[ Effective Date: 18.11.2023 ]
Era Mask ("Company" or "Data Controller") protects your personal data by determining the purposes, legal reasons and rights of data owners for the processing of personal data within the scope of the Personal Data Protection Law No. 6698 (KVKK).
The Company is the organization called "Data Controller" in accordance with KVKK, which decides, determines and manages the processing of personal data.
Purposes of Processing Personal Data
As a company, we process your personal data only for certain purposes. These purposes:
- To present the services we offer to you,
- To inform you about special campaigns and discounts,
- Communicating with you,
- To fulfill our legal obligations.
The purposes for which your personal data is processed are limited to the purposes stated above. It is not used for purposes other than these purposes.
Personal Data Collection Methods
Our company may collect personal data necessary for the conduct of business relations, within legal limitations and during various activities carried out verbally, in writing or electronically. Collected personal data is processed in order to effectively carry out the products and services offered by our Company, to offer products and services that meet the needs of customers, to respond to customer demands, to fulfill legal obligations, to carry out in-company reporting and other activities.
Purposes of Processing of Collected Personal Data
As a company, we process your personal data for the following purposes:
- Creating and managing customer and supplier records
- To meet and communicate with your requests regarding our services
- To fulfill our obligations stipulated by the relevant legislation
- Ensuring you benefit from our campaigns
- Conducting customer satisfaction research and improving customer experience
- Managing and updating our legal and technical business processes
- To provide the requested products and services and to carry out sales transactions.
Your personal data processed as a company will not be used for purposes other than those stated above, and will not be transferred or sold to third parties except for legal obligations.
Parties to whom the Processed Personal Data is Transferred and Purposes of Transfer
Your personal data may be transferred to relevant parties where permitted by legal legislation and for the purposes specified in this KVKK disclosure text. These parties; They may be people or organizations with whom we cooperate to offer our products/services, make program partnerships, provide financial services, receive consultancy services, or receive legal support. Additionally, your personal data may be transferred to public institutions and organizations in certain cases.
Your personal data may also be transferred to suppliers providing cloud computing services at home and abroad, where permitted by legal legislation and for the purposes specified in this KVKK disclosure text.
The Company will take the necessary security measures regarding the persons and organizations to whom the transfer is made and will ensure the protection of personal data by making a contract when necessary.
Legal Reason for Collection of Personal Data
The collection, processing and storage of your personal data by the Company is carried out based on the legal reasons specified in Articles 5 and 6 of the Law. Your personal data is collected by the Company for purposes such as fulfilling certain legal obligations, making, executing and performing contracts, and protecting our legitimate interests.
Rights of the Data Owner
Regarding the processing of personal data, the Data Owner has the following rights:
- Learning whether personal data is being processed,
- Requesting information if personal data has been processed,
- Learning the purpose of processing personal data and whether they are used for their intended purpose,
- Knowing the third parties to whom personal data are transferred at home or abroad,
- Requesting correction of personal data if they are incomplete or incorrectly processed and requesting that the transactions carried out in this context be notified to third parties to whom personal data have been transferred,
- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the law and other relevant legislation and requesting that the transactions carried out in this context be notified to third parties to whom personal data have been transferred,
- To object to the emergence of a result against the individual by analyzing the processed data exclusively through automatic systems and to request that the transactions carried out in this context be notified to third parties to whom personal data has been transferred,
- Requesting compensation for damages in case of damage due to unlawful processing of personal data.
The Data Owner may exercise the rights listed above by applying to the Data Controller in accordance with the KVK Law. Relevant applications are concluded free of charge by the Data Controller as soon as possible and within 30 days at the latest. However, if the transaction requires an additional cost, the Data Controller may charge the fee at the tariff determined by the Personal Data Protection Board.
Data Security
The Company is committed to taking the necessary technical and administrative measures to ensure the security of personal data. In this context, our business takes the necessary precautions in line with national and international standards regarding data security and takes all necessary measures to protect the confidentiality, integrity and accessibility of data.
For this purpose, our business uses databases to which only authorized persons are allowed to access, uses up-to-date security software, performs data backup, and performs tests to regularly detect and close vulnerabilities in the systems. In addition, our company provides regular training to its employees regarding the privacy and security of personal data.
However, despite all these measures, it is not possible to completely eliminate the risks that may arise due to technological developments. Therefore, in the event of a possible data breach, our business will make every effort to inform data owners as soon as possible by taking all necessary steps and to fulfill other legal obligations in this regard.
Complaints and Contact Information Regarding the Processing of Personal Data
Data owners may submit any requests regarding the processing of their personal data to the Data Controller. Data owners can also submit their complaints directly to the Data Controller regarding the processing of their personal data.
As a company, you can share your requests regarding the protection of personal data with us via the following contact information:
- +90 216 394 47 59
- Orta Mh. Demokrasi Cd. Mümtaz Sk. No:15, 34956 Tuzla / İstanbul
In addition, you can forward your complaints regarding the protection of personal data to the Personal Data Protection Authority in accordance with the relevant legislation. The contact information of the institution is as follows:
Personal Data Protection Authority
- Bilkent Plaza B3 Blok 06560 Çankaya/Ankara
- +90 312 216 50 00
- kvkk@kvkk.gov.tr