Privacy Policy

business partners, shareholders, employees and other real persons who establish a relationship with us by applying for a job or visiting our website or in any other way, and has prepared this Personal Data Protection and Privacy Policy (“Privacy Policy”) in order to inform you about our Group’s rules and policies regarding the processing of personal data and the use of cookies and similar technologies within the framework of the Law on the Protection of Personal Data No. 6698 (“LPPD Law”).

We would like to remind you that you will be subject to the privacy policy in this text regarding the confidentiality, protection, processing, use, modification, communications and other issues of member and customer information on the Furcan Group Companies and www.furcanyedekparca.com website and that you should review this text every time you use our website to make sure that you accept the terms.

Depending on the type and nature of the relationship between Furcan Group Companies as the data controller and the data owner, it is possible for our group to provide the data owner with personal data policies and/or notifications that differ from this text. In this case, the special policies and notifications provided to the data owner may contain matters that are different from or additional to the explanations in this Privacy Policy, and the special policies and notifications provided to the data owner must be taken into consideration first.

LEGAL BASIS AND GENERAL PRINCIPLES

The protection of personal data is regulated in Law No. 6698, Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed Through Such Publications, Law No. 6563 on the Regulation of Electronic Commerce and relevant secondary legislation. In addition, a number of penal sanctions are foreseen for the protection of personal data in the Turkish Penal Code No. 5237.

In this context, when the Law on the Protection of Personal Data is examined, it is seen that the definition of “personal data” refers to all kinds of information related to identified or identifiable natural persons. In other words, anonymous information, anonymized information and other data that cannot be associated with a specific person are not considered personal data within the scope of this Privacy Policy.

Data processing refers to any operation that can be performed on personal data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, either fully or partially automatically or by non-automatic means provided that it is part of any data recording system.

Furcan Group Companies take the necessary measures to protect privacy and comply with all legal principles regarding the processing of personal data; and process personal data in accordance with the principles listed below within the framework of the purposes specified in this Privacy Policy:

Being in compliance with the law and ethical rules,

Being accurate and up-to-date when necessary,

Being processed for specific, clear and legitimate purposes,

Being connected, limited and proportionate to the purpose for which they are processed,

Being stored for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

DATA PROCESSED BY FURCAN GROUP COMPANIES

Furcan Group Companies may process general and special personal data with the explicit consent of the data owner or without explicit consent in the cases stipulated in Articles 5 and 6 of the Personal Data Protection Law. The general and special data processed by our Group are exemplified below, but the type of data to be processed for each data owner may vary depending on various factors such as the type of relationship between the data owner and our Group (member-customer, employee, business partner, service provider, etc.) and the communication channels used.

Our Group may process the following types of data, in accordance with the relevant legislation and the principles set forth in this Privacy Policy, depending on the type of relationship between the data owner and our Group (for example, whether there is a member-customer, employee, business partner, service provider, dealer, etc. relationship between our Group and the data owner) and its nature:

Data to identify the data owner, such as name, surname, profession, title, institution/organization information, educational background, employment history, gender, marital status, citizenship status, tax liability status and, if applicable, information regarding parent, guardian and representative,

Data such as date of birth, place of birth, identity number, blood type, religion and photograph included in identification documents such as identity, passport, driver’s license,

Contact information such as address, telephone, e-mail and fax number of home, workplace or temporary residence,

Information that the data owner has approved to be shared through those channels when the data owner connects to our Group’s internet address through their social media accounts,

Communication records such as telephone conversations, e-mail correspondence with the data owner and other voice messages and visual data,

Internet protocol (IP) address, device ID, unique identifier information, device type, advertising ID, unique device icon, statistics on web page views, incoming and outgoing traffic information, referral URL, internet log information, location information, information on visited sites and transactions and actions performed through our websites, platforms, internet network and advertising and e-mail content.

Purposes of Using Personal Data

Furcan Group Companies may process personal data for the purposes specified below and to the extent permitted by the legislation and may be stored for the period required for these purposes.

