PERSONAL DATA PROCESSING CLARIFICATION NOTICE
This clarification notice has been prepared by Marmara Lastik ve Mekanik Servisleri Sanayi ve Ticaret A.Ş. (“Company”), in its capacity as the data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“PDPL”) and other relevant legislation.
In the course of our Company's activities, personal data regarding you, which identifies or can identify you, is processed by us in accordance with the provisions of the relevant legislation and the principles outlined below, as part of the relationship you have established with us.
Data Controller
In accordance with the Personal Data Protection Law No. 6698 (“PDPL”), your personal data is collected and processed by Marmara Lastik ve Mekanik Servisleri Sanayi ve Ticaret A.Ş. (“Company”) as the data controller, within the scope explained below.
b. Methods of Collecting Personal Data and Legal Basis
Your personal data is collected wholly or partially through automated or non-automated methods; via any verbal, written, or electronic means; documents submitted to us, job application forms, customer information forms, postal and e-mail communications, call centers, records of our employees in physical environments (verbal, written, and visual records), and digital recordings via security cameras, etc. It is collected via various channels such as phone, fax, e-mail, the website (online appointment forms, e-mail communication forms, cookies, and similar technologies), third parties such as group companies, business partners, service/product suppliers, employment agencies, job portals, and for the duration required for storage.
In this context, the personal data processed by our company includes:
- Name-surname
- Identity number
- Nationality
- Parent’s names
- Place and date of birth (identity card, driver's license, passport)
- Vehicle license plate and registration information
- Address
- E-mail address
- Phone and fax numbers
- Tax number
- IBAN number
- Credit card information
- Customer number
- Accounts payable/receivable details
- Cheque promissory notes and Findeks query information
- Signature data
- Audio and visual recordings
- Digital images of security camera recordings
- IP and cookie data on the website.
In addition, data contained in documents as original copies or copies that include personal data and any requests or complaints submitted to us are also covered.
No sensitive personal data (e.g., health data) is processed by our company.
Your personal data is collected and processed based on your explicit consent, or other legal bases outlined below:
- The processing of personal data is necessary for the performance of a contract with you.
- Compliance with our legal obligations.
- Processing is necessary for the establishment, exercise, or defense of legal claims.
- Processing is necessary for the legitimate interests pursued by the company, provided this does not affect your fundamental rights and freedoms.
- Required by law.
- Personal data made public by you.
In these cases, your personal data is processed without needing your explicit consent in accordance with the relevant legal grounds under the Personal Data Protection Law.
c. Purposes of Personal Data Processing
Your personal data is processed under one of the conditions listed in Article 5, Paragraph 2 of the PDPL, including:
- To fulfill legal obligations and professional/legal requirements
- For proper planning and execution of our commercial relations, partnerships, and strategies
- To ensure the legal, commercial, and physical security of our company and its business partners
- To facilitate our corporate operation
- To improve and apply our human resources policies
- For the functionality and information security of our information systems
- To resolve issues and improve services on our website
- To create visitor records, follow up requests and complaints, sales support, and after-sales services
- Financial and accounting operations, customer relations, and risk management
- Legal process management and physical security
- Customer satisfaction and compliance with legal processes.
In cases where you provide explicit consent, your personal data may also be processed for specific activities such as:
- Best commercial services and personalized offerings, marketing, re-marketing, and market research
- Customer relationship management and communication with you, marketing campaigns, promotions, and notifications.
These personal data will be processed in compliance with the following principles:
- Fair and lawful processing,
- Accurate and up-to-date, where necessary,
- Specific, clear, and legitimate purposes,
- Relevant, limited, and proportional to the purpose,
- Retained for as long as necessary for the purposes outlined.
d. Who Can Your Personal Data Be Transferred to and for What Purposes
Your personal data may be transferred to group companies, affiliates, business partners, service providers, legal authorities, and other third parties in accordance with the legal grounds specified in the PDPL, particularly for fulfilling contractual or legal obligations.
Your personal data may also be transferred to foreign entities if necessary for fulfilling the above purposes and based on the applicable provisions of the Personal Data Protection Law.
e. Your Rights Under the PDPL
As per Article 11 of the PDPL, you have the following rights regarding your personal data:
- Learn whether your personal data is processed,
- Request information about how your personal data is processed,
- Learn the purpose of processing and whether it is being used in accordance with that purpose,
- Be informed of third parties to whom your personal data has been transferred,
- Request corrections if your personal data is incorrect or incomplete,
- Request deletion or destruction of your personal data under the conditions outlined by law,
- Object to the unfavorable consequence of processing through automated systems,
- Request compensation for any damage caused by unlawful processing of your personal data.
For detailed inquiries or requests about your rights, you can contact us via the contact channels specified by the Company.