Disclosure Text

Dear Customer / Supplier,

This Disclosure Text has been prepared by Burkar Otomotiv San. ve Tic. LTD Şti. as the data controller, in accordance with the “Obligation to Inform of the Data Controller” set forth in Article 10 of the Personal Data Protection Law No. 6698. Your personal data including your name, address, phone number, e-mail address, image recordings within the workplace, voice recordings in case you call the company phone, contract information, technical documents and project information within the scope of the contract, and personal data obtained within the scope of production activities may be processed by the data controller “Burkar Otomotiv San. ve Tic. LTD Şti.” (hereinafter referred to as the “Company”) within the framework of this Disclosure Text.

Your personal data collected by the Company is processed in accordance with the conditions for processing personal data specified in Articles 5 and 6 of Law No. 6698, in connection with, limited to, and proportionate to the purposes for which they are processed.

Purposes of Processing Your Personal Data

The main purposes of processing your personal data are: implementing the provisions stipulated by Law No. 6698, Turkish Code of Obligations No. 6098, Turkish Commercial Code No. 6102, Enforcement and Bankruptcy Law No. 2004, Tax Procedure Law No. 213 and other legal legislation; personnel management; fulfilling our obligations regarding information retention, reporting and notification required by judicial and administrative authorities. In addition:

• To ensure quality, training, and security improvement (e.g., regarding recorded phone calls made to our contact numbers)
• To resolve complaints and process requests for data access or correction.
• To communicate with you and others as part of the business.
• To manage our infrastructure and business operations and to comply with internal policies and procedures, including those related to audit, finance and accounting, billing and collections, information systems, business continuity, records, document and print management.
• Your data will be processed to determine and defend legal rights; to protect our activities or the activities of our business partners, our rights, privacy, security, or property and/or the aforementioned assets belonging to you or others, and to apply available remedies.

Persons/Institutions to Which Your Personal Data May Be Transferred and Purposes of Transfer

The main persons or institutions to which your personal data may be transferred are: institutions and organizations permitted by Law No. 6698, Turkish Code of Obligations No. 6098, Turkish Commercial Code No. 6102, Enforcement and Bankruptcy Law No. 2004, Tax Procedure Law No. 213 and other legal legislation; public legal entities such as the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Customs and Trade, and the Ministry of Labor and Social Security; and organizations located domestically or abroad from which we receive services or cooperate with in order to conduct our activities within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

Method and Legal Reason for Collecting Personal Data

Your personal data processed by the Company is obtained directly from you for the purpose of establishing a business relationship; and is also obtained during the continuation of the business relationship as required by the nature and execution of the work.

Your Personal Data may be processed without your explicit consent within the scope of Articles 5.2 and 6.3 of the Personal Data Protection Law in order to fulfill our legal obligations, establish or perform a contract, fulfill legal obligations, establish, use or protect a right, and for the protection of our legitimate interests without harming your fundamental rights and freedoms, and for personal data you have made public. Within the purposes stated in our Personal Data Protection Policy on our website, it will be processed based on your explicit consent within the scope of Articles 5.1 and 6.2 of the Personal Data Protection Law.

Your personal data collected by the Company may be processed in cases such as:

• Explicitly stipulated in laws.
• It is necessary to protect the life or physical integrity of the person who is unable to give consent due to actual impossibility or whose consent is not legally valid.
• It is necessary to process the personal data of the parties of a contract, provided that it is directly related to the establishment or performance of the contract.
• It is necessary for the data controller to fulfill its legal obligations.
• It has been made public by the relevant person.
• It is necessary for the establishment, exercise, or protection of a right.
• It is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
• Your explicit consent exists.

Retention Period of Your Personal Data

Your personal data provided to the Company shall be retained as long as stipulated in the relevant legislation in accordance with Article 4 of Law No. 6698. If no specific period is stated in the legislation, they shall be retained for the duration required by the services provided by our Company and for as long as commercial life requires. Pursuant to Article 7 of the Law, after these periods expire, your personal data will be deleted, destroyed, or anonymized.

Your Rights as a Personal Data Owner

• To learn whether your personal data is being processed,
• If your personal data has been processed, to request information regarding this,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred within the country or abroad,
• To request the correction of your personal data if it is incomplete or incorrectly processed, and to request that the transaction made within this scope be notified to the third parties to whom your personal data has been transferred,
• To request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the Law and other relevant laws, and to request that the transaction made within this scope be notified to third parties to whom your personal data has been transferred,
• To object to a result against you arising from the analysis of processed data solely through automated systems,
• To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

Application Procedure as a Personal Data Owner

In order to exercise your rights specified in Article 11 of Law No. 6698, you may submit your request stating your identity information and the right you wish to exercise in writing to the address of Burkar Otomotiv San. ve Tic. LTD Şti., Mustafa Kemalpaşa OSB 8th Street No 6, in accordance with the “Communiqué on the Principles and Procedures for the Application to the Data Controller”. Pursuant to Article 13/2 of Law No. 6698, your requests in your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Committee.