Fulfilling legal and administrative obligations and exercising rights arising from current legislation,

Providing information to public officials upon request and in accordance with legislation on matters related to public security,

Providing suggestions and solutions to our customers by our Group and solution partners and informing our customers about the services we provide,

Preparing all records and documents that will form the basis of transactions electronically (internet/mobile etc.) or in paper format,

Increasing customer satisfaction, being able to get to know our customers through the website and/or mobile applications and using them in customer circle analysis, using them in various marketing and advertising activities and organizing surveys electronically and/or physically through contracted institutions within this scope,

Evaluating customer complaints and suggestions regarding our services,

Ensuring and developing coordination, cooperation and efficiency in or between units within our Group,

Ensuring the security of the website and other electronic systems and physical environments used by our Group,

Notifying changes in legislation or rules and policies accepted by our Group or making other notifications,

Investigating, detecting, preventing and reporting to relevant administrative or judicial authorities any violations of the contract or the law,

Resolving current and future legal disputes,

Answering requests and questions,

Providing the need for employees within the framework of our Group’s human resources policies and carrying out, developing and improving recruitment processes,

Evaluating the suitability of job applications, finalizing them and communicating with job applicants,

Developing and improving our Group’s human resources, public relations and marketing policies,

Data processing is mandatory for the establishment, exercise or protection of a right,

Protecting our Group’s legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data owner.

Protection, Security and Control of Your Personal Data

Within the scope of the relevant legal legislation, our Group takes the necessary technical and administrative measures to ensure the appropriate level of security as the data controller in order to prevent the processing of personal data in accordance with the law and unlawful access to data and to ensure the preservation of personal data. In this context, our Group ensures that the business processes and activities are carried out in accordance with the intra-group policies and rules prepared for the protection of personal data. Studies are carried out to raise awareness among employees regarding the personal data protection legislation and the intra-group policies and rules prepared in line with this, and the necessary declarations and commitments are obtained from employees and persons and institutions processing data on behalf of our Group for the confidentiality and protection of data, and violations of these declarations and commitments are subject to certain sanctions. Necessary information security measures are implemented to prevent unauthorized access to personal data, and the adequacy of the measures taken are subject to periodic checks, and it is aimed to continuously improve the current data security system.

Sharing of Personal Data with Third Parties at Home/Abroad and Storage Period

Provided that we comply with the general principles listed in Article 4 of the Personal Data Protection Law and the conditions stipulated in Articles 8 and 9 and take the necessary security measures, we may transfer personal data to third parties at home and abroad for the purposes indicated under the heading “Purposes of Processing Personal Data” of this Privacy Policy and process and store it on servers or other electronic media located at home and abroad.

In this context, your personal data may be shared with program partner institutions and organizations that we cooperate with in order to carry out our activities, domestic/overseas persons and organizations from whom we benefit from the services of data storage, physical server and/or cloud service, domestic/overseas companies from which we receive services for sending commercial electronic messages, interbank card center, banks with which we have agreements, payment institutions with international certification, and various domestic/overseas advertising companies, agencies and survey companies or other domestic/overseas business partners within the scope of marketing activities in order to increase customer experience and provide better service.

Except for cases where a longer period is legally required or permitted, our Group retains personal data only for the period necessary to achieve the purposes specified in this Privacy Policy. Personal data whose storage period has expired will be deleted, destroyed or anonymized by our Group within the framework of Article 7 of the Personal Data Protection Law.

