Website: http://www.artshipyard.com/
Phone Number: +90 216 446 02 78
Email Address: artgemiinsa@hs01.kep.tr

Address: Evliya Çelebi Mah. Tersaneler Cad. No:42 Tuzla/ISTANBUL

General Principles of Data Protection

We process your personal data in accordance with the general principles of data protection law. These principles are as follows:

• Personal data is processed transparently, lawfully, and fairly.
• Personal data is processed for specified, explicit, and legitimate purposes.
• Personal data is only processed for the purposes specified.
• Personal data is kept accurate and up-to-date.
• Personal data is stored for the time required for processing.
• Personal data is securely stored.

What Types of Data Do We Collect?

As ART Gemi İnşa ve Tersanecilik Hizmetleri A.Ş., we process your personal data in accordance with the principles set forth in Article 4 of the Personal Data Protection Law (“KVKK”) and Article 5 of the General Data Protection Regulation (GDPR). The personal data we process includes:

• Identity Information: Name, surname, company name for sole proprietors, signature/signature circular, Turkish ID number, passport information, gender, date of birth
• Contact Information: Phone number, email address, work address, residential address, phone call records
• Professional Experience Information: Position/title, department, employer, resume, education information
• Visual and Audio Records: Photographs, videos, and audio recordings
• Financial Information: Bank account-IBAN information, amount information, invoice details, enforcement/debt information
• Legal Process Information: Information in correspondence with judicial authorities, personal data in lawsuits/enforcement files

Where Do We Obtain This Data?

• Automatically via the website http://www.artshipyard.com/ and forms on the site
• Non-automated and partially automated methods, such as via legal documents and notifications
• Non-automated methods through documents you have provided to us
• Non-automated and partially automated methods from relevant public institutions and organizations
• Partially automated methods via email
• Non-automated methods through oral communication
• Non-automated methods through physical documents sent to us
• Automatically or non-automatically through applications
• Non-automated methods through contracts

What Are Our Purposes for Processing This Data and What Legal Grounds Do We Rely On?

The legal grounds for processing data under KVKK include the following:

• Explicit consent (“Art. 5/1, Art. 6”)
• Clearly stipulated by law (“Art. 5/2-a, Art. 6/3”)
• Necessary for life or bodily integrity protection in cases of impossibility (“Art. 5/2-b”)
• Processing required for the performance of a contract (“Art. 5/2-c”)
• Required for fulfilling legal obligations (“Art. 5/2-ç”)
• Data made public by the individual (“Art. 5/2-d”)
• Necessary for the establishment, exercise, or defense of legal claims (“Art. 5/2-e”)
• Necessary for the legitimate interests of the data controller, provided this does not harm the individual’s rights and freedoms (“Art. 5/2-f”)

Under the GDPR, the legal grounds include:

• Consent (“Art. 6/1-a”)
• Necessary for the performance of a contract (“Art. 6/1-b”)
• Compliance with a legal obligation (“Art. 6/1-c”)
• Protection of vital interests (“Art. 6/1-d”)
• Performance of a public interest task (“Art. 6/1-e”)
• Necessary for legitimate interests of the controller, except where overridden by the rights of the data subject (“Art. 6/1-f”)

Purposes of Processing Data

We collect and process your data for the following purposes:

• Identity Information: To verify your identity; to conduct business activities and ensure oversight; for communication purposes; to process payments; to comply with legal obligations; to follow up on legal and judicial processes; to carry out contract processes; to process invoices; to create and reconcile current accounts; to manage requests and complaints.
• Contact Information: For business activities and oversight; for communication purposes; to comply with legal obligations; to follow up on legal and judicial processes; to carry out contract processes; to process invoices; to create and reconcile current accounts; to manage requests and complaints.
• Professional Experience Information: For business activities and oversight; for communication purposes; to carry out contract processes; to follow up on legal and judicial processes.
• Financial Information: For business activities and oversight; to process payments; to follow up on legal and judicial processes; to carry out contract processes; to process invoices; to create and reconcile current accounts.
• Legal Process Information: For business activities and oversight; to comply with legal obligations; to follow up on legal and judicial processes; to carry out contract processes; to process invoices.
• Request/Complaint Information: To manage requests and complaints.

Who Do We Share Your Data With?

We may share your personal data with the following parties:

• Courts and competent public institutions for legal and judicial processes
• Public institutions and organizations for fulfilling legal obligations
• Law firms for legal processes
• Banks for payment processes
• Related subsidiary companies for managing requests and complaints
• Independent auditors for audit processes
• Suppliers for business activities and oversight
• Private and legal entities for necessary correspondence and communication activities

We do not share your personal data with unauthorized third parties.

Storage and Destruction of Personal Data

We store your personal data in accordance with the purpose of processing, ensuring security by taking all necessary technical and administrative measures. If personal data is no longer needed and there is no legal obligation to retain it, we will destroy it.

Your Rights Under the KVKK (PDPL)

As a data subject, you have the right to:

• Learn whether personal data is being processed
• Request information about the processing of personal data
• Learn the purposes of processing and whether the data is used in accordance with those purposes
• Know the third parties to whom personal data is transferred, domestically or internationally
• Request correction of incomplete or inaccurate data
• Request the deletion or destruction of personal data if the reasons for processing no longer exist
• Object to decisions based solely on automated processing, including profiling, that may have adverse effects
• Request compensation for damages arising from unlawful processing

You can submit your requests to us in accordance with the procedures outlined in the “Communiqué on the Procedures and Principles of Application to the Data Controller.” Requests will be evaluated and responded to within thirty (30) days free of charge. If evaluating the request incurs a cost, a fee may apply according to the tariff set by the Personal Data Protection Board.

If you wish to receive detailed information about the data processing processes, you can contact us.