Clarification Text

PURE7 YAZILIM BİLİŞİM VE DANIŞMANLIK  HİZMETLERİ ANONİM ŞİRKETİ

CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA


  Pure7 Yazılım Bilişim ve Danışmanlık Anonim Şirketi (PURE7 or Company), we show great sensitivity and importance to the protection of your personal data. With this awareness, we process all kinds of personal data of all persons associated with PURE7 in accordance with the Personal Data Protection Law No. 6698 (KVKK). PURE7, as “Data Controller” as defined in the LPPD, processes your personal data with the purposes and methods described below, within the limits set by the legislation, with care and attention;

  1. Definitions

Within the scope of this Clarification Text; Personal Data: All kinds of data relating to an identified or identifiable natural person (name, surname, Turkish ID number, address, telephone, system login/logout times, current location, resumes, place of birth, date of birth, e-mail address, image records and all other similar data), Sensitive Personal Data: All kinds of data (race, ethnic origin, political opinion, religious belief, sect, clothing, union membership, health, biometric data and all other similar data), which, if learned, may cause discrimination or victimization against the person concerned and which should be protected much more strictly than other personal data, Processing of Personal Data: Any operation performed on personal data, including obtaining, recording, storing, changing, sharing with third parties and transferring personal data abroad by automatic means or by non-automatic means provided that it is a part of any data recording system, KVKK: Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on April 7, 2016, Authority: Personal Data Protection Authority, Data Processor: The natural or legal person who processes Personal Data on behalf of the Data Controller based on the authorization granted by the Data Controller, Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system, Data Owner: The natural person whose Personal Data is processed, PURE7 or the Company: Pure7 Yazılım Bilişim ve Danışmanlık Anonim Şirketi, means.

  1. Collection, Collection Method and Processing of Personal Data

The personal data of our customers, potential customers, employees, employee candidates, company officials, suppliers, business partners, employees of the companies we cooperate with, visitors and other 3rd. The personal data of our employees, potential customers, employees, employee candidates, company officials, suppliers, business partners, employees of the companies we cooperate with, visitors and other third parties may be collected and processed by our Company PURE7 verbally, in writing or electronically by the relevant units of our Company, contact forms, various contracts, electronic mail or similar means by automatic or non-automatic methods within the framework of the relevant legislation, especially the Constitution of the Republic of Turkey, international conventions to which our country is a party and the Law No. 6698 on the Protection of Personal Data. Since the Personal Data processed may differ according to the Data Subject, the Personal Data categories and Personal Data listed below may differ for each Data Subject and accordingly may vary according to the nature of the relevant service. For this reason, we would like to enlighten you about the Processing of Personal Data in the capacity of Data Controller within the scope of KVKK.

  1. Your Personal and Sensitive Data Collected, Obtained and Processed within PURE7

 

Customer/Customer Authorized

Data Category Processed Personal Data Purpose of Data Processing
Identity TC Execution of Activities in Compliance with the Legislation

Execution of Finance and Accounting Affairs

Execution of Company/Product/Service Loyalty Processes

Monitoring and Execution of Legal Affairs

Execution of Communication Activities

Execution/Supervision of Business Activities

Execution of Logistics Activities

Execution of After Sales Support Services for Goods/Services

Managing sales processes of goods/services

Execution of Goods/Service Production and Operation Processes

Customer Relationship Management & Execution of Processes.

Execution of Customer Satisfaction Management Activities

Carrying out Storage and Archive Activities

Managing Contract Processes

Informing Authorized Persons, Institutions and Organizations

Execution of Management Activities

Name-Surname
Identity Card or Photocopy
Signature, Declaration, Power of Attorney
Contact Adress
Telephone(Work/Mobile)
E-Mail
Personnel Position/Title Information
Audio and Visual Photo
Finance IBAN/Bank Information
Collateral Information
Debit / Credit Information
Cheque and Draft Information

 

Visitors

Data Category Processed Personal Data Purpose of Data Processing
Identity TC Execution of Emergency Management Processes

