OSKON Website Personal Data Protection Notice explaining the collection, processing, protection and transfer of personal data and your rights under Turkish Personal Data Protection Law No. 6698.

WEBSITE PERSONAL DATA PROTECTION NOTICE

1. WHAT IS THE PURPOSE AND SCOPE OF THIS NOTICE?

OSKON (“OSKON” or the “Organisation”) attaches great importance to the security and protection of the personal data you share with us. In the circumstances described in this Notice, OSKON acts as a “Data Controller”. We process your personal data in accordance with Turkish Personal Data Protection Law No. 6698 (the “KVKK” or the “Law”) and implement appropriate, proportionate and adequate administrative and technical safeguards to protect it. For more detailed information about the scope, context and approach adopted by the Organisation when processing personal data, please also review our Privacy Policy.

This Notice has been prepared to inform visitors to www.oskon.com.tr, which is operated by OSKON, and individuals who contact our Organisation through the website. Responsibility for third-party websites referenced or linked to from our website rests with the respective website operator and owner, not with our Organisation.

2. WHAT ARE THE KEY CONCEPTS RELATING TO PERSONAL DATA?

  • Explicit consent: Freely given, informed consent relating to a specific matter.
  • Anonymisation: Rendering personal data impossible to associate with an identified or identifiable natural person under any circumstances, even when matched with other data.
  • Data subject: The natural person whose personal data is processed.
  • Personal data: Any information relating to an identified or identifiable natural person.
  • Employee handling personal data: An employee who processes the personal data of data subjects on behalf of the Organisation as part of their job description.
  • Processing of personal data: Any operation performed on personal data, whether wholly or partly by automated means or by non-automated means forming part of a data filing system, including collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification or restriction of use.
  • Board: The Turkish Personal Data Protection Board.
  • Authority: The Turkish Personal Data Protection Authority.
  • KVKK: Turkish Personal Data Protection Law No. 6698.
  • Special categories of personal data: Data concerning a person’s race, ethnic origin, political opinion, philosophical belief, religion, religious denomination or other beliefs, appearance and clothing, association, foundation or trade-union membership, health, sex life, criminal convictions and security measures, as well as biometric and genetic data.
  • Data processor: A natural or legal person who processes personal data on behalf of and under the authority granted by the Data Controller.
  • Data filing system: A filing system in which personal data is structured and processed according to specified criteria.
  • Data controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.
  • Joint data controller: Data controllers who jointly use specified personal data and carry out activities together in relation to the methods and purposes of processing.
  • Independent data controller: A data controller who independently determines the purposes and methods of processing personal data without dependence on another data controller.

3. WHO ARE WE AS THE DATA CONTROLLER?

OSKON acts as the “Data Controller” in relation to the personal data of website visitors and users of services it provides online. In that capacity, OSKON fulfils its obligations arising from legislation and decisions of the Personal Data Protection Board by implementing administrative measures and appropriate, proportionate technical safeguards.

Our corporate identity and contact details for personal-data matters are as follows:

Company Name:Oskon Otomasyon Pazarlama Elektrik End. İnş. San. ve Tic. Ltd. Şti.
Address:Aydınlı Mah. Yanyol Cad. Melodi Sk. S.S. Bilmo Sanayi Sitesi No:2/62 Tuzla/İstanbul
Website:www.oskon.com.tr
Telephone:+90 (216) 593 08 18
Email:kvkk@oskon.com.tr

4. WHAT IS THE SCOPE OF OUR OBLIGATION TO INFORM?

Article 10 of Law No. 6698 requires data controllers to inform individuals whose personal data they process. This obligation requires you to be informed about your rights under Article 11 of the KVKK, the identity of the Data Controller, the purposes of processing personal data, the persons to whom it is transferred, the purposes and methods of transfer, the legal grounds for collection and the procedure through which you may apply as a data subject.

OSKON aims to inform you that your personal data is processed within the limits and subject to the conditions prescribed by applicable legislation.

5. WHICH CATEGORIES OF PERSONAL DATA DO WE PROCESS?

We process identity, contact, personnel and transaction-security information relating to visitors to our website.

6. FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?

In accordance with the principles prescribed by the KVKK, your personal data is processed through our websites and internet services for the purposes of:

  • Conducting commercial activities,
  • Ensuring business continuity,
  • Planning and executing business strategies,
  • Delivering presentations, promotions and information,
  • Conducting promotion and communication through electronic channels,
  • Managing media relations,
  • Informing the public,
  • Managing business relationships,
  • Sharing images from events,
  • Conducting sales and marketing activities,
  • Following up requests for information, support and complaints,
  • Operating internet services,
  • Delivering sales of services,
  • Conducting dealer-related operations,
  • Promoting services and products,
  • Ensuring services are managed effectively,
  • Receiving job applications.

Your personal data is processed for the purposes listed above.

