Art Shipyard | GDPR
Art Shipyard | GDPR
GDPR

ART SHIPBUILDING AND MARITIME SERVICES INC.

PERSONAL DATA PROCESSING GENERAL INFORMATION STATEMENT

ART SHIPBUILDING AND MARITIME SERVICES INC.., as per the Law on Protection of Personal Data numbered 6698 (“PDPL”) and relevant legislation, has prepared this information text to inform our customers, business partners, and users of our website who use our services within the framework of our company’s activities concerning the processing, storage, and transfer of personal data for reasons such as Labor Law, Social Security, SGK incentives, finance, and business management.

What Data is Collected and What is the Purpose of Data Collection?

Within the scope of the services provided by our company, which is engaged in the production, import, and export of all kinds of lighting fixtures, we collect the following data:

  1. Identity information
  2. Contact information
  3. Financial data
  4. Other data

1. Identity Information:

Description: These are data related to identifying an individual’s identity.

Source of Collection: We collect identity information from employees, job candidates, employees of our suppliers, authorized personnel of suppliers, job candidates, customers, the candidate application form on the website, participants in events such as fairs, exhibitions, and visitors, as well as from contracts and business connections.

Content: The content includes information such as name, surname, Turkish Republic identification number, tax number, Social Security Institution registration number, photograph, copy of ID, signature, and similar data.

Purpose of Data Collection: We collect personal data from our customers for the purpose of invoicing, product delivery, or service performance, as well as for advertising and marketing purposes. For ensuring security in building entrances and exits, we collect data from visitors. In the context of performing services such as product delivery and in accordance with our legal obligations, we collect personal data from business connections.

We are obligated to record the identity information of our employees in accordance with labor and social security legislation. For evaluating job applications of prospective employees, we collect their identity information. Regarding suppliers, subcontractors, and individuals with whom we have similar business relationships, we collect data to fulfill commercial requirements, obligations, and any contractual commitments.

2. Contact Information:

Description: Personal data that enables communication with an individual.

Source of Collection: Communication information is collected from job candidates, employees of our suppliers, authorized personnel of suppliers, job candidates, customers, the candidate application form on the website, participants in events such as fairs, exhibitions, visitors, contracts, and business connections.

Content: It includes data such as home and work addresses, mobile phone number, home phone number, postal address, and email address.

Purpose of Data Collection: We collect communication information to facilitate communication with customers, business connections, program guests, and participants in the context of the services we provide and our commercial activities in our industry. For ensuring security in building entrances and exits from visitors. We are obligated to record the communication information of our employees in accordance with labor and social security legislation. For communicating the results of job applications for job candidates, and to fulfill commercial requirements, obligations, and any contractual commitments, we collect data from suppliers, subcontractors, and individuals with whom we have similar business relationships.

3. Financial Data:

Description: Data such as bank account information, credit card details, and invoice information.

Source of Collection: We collect financial data from our customers, suppliers, employees, and third parties we collaborate with.

Content: It includes data such as wages, signature circulars, salaries, bank account information, credit card details, invoice information, and tax numbers.

Purpose of Data Collection: We are obligated to record the financial information of our employees in accordance with labor and social security legislation. We collect the data of individuals with whom we have business relationships to fulfill commercial requirements, obligations, and any contractual commitments.

4. Other Data:

Description: Other data collected within the scope of our commercial activities.

Source of Collection: We collect this data from employees, job candidates, customers, potential customers, visitors, and business connections.

Content: It includes Personal Data such as Employee Information (Information obtained from Supplier employees within the scope of Occupational Health and Safety), Physical Space Security Information (Closed-circuit camera recording images), Customer Transaction Information (Order Information, Payment history, etc.), and other data collected during events and organizations (phone, company worked, company address, title), as well as data collected in complaint and company communication processes.

Purpose of Data Collection: To ensure building security, control employee entrances and exits, conduct marketing and promotional activities, and fulfill commercial requirements, obligations, and any contractual commitments, we collect data from individuals with whom we have business relationships.

What is the Legal Basis for Collecting Your Data?

We process personal data based on legal reasons arising from our obligations in relevant legislation, contractual relationships, and our legitimate interests within the scope of the services we provide in our industry.

How Do We Collect Your Data?

We collect data sometimes through printed forms, sometimes directly through electronic forms, or through meetings and discussions.

Transfer of Your Personal Data to Third Parties

Your personal data may be shared with individuals and institutions authorized by law and the competent authority explicitly authorized by a court order or a request from a competent administrative authority in accordance with our obligations under the legislation or legal regulations.

Transfer of Your Personal Data Abroad

Your personal data may be transferred abroad only if one of the following limited cases exists:

  • If you have explicit consent,
  • In cases envisaged in the Personal Data Protection Law (PDPL) and if there is sufficient protection in the country where the data will be transferred,
  • In cases envisaged in the PDPL, and if there is no sufficient protection in the country where the data will be transferred, but a commitment is given by the relevant country to ensure adequate protection, and the permission of the Personal Data Protection Board (“Board”) is obtained.

Retention Periods for Your Personal Data

The retention periods for your personal data are as follows:

  • If there is a provision in the law or relevant legislation specifying a period for the retention of the data, the data must be retained for at least this period. These data are deleted at the end of the specified period.
  • If there is no legally specified period for the retention of the processed data, the data is retained for the duration specified in the contract between us and you, and the data is deleted immediately and no later than 30 days after the end of this relationship or the expiration of the specified period in the contract – without requiring your request.
  • If there is no legally specified period for the retention of the data, and you request the deletion of the data, the data is deleted immediately and no later than 30 days after your request.

Your Rights Regarding Your Personal Data:

  1. Learning whether your personal data is processed,
  2. Requesting information if your personal data is processed,
  3. Learning the purpose of processing your personal data and whether it is used in accordance with its purpose,
  4. Learning about the third parties to whom your personal data is transferred, whether domestically or abroad,
  5. Requesting the correction of your personal data in case it is incomplete or incorrectly processed,
  6. Requesting the deletion or destruction of your personal data in accordance with the provisions of the PDPL,
  7. In case of correction, deletion, or destruction of personal data, requesting notification to third parties to whom your data has been transferred,
  8. Objecting to the occurrence of a result against you through automated systems,
  9. Requesting the compensation of damages in case your personal data is processed unlawfully.

Exercising Your Rights

You can exercise your rights regarding your personal data by sending your requests to ART SHIPBUILDING AND MARITIME SERVICES INC. either by using the method determined by the Personal Data Protection Board or by using the relevant individual application form of ART SHIPBUILDING AND MARITIME SERVICES INC or by sending a written and wet-signed request to the address Evliya Celebi Mh. Tersaneler Cd. No:42 Tuzla – İstanbul, or by sending an electronically signed request to the registered email address artgemiinsa@hs01.kep.tr. We reserve the right to reject the relevant application if there is an error in the information and documents submitted or if the application is unauthorized.

Response Time for Requests Related to the Processing of Personal Data

We evaluate and respond to your requests regarding personal data processing within a maximum of 30 days from the day your requests reach us. In case our response to your request is negative, we send the justified rejection reasons to the address you specified, electronically or by mail.

How to Obtain More Detailed Information about the Processing of Your Personal Data?

For more detailed information about the processing of your personal data, you can submit a request through the “Data Subject Application Form” on our website.

HOME