Execution of Information Security Processes

Conducting Audit/Ethics Activities

Execution of Access Authorizations

Ensuring Physical Space Security

Monitoring and Execution of Legal Affairs

Execution/Supervision of Business Activities

Execution of Occupational Health / Safety Activities

Execution of Storage and Archive Activities

Providing Information to Authorized Persons, Institutions and Organizations

Creating and Tracking Visitor Records

Name-Surname
Signature
Personnel Position/Title Information
Process Security Internet Access Logs
Audio and Visual  Security Camera Recordings

Supplier/Supplier Authorized

Data Category Processed Personal Data Purpose of Data Processing
Identity TC Execution of Activities in Compliance with the Legislation

Execution of Finance and Accounting Affairs

Monitoring and Execution of Legal Affairs

Execution of Communication Activities

Execution/Supervision of Business Activities

Execution of Logistics Activities

Execution of Goods/Service Procurement Processes

Execution of Goods/Service Production and Operation Processes

Customer Relationship Management & Execution of Processes.

Execution of Customer Satisfaction Management Activities

Carrying out Storage and Archive Activities

Managing Contract Processes

Execution of Supply Chain Management Processes

Informing Authorized Persons, Institutions and Organizations

Execution of Management Activities

Name-Surname
Identity Card or Photocopy
Signature, Declaration, Power of Attorney
Contact Adress
Telephone(Work/Mobile)
E-Mail
Personnel Position/Title Information
Audio and Visual Photo
Finance IBAN/Bank Information
Collateral Information
Debit / Credit Information
Cheque and Draft Information

Employee Candidate

Data Category  Processed Personal Data Purpose of Data Processing
Identity Name-Surname Execution of Activities in Compliance with the Legislation

Execution of Finance and Accounting Affairs

Monitoring and Execution of Legal Affairs

Execution of Communication Activities

Execution/Supervision of Business Activities

Execution of Logistics Activities

Execution of Goods/Service Procurement Processes

Execution of Goods/Service Production and Operation Processes

Customer Relationship Management & Execution of Processes.

Execution of Customer Satisfaction Management Activities

Carrying out Storage and Archive Activities

Managing Contract Processes

Execution of Supply Chain Management Processes

Informing Authorized Persons, Institutions and Organizations

Execution of Management Activities

Date of Birth
Place of Birth
Marital Status
Gender Information
Driving License Information
Contact Adress
  Telephone(Work/Mobile)
  E-Mail
Personnel  Resume
   Job Application Form
   Past Position/Title Information
  Education Status
Finance Past Wages/Salaries
Professional Experience Professional Experience
  Diploma Information

Vocational Education Information

Audio and Visual Security Camera Recordings

 

Employees, Shareholders, Interns

Detailed information about the processed personal data belonging to our employees, shareholders and interns within PURE7 has been notified to them and detailed information has been provided in a way that they can access continuously.

 

  1. Your personal data in accordance with Articles 5 and 6 of the Personal Data Protection Law;
  • In accordance with the law and good faith,
  • In connection with, limited and proportionate to the purposes of processing,
  • Accurate and up to date when needed,
  • For specific, explicit and legitimate purposes,
  • It will be kept and processed for the period stipulated in the relevant legislation or required for the purpose for which it is processed.
  1. Transfer of Your Personal Data

Your personal data may be transferred domestically or abroad in accordance with Article 8 of the KVKK and by taking the necessary technical/administrative measures, provided that it is limited to the above-mentioned purposes, in line with our shareholders, business partners, suppliers, business contacts, performance assistants and the Company’s field of activity and purpose or in cases stipulated by the legislation related to regulatory supervisory institutions and official authorities.

  1. Storage and Deletion of Data

Our Company stores the personal data it processes for the periods specified in the legislation, Company procedures and Company policies. In the event that no additional period is specified in the legislation; personal data are stored for the period required to be processed in accordance with the practices of our Company and the customs of our Company’s commercial life, depending on the services provided by our company while processing that data, and after this period, only for the periods required in practice to constitute evidence in possible legal disputes. After the expiration of the specified periods, the personal data in question are deleted, destroyed or anonymized by the methods defined in the company procedures and policies.

