Rebar Metal Company Clarification
Text and Data Protection Statement

Rebar Metal Personal Data Processing and Protection Statement in Compliance with the Law No. 6698 on the Protection of Personal Data (KVKK) In accordance with the Law No. 6698 on the Protection of Personal Data (KVKK), the processing and safeguarding of personal data is of utmost importance. We collect personal data from you frequently in the online environment. The personal data and/or sensitive personal data collected and recorded during your visit to our website are processed in compliance with the Personal Data Protection Law. In this context, Rebar Metal, as the data controller, collects and stores your data within the legal boundaries. We would also like to emphasize that all personal data and/or sensitive personal data collected during your visit to our website are protected within the framework of our Privacy Policy. Please note that Rebar Metal does not guarantee the data security and data policies of external websites that are activated via the links provided on our website. We recommend that you carefully review the data security and data policies of any redirected page.

1.WHAT IS PERSONAL DATA?

Personal data is defined in Law No. 6698 on the Protection of Personal Data as “any information relating to an identified or identifiable natural person.” As understood from this definition, any data that can identify you is considered personal data. In this context, your personal data cannot be collected or processed by another party without your explicit consent. Additionally, sensitive personal data such as political opinions, religious beliefs, ethnicity, membership in associations or foundations, health information, philosophical beliefs, sexual orientation, criminal records, conviction data, and biometric data are considered special categories of personal data. To collect, transfer, or process your sensitive personal data, your explicit and written consent is required. All explanations and notifications provided in this clarification text regarding your personal data also apply to your sensitive personal data.

2.LEGAL BASIS

The Law No. 6698 on the Protection of Personal Data stipulates that when obtaining personal data, the individuals whose data is processed must be explicitly informed about the data being collected. This obligation, referred to as the “Obligation of Disclosure,” is outlined in Article 10 of the Personal Data Protection Law: “During the acquisition of personal data, the data controller and the authorized person are obliged to inform the data subject regarding the identity of the data controller and, if applicable, their representative, the purposes for which the personal data will be processed, who the personal data will be transferred to and for what purposes, the method and legal basis for collecting personal data, and the other rights specified in Article 11.”

In Article 3 of this Law, the data controller is defined as “the natural or legal persons who determine the purposes and means of personal data processing and are responsible for the establishment and management of the data recording system.” Furthermore, the data processor is defined as “the natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by them.”

In this context, Rebar Metal is the data controller when you visit the website. The details of the data controller are as follows:

Rebar Metal
Address: Maslak Mah. AOS 55. Sok. B Blok Apt. No:4 / 542 Maslak 42 Sarıyer/Istanbul
Phone: +90 542 355 44 58
Email: info@rebarmetal.com

3.SCOPE OF THE DATA CONTROLLER REBAR METAL’S OBLIGATION TO DISCLOSE INFORMATION

As per the provisions outlined above, Rebar Metal is the data controller. In this capacity, Rebar Metal informs and enlightens data subjects regarding the processing of personal data and/or sensitive personal data in accordance with the provisions of the law and within the limits set by the law, as required by the Clarification Text.

With this disclosure obligation, the company, in its role as the data controller, undertakes certain responsibilities. In this context, its responsibilities include informing data subjects about the purposes of processing personal data, the purposes of data transfer, who the data may be transferred to, and the rights specified in Article 11 of the Personal Data Protection Law, such as the rights to update, delete, or anonymize personal data. Additionally, it is responsible for determining the purposes, principles, and legal basis for the collection of personal data.

4.PURPOSES OF PROCESSING YOUR PERSONAL DATA BY THE COMPANY

Your personal data is processed within the limits set by the Law No. 6698 on the Protection of Personal Data, and in accordance with the principles of the law. As a company, our purposes for processing data under the law are:

a) To improve the quality of products and services offered to you;
b) To ensure that you are quickly informed about innovations within the company and the products and services offered;
c) To identify personalized needs and usage purposes, allowing us to offer tailored goods and services to our customers;
d) To carry out the company’s commercial activities and provide you with complete fulfillment in this regard;
e) To inform you about changing and developing products and services and, where necessary, to provide clarification;
f) To ensure that you benefit in the best possible way from the products and services offered by the company;
g) To develop and establish our commercial partnerships and strategies, ensure they are based on a secure foundation, and make correct decisions in our commercial policies and administrative processes;
h) To establish a solid corporate identity and ensure proper corporate functioning;
ı) To achieve the goals of our internal policies and thereby increase customer satisfaction;
j) To ensure data security;
k) To improve the goods and services provided via the internet;
l) To quickly resolve any issues or complaints;
m) To contact those who submit requests or complaints to the company.

All these purposes are processed in accordance with the “conditions for processing personal data” outlined in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data.

