Şoteks Etiket Teknolojileri San. Tic. A.Ş.
Clarification Text on the Processing of Personal Data
As Şoteks Etiket Teknolojileri San. Tic. A.Ş. (the “Company”), we inform you, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, of the purposes for which and the legal grounds on which your personal data are processed, to whom they may be transferred, how they are collected, and your rights under Article 11 of the Law.
We process your personal data in line with the principles in Article 4 of the Law: lawfully and fairly; accurately and, where necessary, kept up to date; for specified, explicit and legitimate purposes; in a manner that is relevant, limited and proportionate to those purposes; and only for the period laid down in the relevant legislation or required by the purpose of processing.
1. Data Controller
- Data controller
- Şoteks Etiket Teknolojileri San. Tic. A.Ş.
- Address
- İkitelli OSB Mah. Enkoop Sok. No: 2/C Başakşehir/İstanbul, Türkiye
- Tax office / No.
- İkitelli / 8140830289
- Phone
- 0090 212 613 37 48
- [email protected]
- Registered email (KEP)
- [email protected]
2. Definitions
- Personal data: Any information relating to an identified or identifiable natural person.
- Special categories of personal data: Data relating to a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
- Data controller: The natural or legal person who determines the purposes and means of processing personal data and who is responsible for establishing and managing the data filing system.
- Data filing system: Any physical or electronic recording system in which personal data are structured and processed according to specific criteria.
- Explicit consent: Consent relating to a specific matter, based on information and given with free will. Reading this notice or visiting our website does not constitute explicit consent.
3. Processing Activities, Purposes and Legal Grounds
The table below shows, separately for each relationship, the categories of personal data processed, the purposes of processing and the legal grounds relied on (Articles 5 and 6 of the Law). Only the row that matches your relationship with us applies to you.
| Data subject / activity | Categories of personal data | Purpose of processing | Legal ground |
|---|---|---|---|
| Persons who contact us via the website contact form, email or phone | Identity (name and surname), contact details (email, phone), content of the request or complaint | Assessing and answering the request; providing quotations and information | Directly related to the establishment or performance of a contract (Art. 5(2)(c)); for other requests, legitimate interest, provided that your fundamental rights and freedoms are not harmed (Art. 5(2)(f)) |
| Customers, suppliers and business partners, and their authorised persons and employees | Identity, contact, customer transaction, financial and legal transaction data | Running contract and order processes, production and shipment, invoicing and collection, managing the business relationship | Establishment or performance of a contract (Art. 5(2)(c)); legal obligation (Art. 5(2)(ç)); establishment, exercise or protection of a right (Art. 5(2)(e)) |
| Job applicants who apply through our careers channel | Identity, contact, education and professional experience shared in the CV | Assessing the application and communicating with the applicant | Directly related to the establishment of a contract (employment contract) (Art. 5(2)(c)) |
| Visitors to Company premises | Identity, visit entry/exit details, video recordings in areas where security cameras are used | Ensuring the security of premises and visitors | Legitimate interest (Art. 5(2)(f)); legal obligation (Art. 5(2)(ç)) |
| Website visitors | Transaction security data (server logs such as IP address, date and time of access, browser information) | Providing the website securely and without interruption; preventing misuse | Legitimate interest (Art. 5(2)(f)); legal obligation where required by legislation (Art. 5(2)(ç)) |
| Persons who apply to the Company under the Law | Identity, contact, content of the request | Receiving the application, verifying identity and responding | Legal obligation (Art. 5(2)(ç)) |
| Persons who wish to receive messages about our products and services | Identity, contact | Sending promotional and information messages | Only on the basis of explicit consent obtained separately (Art. 5(1)) |
We do not request special categories of personal data through our website. Please do not include special categories of data such as health, religion or association membership in your CV or messages. If processing such data becomes necessary, it is carried out only on one of the grounds in Article 6(3) of the Law and with the adequate measures determined by the Board.
4. Method of Collection
Your personal data are collected through the contact form on the website, email, phone, written documents and contracts, face-to-face meetings, visitor records and server logs, by fully or partly automated means or by non-automated means as part of a data filing system.
5. Transfer of Personal Data
Your personal data may be transferred to the following recipient groups, limited to the purposes above and in accordance with Articles 8 and 9 of the Law:
- Authorised public institutions and organisations: where required by a legal obligation or at the request of competent authorities.
- Shareholders, group companies and affiliates: for conducting business activities and corporate management.
- Suppliers, business partners and companies and institutions we cooperate with: for running contract and order processes.
- Service providers: companies providing IT, hosting and email services, and companies supporting us in areas such as security, health, occupational safety and legal matters, only to the extent required by the relevant service.
Where personal data need to be transferred abroad, the transfer is carried out in accordance with Article 9 of the Law: on the basis of an adequacy decision of the Board concerning the destination country, sector or international organisation; in the absence of such a decision, on the basis of one of the appropriate safeguards listed in the Law; and, if neither is available, only for incidental transfers in one of the exceptional cases provided for in the Law.
6. Retention Period
Your personal data are retained for the period laid down in the relevant legislation or required by the purpose of processing. At the end of that period, your data are erased, destroyed or anonymised ex officio or upon your request, in accordance with Article 7 of the Law and the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
7. Your Rights under Article 11 of the Law
By applying to the Company, you have the right to:
- learn whether your personal data are processed,
- request information if your personal data have been processed,
- learn the purpose of processing and whether your data are used in accordance with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data are transferred,
- request the rectification of your personal data if they are incomplete or inaccurate,
- request the erasure or destruction of your personal data under the conditions set out in Article 7 of the Law,
- request that the rectification, erasure or destruction carried out at your request be notified to the third parties to whom your personal data have been transferred,
- object to a result to your detriment arising from the analysis of the processed data exclusively by automated systems,
- claim compensation for damage you suffer as a result of the unlawful processing of your personal data.
8. How to Apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, applications must be made in Turkish, using one of the following methods:
- by delivering your signed written application by hand to our address above, or by sending it by post, courier or through a notary public;
- by sending it from your registered email (KEP) address to [email protected];
- by sending your application signed with a secure electronic signature or mobile signature to [email protected];
- by sending it to [email protected] from the email address you have previously notified to the Company and that is registered in our systems.
Your application must include your name and surname, your signature for written applications, your Turkish identity number (for foreign nationals, nationality and passport number or, if any, identity number), your residential or business address for notifications, your email address, phone and fax number for notifications (if any) and the subject of your request. You may use our application form or a free-form letter containing this information.
Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request, and the response will be notified to you in writing or electronically. If the action requires an additional cost, the fee set in the Communiqué may be charged. If your application is rejected, the response is found insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any case, within sixty days of the application date.