  1. Your Rights as a Data Subject

    • Within the framework of Article 11 of the KVKK,
  • Learn whether your personal data is being processed,
  • Request information if your personal data has been processed,
  • To learn the purpose of processing personal data and whether they are used for their intended purpose,
  • To know the third parties to whom your personal data is transferred domestically or abroad,
  • To request correction of your personal data in case of incomplete or incorrect processing,
  • To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation and other legislation,
  • When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, to request that this situation be notified to third parties to whom your personal data has been transferred,
  • To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
  • In case you suffer damage due to unlawful processing of personal data, to demand the compensation of this damage,

you have the right to exercise your rights. In order to exercise your above-mentioned rights, in accordance with paragraph 1 of Article 13 of the KVKK, you must fill out the Data Owner Application Form at “https://www.pure7.com.tr/“, including the necessary information to identify your identity and your explanations regarding the right you request to exercise among the rights specified in Article 11 of the KVKK, and send a signed copy of the form; “Pure7 Yazılım Bilişim ve Danışmanlık Anonim Şirketi Burhaniye Mah. Yunus Emre Sok. No:10 34676 Üsküdar/İstanbul” by mail or by hand, or by scanning the form and sending it to pure7@hs01.kep.tr via registered e-mail. In the application containing your explanations regarding the right that you have as a personal data owner and that you will make to exercise your rights mentioned above and that you request to exercise;

  • Your request is clear and understandable,
  • That the matter you are requesting is related to you personally,
  • If you are acting on behalf of someone else, you must be specifically authorized to do so,
  • Identity and address information,
  • Documents certifying identity must be attached,

is required. 8.2. Pursuant to Article 14 of the KVKK, the personal data owner may file a complaint to the Board within thirty days from the date of learning the response of our Company and in any case within sixty days from the date of application with the consent of the person in case the application is rejected, the response is found insufficient or the application is not responded in due time. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within 30 (thirty) days at the latest; however, if an additional cost arises within the framework of Article 13 of the Law, the Company reserves the right to charge you a fee according to the tariff to be determined by the Personal Data Protection Board. 8.3. Pursuant to Article 28/2 of the KVKK; In the following cases, personal data owners cannot assert their other rights mentioned above, except for the right to demand compensation for the damage;

  • Processing of personal data is necessary for the prevention of crime or criminal investigation,
  • Processing of personal data made public by the personal data subject himself/herself,
  • Personal data processing is necessary for the execution of supervisory or regulatory duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority granted by law,
  • Processing of personal data is necessary for the protection of the economic and financial interests of the state in relation to budgetary, tax and fiscal matters.
  1. Cases where PURE7 may process your personal data without your explicit consent in accordance with KVKK

9.1. Pursuant to Article 5 of the KVKK, in the following cases, PURE7 may process your personal data mentioned above and obtained in accordance with the law without seeking your explicit consent;

  • Where expressly provided for by law,
  • If you are unable to disclose your consent as a data subject due to actual impossibility or if it is mandatory to process your personal data for the protection of your or someone else’s life or physical integrity in cases where your consent is not legally valid,
  • Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
  • It is necessary for PURE7 to fulfill a legal obligation,
  • Your personal data has been made public by you,
  • Data processing is mandatory for the establishment, exercise or protection of a right,
  • Data processing is mandatory for the legitimate interests of PURE7, provided that it does not harm your fundamental rights and freedoms.

 

  1. In case of any incompatibility between the legislation in force and this Clarification Text, the Data Controller agrees that the legislation in force shall apply.

The Clarification Text is published on the website “https://www.pure7.com.tr/” and made accessible to personal data owners. In order to comply with the changing conditions and legislation, changes and updates may be made in the Clarification Text and may be made available to personal data owners through the relevant website.

Pure7 Yazılım Bilişim ve Danışmanlık Anonim Şirketi

Phone: +90 216 318 57 77
E-Mail:  kvkk@pure7.com.tr
KEP : pure7@hs01.kep.tr