SENTA PLASTİK A.Ş.
INFORMATION ON PROCESSING AND PROTECTION OF PERSONAL DATA
As Senta Plastik San. Tic. Ltd. Şti. (“Company”), we attach utmost importance to the legal processing and protection of personal data by the Law on the Protection of Personal Data No. 6698 (“Law”) and act with this care in all our planning and activities. The main purpose of this information is to make explanations about the systems for processing and protecting personal data by the law and the purpose of the Law and to inform the persons whose personal data is processed by our Company, especially Company Stakeholders, Company Authorities, Company Business Partners, Employees and Employee Candidates, Visitors, Company Customers, Potential Customers and Third Parties. In this way, it is aimed to ensure full compliance with the legislation in the processing and protection of personal data activities carried out by our Company and to protect all rights of personal data owners arising from the legislation regarding personal data.
Scope of Information and Personal Data Owners
This information has been prepared for the persons whose personal data is processed by our Company, primarily Company Shareholders, Company Officials, Company Business Partners, Employees and Employee Candidates, Visitors, Company Customers, Potential Customers and Third Parties, through automatic or non-automatic means provided that it is part of any data recording system, and will be applied within the scope of these specified persons.
Our Company enlightens the Personal Data Owners about the Law by publishing this information on its website.
General Principles in Processing of Personal Data Personal Data is processed by the Company in accordance with the procedures and principles stipulated in the Law and this Policy. The Company acts with the following principles when processing Personal Data:
Personal Data is processed in accordance with the relevant legal rules and the requirements of the rule of honesty.
Personal Data is ensured to be accurate and up-to-date. In this context, issues such as the sources from which the data is obtained being specific, its accuracy being confirmed, and the evaluation of whether it needs to be updated are carefully taken into consideration.
Personal Data; is processed for specific, clear and legitimate purposes. The legitimate purpose means that the Personal Data processed by the Company is related to the work it does or the service it offers and is necessary for these purposes.
Personal Data is related to the purpose in order to achieve the purposes determined by the Company, and the processing of Personal Data that is not related to the purpose or is not needed is avoided. It limits the processed data only to what is necessary for the purpose to be achieved. Within this scope, the Personal Data processed is related to the purpose for which it is processed, limited and proportionate.
If there is a period foreseen for the storage of data in the relevant legislation, it complies with these periods; otherwise, it stores Personal Data only for the period necessary for the purpose for which it is processed. If there is no valid reason for the further storage of Personal Data, the said data is deleted, destroyed or anonymized.
2.2. Conditions for Processing of Personal Data
The Company does not process Personal Data without the explicit consent of the data owner. In the event that one of the following conditions exists, Personal Data may be processed without the explicit consent of the data owner.
The Company may process the Personal Data of Personal Data Owners in cases clearly stipulated by law, even without explicit consent. For example; in accordance with Article 230 of the Tax Procedure Law, the explicit consent of the relevant person will not be sought for the name of the relevant person to be included on the invoice.
Personal Data may be processed without explicit consent for the protection of the life or physical integrity of the person or another person who is unable to give his/her consent due to actual impossibility or whose consent cannot be recognized as valid. For example, in a situation where the person is unconscious or mentally ill and his/her consent is not valid, the Personal Data of the Personal Data Owner may be processed during medical intervention in order to protect life or physical integrity. In this context, data such as blood type, past illnesses and surgeries, and medications used may be processed through the relevant health system.
Personal Data belonging to the parties to a contract may be processed provided that it is directly related to the establishment or execution of a contract by the Company. For example, the account number of the creditor party may be obtained for the payment of money as required by a contract.
The Company may process the Personal Data of the Personal Data Owners if it is necessary to fulfill its legal obligations as the data controller. The Company may process the Personal Data of the Personal Data Owners that have been made public by them, in other words, disclosed to the public in any way, in order to protect them.
