As www.kairosvalley.com (hereinafter referred to as the “Website”), we present to the public and relevant individuals the information regarding the personal data processing activities of the Website, prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”). ARTICLE 1: DATA CONTROLLER Your personal data may be processed by the Website, acting as the data controller, within the scope described below. The concept of the data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. You can contact the data controller through the following channels: E-mail: info@kairosvalley.com web site: kairosvalley.com ARTICLE 2: PURPOSE OF PERSONAL DATA PROCESSING Personal data is processed by us for the following purposes:
- To manage human resources processes.
- To ensure corporate communication.
- To ensure the security of the Website.
- To conduct statistical studies.
- To fulfill tasks and operations resulting from signed contracts and protocols.
- To ensure the fulfillment of legal obligations as required or mandated by legal regulations.
- To establish communication with individuals/legal entities engaged in a business relationship with the Website.
- To make legal reports.
- To fulfill the burden of proof as evidence in potential future legal disputes.
ARTICLE 3: PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND THE PURPOSE OF TRANSFER Personal data related to customers may be shared with the parties specified in the Law’s regulations for the following purposes: 8. and 9. Personal data related to customers may be shared with the website’s business partners and suppliers, legally authorized institutions and organizations, and legally authorized private law legal entities, within the framework of the data processing conditions and purposes specified in Article 9 of the Law. This sharing may occur for the following purposes: planning and executing the necessary activities for the customization of products and services offered by the website based on the preferences, usage habits, and needs of individuals, recommending and promoting these products and services to individuals, performing necessary work by relevant business units to benefit individuals from the website’s products and services, executing related business processes, carrying out necessary works by relevant business units for the fulfillment of commercial activities carried out by the website, and ensuring the legal, technical, and commercial-business security of the website and individuals involved in business relationships with the website, including the planning and execution of the website’s commercial and/or business strategies. ARTICLE 4: METHODS OF COLLECTING PERSONAL DATA AND LEGAL GROUNDS Personal data is collected through electronic environments such as the website, mobile applications, and social media platforms, including information and request forms, as well as applications downloaded to smartphones, or through physical environments. The legal grounds for the collection and processing of personal data are as follows:
- The storage of personal data, as it is directly related to the establishment and performance of contracts,
- The storage of personal data for the purpose of establishing, using, or protecting a right.
- The storage of personal data for the legitimate interests of the Website, provided that it does not harm the fundamental rights and freedoms of individuals.
- The storage of personal data for the purpose of fulfilling any legal obligation of the Website.
- The explicit provision in the legislation for the storage of personal data.
- The presence of the data subject’s explicit consent for storage activities that require the explicit consent of the data subject.
ARTICLE 5: RIGHTS OF THE DATA SUBJECT The individual whose personal data is processed is defined as the “data subject” and has the following rights related to their data by applying to the Website:
- To learn whether personal data is being processed or not.
- To request information about the processed personal data if it has been processed.
- To learn the purpose of processing personal data and whether it is being used in accordance with its purpose.
- To know the third parties to whom personal data has been transferred, whether domestically or internationally.
- To request the correction of personal data if it is incomplete or incorrect.
- To request the deletion or destruction of personal data.
- (e) and (f) To request the notification of third parties to whom personal data has been transferred, regarding the actions taken in accordance with the relevant articles.
- To object to a decision that results in a negative outcome for the individual, made solely through the analysis of processed data by automated systems.
- To request the compensation of damages in the event of harm caused by the unlawful processing of personal data.