5.PRINCIPLES FOR THE PROCESSING OF YOUR PERSONAL DATA

As Rebar Metal, we have adopted the following principles regarding the processing of personal data:

a) To retain the data for the period required by the relevant legislation or for the duration necessary for the purpose it is being processed;
b) To process the data in a manner that is lawful;
c) To ensure the data’s accuracy and currency;
d) To act in accordance with the principles of honesty and fairness;
e) To ensure the data is not used for purposes other than those for which it was originally processed;
f) To ensure that the processing of data is adequate, relevant, and limited to the purpose for which it was collected;
g) To process the data in accordance with general morals, customs, and etiquette;
h) To process the data in compliance with all applicable regulations, primarily the provisions of Law No. 6698 on the Protection of Personal Data.

6.METHOD OF PROCESSING PERSONAL DATA

a. Your personal data is stored and processed by the company in the presence of two possible situations. These two cases are as follows:

EXPLICIT CONSENT | COMPLIANCE WITH THE LAW

Cases Where Explicit Consent Is Not Required
The Law No. 6698 on the Protection of Personal Data specifies certain cases where explicit consent is not required for processing and storing personal data. These cases, as outlined in Article 5, Paragraph 2 of the law, are as follows:

  • When explicitly provided for by laws.
  • When it is necessary to protect the life or physical integrity of a person who is unable to express consent due to physical impossibility or whose consent is not legally valid, and such protection is necessary for the person or another individual.
  • When the processing of personal data is necessary for the establishment or performance of a contract directly related to the parties of the contract.
  • When necessary for the data controller to fulfill their legal obligation.
  • When the data subject has made the data public.
  • When processing the data is necessary for the establishment, exercise, or protection of a legal right.
  • When processing the data is necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

In the presence of these situations, the company has the right to process data without your explicit consent.

7. METHOD OF COLLECTING YOUR PERSONAL DATA BY OUR COMPANY

In the evolving and changing technological landscape, our company collects data from various channels. The methods of data collection are diverse. Without limitation, our data collection methods include: the website, social media, instant messaging tools, emails, telephone, fax, manual methods, contracts, documents and papers submitted to our company for the execution of work, mobile applications. Personal data and/or sensitive personal data collected through these methods can be accessed verbally, in writing, and electronically.

The personal data and/or sensitive personal data collected by the company can be processed and transferred in accordance with the conditions, purposes, and principles of the Law No. 6698 on the Protection of Personal Data, as outlined in this Clarification Text.

8. TRANSFER AND PROTECTION OF DATA

a. TRANSFER
Your data is transferred in accordance with the Law No. 6698 on the Protection of Personal Data, under the conditions specified in our confidentiality agreement, solely for the purpose of fulfilling the work. The company shows utmost sensitivity in the data transfer process and strives to transfer the least personal data possible. In this context, the company transfers data to its business partners and companies that serve as performance assistants.

b. PROTECTION
The primary purpose of the Law No. 6698 on the Protection of Personal Data is to protect data and prevent unauthorized transfers. To prevent the transfer of data to unauthorized third parties, the company takes all necessary technical and administrative measures. In this context, we make sure to align our internal policies with the Personal Data Protection Law and maintain all necessary technical software and hardware for data protection. To ensure this, we work to prevent both our employees and third parties we collaborate with from acting contrary to our Privacy Policy.

9. RIGHTS OF THE DATA SUBJECT

a. GENERAL INFORMATION ABOUT THE RIGHT TO APPLY
Article 11 of the Law No. 6698 on the Protection of Personal Data regulates the rights of the data subject. In accordance with this article, your rights as a data subject are as follows:

a) To learn whether personal data is being processed,
b) To request information if personal data has been processed,
c) To learn the purpose of processing personal data and whether it is being used in accordance with that purpose,
ç) To know the third parties to whom personal data has been transferred, domestically or internationally,
d) To request the correction of personal data if it is incomplete or incorrect,
e) To request the deletion or destruction of personal data within the conditions specified in Article 7 of the Law on the “Deletion, Destruction, or Anonymization of Personal Data,”
f) To request that the correction of incomplete or incorrect data, or the deletion or destruction of data, be communicated to third parties to whom the personal data has been transferred,
g) To object to a result that is solely based on the automatic processing of personal data, resulting in a decision against the individual,
h) To request compensation for damages suffered due to the unlawful processing of personal data.

You can submit your requests regarding your rights under the Law on the Protection of Personal Data to our company in accordance with the procedure outlined in this Privacy Notice. Your requests will be responded to by the company within thirty days at the latest. Applications must be made by the data subject themselves. The company will only consider applications made by the data subject and will not share information about the applicant. Applications are free of charge, but if a fee is set by the Personal Data Protection Authority, the company may charge the fee determined by the Authority.

b. APPLICATION PROCEDURE
You must provide the following information in your application:

  • Your Name and Surname
  • Your Turkish Identity Number
  • If you are a foreign national, your nationality, passport number, or identity number
  • If the application is written, your signature at the bottom of the request form
  • The content of your request pursuant to Article 11 of the KVKK
  • The phone and fax number(s) where we can contact you
  • Your email address
  • Your address for notification

Our company’s contact information is as follows:

Rebar Metal:
Address: Maslak Mah. AOS 55. Sok. B Blok Apt. No:4 / 542 Maslak 42 Sarıyer/Istanbul
Phone: +90 542 355 44 58
Email: info@rebarmetal.com