legislation, handling and conducting legal affairs, informing competent persons, authorities and institutions, fulfilling the obligations with respect to employees regarding their employment contracts and other obligations arising under the legislation, conducting and ensuring the audit of business activities, and conducting occupational health and safety procedures.

Do We Transfer Your Personal Data to Abroad?

Our company does not transfer your personal data to abroad.

What Are Your Rights With respect to Your Personal Data?

Pursuant to Article 11 of the Law No. 6698 on Protection of Personal Data, you, as data subject, are entitled to do the following:

• To learn whether or not your personal data were processed,
• If your personal data were processed, to request information about it,
• To learn the purpose for which your personal data were processed and whether or not your data were used for intended purposes of such processing.
• To know the third parties to whom your personal data were transferred at home or abroad,
• To request the rectification of incompletely or inaccurately processed data, if any,
• To request the erasure or destruction of your personal data under the conditions laid down in Article 7 of the Law on Protection of Personal Data.
• If you request correction of missing or incorrect data and deletion or destruction of your personal data, to request that this situation be notified to the third parties to whom we transfer your personal data,
• To request compensation for any damages you may incur as a result of any unlawful processing of your personal data.

How Can You Exercise Your Rights?

If you wish to exercise your rights with respect to your personal data, you can submit your application and requests by filling out the Data Subject Application Form and sending it by using one of the following methods:

By sending the form bearing wet signature, together with your ID photocopy, to our Company’s address at Organize Sanayi Bölgesi Hamzafakıhlı Mahallesi Yaşar Tetiker Bulvarı 67300 Kdz. Ereğli/Zonguldak,

By applying in person to TATMETAL Çelik Sanayi ve Ticaret A.Ş. with a valid identity document,

By sending the form via a registered electronic mail (KEP) address and by using secure electronic signature or mobile signature, to our registered electronic mail address kvkk@tatmetal.com.tr.

Pursuant to the Communiqué on the Procedures and Principles of Application to Data Controller, the name, surname, signature if the application is in writing, Republic of Turkey ID number (passport number in the case that the applicant is foreigner), address of the place of residence or workplace/business address to be used as notification address, electronic mail address (if available) to be used for notification, telephone number and fax number, and information about the request are required to be stated in the application of the Data Subject.

The data subject should express his/her request in a clear and understandable way in the application that he/she will make to exercise the above mentioned rights and that would contain explanations about the right he/she wished to exercise. Information and documents related to the application should be enclosed with the application.

Although the subject of the request should be related to the applicant in person, if the person is acting on behalf of someone else, the applicant must be specifically authorized in this matter and this authorization must be documented (with special power of attorney). In addition, the application must include the identity and address information and documents verifying the identity must be enclosed with the application.

Requests made by unauthorized third parties on behalf of someone else shall not be considered.

How Long Does It Take to receive a Response to Your Requests About Processing of Your Personal Data?

Your requests with respect to your rights regarding your personal data are evaluated and answered within 30 days at the latest following our receipt of such request. In the case that your application is evaluated negatively, the reasons for rejection along with the relevant grounds are sent to the address you specified in the application by using one of the methods chosen in the Data Subject Application Form, including, in particular, by e-mail or mail.

You may access our Policy on Storage and Destruction of Personal Data from this link.