7. HOW DO WE PROCESS AND PROTECT PERSONAL DATA?

We process your data in accordance with the principles set out in Article 4 of the Law and, except where one of the legal grounds specified in Article 5 applies, after obtaining your explicit consent. We collect personal data by automated or non-automated means, verbally, in writing or electronically, through channels in Türkiye and abroad such as offices, websites and social-media platforms.

The personal data of visitors and users is processed on the servers hosting our websites and internet services and on corporate fixed and mobile devices used for support, operation and development. OSKON takes all necessary technical and administrative safeguards—provided they are appropriate and proportionate—to protect collected personal data, prevent unauthorised access and avoid harm to customers and prospective customers. Within this framework, we take care to keep applications, software and information systems compliant with applicable standards and up to date, enter into data-transfer agreements with recipients, and observe our Privacy Policy throughout the Organisation.

8. WITH WHOM AND WHY DO WE SHARE PERSONAL DATA?

To ensure business continuity and deliver services, OSKON may transfer collected and processed personal data, in accordance with Article 8 of the Law, to organisations with which it has a business relationship; service providers and solution partners in Türkiye and abroad from which it receives administrative, legal and technical services; and competent public authorities where legally required. Detailed information about the parties with whom we share personal data in Türkiye and abroad and the relevant methods is available in our Privacy Policy.

As Data Controller, OSKON conducts the controls reasonably available to ensure that recipient institutions and organisations fulfil their obligations under the Law and makes those obligations contractually binding through data-transfer agreements.

8.1. What Is the Nature and Scope of Domestic Transfers?

Personal data is shared for the purposes described below:

  • With group companies, business partners and affiliates in Türkiye and abroad, as well as consultancy firms and similar service providers, for planning and conducting commercial activities;
  • With organisations providing relevant services so content can be used in print, visual media and online channels for promotion and marketing;
  • With organisations providing relevant services for ensuring business continuity and planning and executing human-resources, occupational-health-and-safety and emergency-response processes and strategies;
  • Where necessary to fulfil obligations arising from legislation and judicial decisions, with private institutions such as business partners, consultancy firms and suppliers and with competent authorities such as public institutions and judicial bodies;
  • With banks, insurance organisations, dealers and information-technology providers for email, customer management, accounting and human-resources management;
  • With organisations providing vehicle-tracking services;
  • With information-technology service providers to maintain the infrastructure, applications and security of information systems.

8.2. What Is the Nature and Scope of International Transfers?

OSKON shares personal data with service providers established abroad for the operation of our website, improvement of services, conduct of office operations, provision of services to users and visitors, ensuring satisfaction, meeting expectations and maintaining communication. Within this scope, data may be shared with:

  • US-based WhatsApp (Facebook) for instant messaging,
  • US-based Google and WeTransfer for file sharing,
  • US-based Apple and Google for mobile operating systems and associated services,
  • US-based Facebook, Twitter, Instagram, YouTube and Google for social-media services.

Each service provider’s privacy policy is available through the following links:

9. ON WHAT LEGAL GROUNDS DO WE PROCESS PERSONAL DATA?

Your personal data is processed under the Law.

In particular, it is processed under the legal grounds specified in Article 5 of the Law:

  • Where the data subject has given explicit consent;
  • Where processing is “expressly provided for by law”, including under Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications; the Regulation on Public Internet Access Providers dated 11 April 2017 and numbered 30035; Turkish Code of Obligations No. 6098; Turkish Commercial Code No. 6102; and similar laws, regulations and communiqués;
  • Where processing is necessary for “the establishment or performance of a contract”, including fulfilling a contract to which you are party, or for “the Data Controller to fulfil its legal obligations”, including responding to requests from courts and public institutions seeking information or documents;
  • Where the data has been “made public by the data subject”;
  • Where processing is necessary for “the establishment, exercise or protection of a right”, including retaining evidence for potential disputes and obtaining legal advice and technical support. In such cases, processing is carried out without seeking explicit consent.

10. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As a personal-data subject, you have the following rights under Article 11 of the KVKK:

  • To learn whether your personal data is being processed,
  • To request information if your personal data has been processed,
  • To learn the purpose for which your personal data is processed and whether it is used in accordance with that purpose,
  • To know the third parties in Türkiye or abroad to whom your personal data has been transferred,
  • To request correction of personal data processed incompletely or inaccurately and request that the correction be notified to third parties to whom the data was transferred,
  • To request the deletion or destruction of personal data where the reasons requiring its processing cease to exist, even though it was processed in accordance with the KVKK and other applicable laws, and request that the operation be notified to third parties to whom the data was transferred,
  • To object to an outcome arising against you as a result of processed data being analysed exclusively through automated systems,
  • To claim compensation for damage suffered as a result of the unlawful processing of personal data.

11. HOW CAN YOU APPLY FOR INFORMATION?

You may obtain information about your rights and the application process under Article 11 of the Law, which governs the rights of data subjects, through our Data Subject Applications page and apply to us using the “Data Subject Application Form” available on that page.