PERSONAL DATA PROTECTION LAW
DATA PROCESSING INFORMATION DOCUMENT As CTR International Certification and Inspection Ltd. Co. (the Company), we place the utmost importance on the security of your personal data. With this awareness, we attach great importance to the processing and preservation of all kinds of personal data belonging to all individuals associated with the Company in accordance with the Law on the Protection of Personal Data numbered 6698 ("KVKK/PDPL"). As the "Data Controller" defined in the KVKK (PDPL) with full awareness of this responsibility, we process your personal data within the framework described below and within the limits set by the legislation.
1. Data Controller CTR Uluslararası Belgelendirme ve Denetim Ltd. Şti.
ctr@ctr.com.tr - ctr.belgelendirme@hs03.kep.tr
Batı Bulvarı ATB İş Merkezi G Blok No:160 Macunköy, Yenimahalle, ANKARA / TURKEY
+90 312 397 82 00
2. Collection, Processing, and Purposes of Processing Personal Data Your personal data may vary depending on the services provided by our company and our company's commercial activities; mostly, it can be collected verbally, in writing, or electronically through our company units and offices, institutions and organizations we cooperate with, our website, social media channels, and similar means. As long as you benefit from the services we offer, our Company may process your personal data by creating and updating it.
Additionally, your personal data may be processed when you call our contact numbers to use Company services, use the contact page on our website, visit our Company, or participate in training, seminars, or events organized by our Company.
The personal data collected will be processed by our Company for the purposes of enabling our units to perform the necessary work to allow you to benefit from the services provided by our Company; ensuring the legal and commercial security of our Company and individuals in a business relationship with our Company (conducting administrative operations for communication by our Company, ensuring and auditing the physical security of Company locations, managing customer feedback and complaints, event management, legal compliance processes, audits, financial affairs, etc.); determining and implementing the commercial and business strategies of our Company; and ensuring the execution of our Company's human resources policies. This processing will be carried out in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK (Personal Data Protection Law).
3. To whom and for what purpose the processed personal data can be transferred The personal data collected may be transferred, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK (Personal Data Protection Law), to our business partners, suppliers, affiliated accreditation institutions, relevant authorized authorities of ministries with which we cooperate, Company officials, shareholders, legally authorized other public institutions and private individuals. These transfers serve the purpose of enabling our units to carry out the necessary work to benefit you from the services provided by our Company; ensuring the legal and commercial security of our Company and individuals in a business relationship with our Company (conducting administrative operations for communication by our Company, ensuring and auditing the physical security of Company locations, evaluating business partner/customer/supplier (authorized or employees) assessment processes, reputation research processes, legal compliance processes, audits, financial affairs, etc.); determining and implementing the commercial and business strategies of our Company; and ensuring the execution of our Company's human resources policies.
4. Method and Legal Reason for Collecting Personal Data Your personal data is obtained in order for our Company to provide the services within the specified legal framework and to fulfill our Company's contractual, accreditation/authorization rules, and legal obligations accurately and correctly, in line with the purposes stated above, in any form of verbal, written, or electronic media, and for the purpose of ensuring the security of facilities and buildings. Personal data collected for this legal reason may also be processed and transferred for the purposes stated in items 2 and 3 of this text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK (Personal Data Protection Law).
5. Rights Relating to Personal Data As personal data owners, if you wish to exercise your rights, you can submit your requests to our Company using the methods specified in this Information Notice. Our Company will process the request within thirty days at the latest, depending on the nature of the request. For requests that are responded to in writing, no fee will be charged for up to 10 pages. For each page exceeding 10 pages, a processing fee of 1 Turkish Lira will be applied. Additionally, if the response is provided on a recording medium such as a CD or flash drive, the fee will be equivalent to the cost of that recording medium. If it is determined that the request was due to an error on the part of the Data Controller, these fees will be refunded. In this context, personal data owners;
- To learn whether personal data is being processed,
- To request information if personal data has been processed,
- To understand the purpose of processing personal data and whether they are being used appropriately for that purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing and that the transactions made within this scope be notified to third parties to whom personal data have been transferred,
- To request the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK (PDPL) and other related laws, even if the data is processed in accordance with the relevant laws, and requesting that the transactions made within this scope be notified to third parties to whom the personal data have been transferred,
- To object to the occurrence of a result against the person themselves by analyzing the processed data exclusively through automated systems,
- To request compensation for any damages suffered if personal data has been processed unlawfully.
To utilise your rights as described above, please submit your request, including your identifying information, in accordance with Article 11 of the KVKK (PDPL), to the Data Controller either by delivering a signed copy of the Data Subject Application Form (G.FR.34) to Batı Bulvarı ATB İş Merkezi G Blok No:160 Macunköy, Yenimahalle, ANKARA, with identifying documents, or by sending the form securely via electronic signature to ctr@ctr.com.tr, or for applications sent via the KEP system, to ctr.belgelendirme@hs03.kep.tr.
01.07.2021, Revision 00