Data Controller

BOYÇELİK METAL INDUSTRY AND TRADE INC.

Mersis No: 0-1820-4754-6100019
Internet Address: https://www.boycelik.com.tr/
Telephone Number: 0 (352) 322 15 30
Address: O.S.B. 37.Cad. No:4, 38070 Melikgazi, Kayseri, Turkey

2) Purposes of Processing Personal Data

Your personal data is processed by Boyçelik A.Ş., as the data controller, for the purposes and scope set out below, in accordance with Articles 5 and 6 of the KVKK:

• To improve, develop, diversify our products and services, and to offer alternatives to the natural/legal persons with whom we are in a commercial relationship,
  For the purpose of ensuring communication and cooperation between Erciyes Anadolu Holding and its subsidiary companies by Boyçelik A.Ş., providing coordination, carrying out joint business areas, determining the needs of our customers and employees, fulfilling contractual obligations, conducting advertising and marketing activities, ensuring customer follow-up, and ensuring occupational health and safety and business continuity,
• In order to elevate and improve our service standards,
• For the determination and implementation of our commercial business strategies,
• For the complete performance by Boyçelik A.Ş. of the contracts to which Boyçelik A.Ş. is a party, and for the purpose of checking that the other parties to these contracts have performed their obligations under the contracts completely,
  In order to ensure the legal security of individuals/legal entities in a commercial relationship with Boyçelik A.Ş.,
• In accordance with the laws in force, in order to prepare the commercial books, invoices, bank cheques and payroll documents that are to be prepared by Boyçelik A.Ş.,
• In order to ensure the safety of employees, guests and buildings belonging to Boyçelik A.Ş. and to control access,
• For the purpose of evaluating the recruitment processes of candidate employees, creating employee personal files, and maintaining Boyçelik A.Ş.’s human resources policies,
• In order to increase the morale and motivation, performance level, and satisfaction of the personnel working within Boyçelik A.Ş., as well as their interactions with each other and the company, and to ensure their commitment to the company,
• In order to provide internet access to guests in the public areas of Boyçelik A.Ş.,
• For the purpose of carrying out the commercial purchasing transactions of Boyçelik A.Ş.,
  For the purpose of conducting corporate correspondence of Boyçelik A.Ş.,
• For the purposes of generating statistical data in the event of a visit to our website, recording visitor information, and ensuring returns,
• With these, for purposes such as carrying out our necessary quality and standard inspections or fulfilling our other obligations determined by laws and regulations.

3) Transfer of Personal Data

The personal data we process, within the framework of the above-mentioned purposes, taking into account Articles 8 and 9 of the KVKK:

• For the execution and continuity of our commercial activities, for our business partners,
• For the purpose of providing products and services, to our suppliers on a limited basis,
• To fulfil the legal obligations stipulated in the laws and ensure safety, to the relevant public institutions and organisations, primarily including the Social Security Institution (SGK),
• In order to meet the social and financial rights of the individuals employed by Boyçelik A.Ş., with banks in particular, as well as other private and public legal entities,
• in line with the requests of the relevant public institutions and organisations and limited to the purposes of these requests, to legally authorised public institutions and organisations and judicial bodies,
• To establish a common database, ensure coordination and cooperation for Erciyes Anadolu Holding A.Ş. and its subsidiary companies,
• For the purpose of creating databases of operating systems and computer programs used by our company and Erciyes Anadolu Holding, ensuring programme functionality, and enabling programme maintenance and repair, to software firms and technology companies established domestically and abroad,
• To domestic and international technology companies that provide cloud technology services and from whom we receive cloud service.,
  For customer tracking and the fulfilment of customer needs, to Erciyes Anadolu Holding and its affiliated companies, and to our company's and Erciyes Anadolu Holding's affiliated companies' domestic and international business partners, dealers, and suppliers,
• For the purpose of holding social and cultural events such as activities and conferences, to the companies affiliated with Erciyes Anadolu Holding and to the firms we receive services from operating in this field,
• Within the scope of occupational health and safety measures, employees' health information can be transferred to relevant healthcare institutions and insurance companies to enable them to work in a healthy work environment.

4) Method and Legal Basis of Personal Data Collection

Your personal data is collected by Boyçelik A.Ş. or by real or legal persons authorised to process data on behalf of Boyçelik A.Ş., through declarations, application forms, forms filled out via the website, documents requested for the creation of personnel files, various contracts, all kinds of information forms, surveys, job application forms, via verbal, written or electronic channels through call centres, within the scope of your explicit consent or the personal data processing conditions stipulated by law.
This information is obtained for the purpose of being able to provide our commercial and administrative activities within the framework of the law, and in this scope, for Boyçelik A.Ş. to be able to carry out its services, sustain its commercial life, and fulfil its legal responsibilities completely and accurately.

5) The Data Subject's Rights Under the KVKK

Individuals whose personal data is processed within the scope of IBoyçelik A.Ş. have the following rights in accordance with Article 11 of the KVKK:
To find out if your personal data is being processed,
To request information about whether personal data has been processed,
To learn the purpose for which personal data is processed and whether it is used in accordance with its purpose,
Third parties, recipients, and categories of recipients to whom personal data is or will be transferred, domestically or internationally,
The right to request the correction of personal data if it has been processed incompletely or incorrectly, and the right to request that these actions be notified to third parties to whom personal data has been transferred,
The right to request the deletion or destruction of personal data, or to request the cessation of such processing activities, in cases where the reasons requiring processing have ceased to exist, even if the data has been processed in accordance with the KVKK and other relevant laws, and to request that this action be communicated to third parties to whom the personal data has been transferred,
The right to object to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning you or similarly significantly affects you.,
Requesting compensation for damages incurred due to unlawful processing of personal data.
Interested parties can submit their requests regarding these rights by means of a notice of default to be sent via notary to our company, Boyçelik A.Ş., at O.S.B. 37.Cad. No:4, 38070 Melikgazi, Kayseri, or by personally applying to our company with identification. The requests of the interested party are evaluated and decided upon as soon as possible, and at the latest within thirty (30) days, free of charge. If the evaluation and decision-making process requires an additional cost, the fee specified in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller shall be applied. After applying to our company, if the interested parties are not satisfied with the response regarding the said application, they can file a complaint with the Personal Data Protection Authority.