Rights of Data Owners Within the Framework of the Personal Data Protection Law

As a data owner, in accordance with Article 11 of the PDP Law: to learn whether or not personal data has been processed, to request information about the processing of personal data if it has been processed, to learn the purpose of processing personal data and whether or not it has been used in accordance with its purpose, to know the third parties to whom personal data has been transferred domestically or abroad, to request correction of personal data if it has been processed incompletely or incorrectly, to request deletion or destruction of personal data if the reasons requiring processing of personal data are eliminated, to request notification of correction and deletion to third parties to whom personal data has been transferred, to object to the emergence of a result that is against them by exclusively analyzing processed data through automated systems, to request compensation for damages in case of damages due to unlawful processing of personal data. If you wish to exercise any of the rights specified above as a data owner, you may submit your request via the e-mail address info@furcan.com.tr or Özdemir Mah. Yeni Mardin Cad. No:94 BAĞLAR – DİYARBAKIR – TÜRKİYE When you notify our central address with a wet signature, your data will be deleted.

Requests from data owners will be evaluated and finalized within thirty days at the latest, depending on the nature of the request, within the framework of Article 13 of the Personal Data Protection Law. Positive or negative responses to requests from data owners can be notified to data owners in writing or electronically. While requests from data owners will be finalized free of charge as a rule, if responding to the request requires an additional cost, a fee may be requested in the amounts determined within the framework of the relevant legislation.

Method of Collection of Personal Data and Legal Reason

Your personal data may be obtained in written, verbal, audio or video recording or other physical or electronic forms for the purposes specified in this Privacy Policy within the framework of the conditions set forth in Articles 5 and 6 of the PDP Law. Personal data may be collected through stores and other physical environments, websites, mobile applications, social media and other publicly accessible media where data owners can contact, or through organized training, conference and similar events, or through investigation methods.

While we generally obtain personal data from data owners, it is also possible to obtain it through business partners we work with, persons, institutions and organizations referred to in job applications or included in the applicant’s work and education history, recruitment platforms, persons and institutions represented by the data owner/representing the data owner, within the framework of the conditions set forth in Articles 5 and 6 of the PDP Law.

USE OF COOKIES AND SIMILAR TECHNOLOGIES

Small data files that enable the recording and collection of certain data may be placed on users’ computers, mobile phones, tablets or other devices used during access to electronic platforms, applications or e-mail messages or advertisements sent by our Group on our Group’s websites. These data files placed on computers and other devices may be cookies, pixel tags, flash cookies and web beacons, as well as other similar technologies for data storage purposes. The term “cookie” is used to refer to cookies and similar technologies that may be used by our Group.

Cookies store the information collected through log files, empty gif files and/or third-party sources in order to create a summary of your preferences and may track your browsing information and/or usage history on the site in order to make special promotions for you, to offer marketing offers, to improve the content of the website or mobile application for you and/or to determine your preferences.

Our group analyzes and interprets visitor movements and preferences during the use of the site, in addition to the personal information requested in e-mail addresses and application forms, through “cookies” on its website (www.furcanyedekparca.com). A cookie is a file consisting mostly of letters and numbers that is stored on the internet browser or hard drive of the device being used and allows the device in question to be identified.

Our group will collect, process, share with third parties and store your browsing information securely in order to provide better service to its visitors on its website (www.furcanyedekparca.com) and within the framework of its legal obligations, provided that it is not used outside the purposes and scope specified in this Personal Data Protection Statement.

Since any data collected through cookies may not be considered personal data, it should be noted that the data obtained through cookies will only be evaluated within the scope of this Privacy Policy and the Personal Data Protection Law to the extent that they constitute personal data within the framework of Turkish law.

CHANGES

Our Group may make changes to this Personal Data Protection and Privacy Policy at any time and the change shall become effective upon publication on the website (www.furcanyedekparca.com). Changes made by our Group shall be notified to the relevant parties via our websites. For this reason, the current version of the Privacy Policy can be accessed on our Group websites and any changes that may be made to the Privacy Policy can be followed on our Group websites.

As a rule, changes will be made by uploading to our Group websites and will become effective as of this date, however, our Group may also notify the changes in other ways it deems appropriate.

CONSENT REGARDING COMMUNICATION AND PERSONAL DATA

By accepting this Privacy/Personal Data Protection Policy and Communication Consent, you have permitted the collection, storage, processing, use and transfer of your personal data, which you have consented to be shared with our Group, to third parties with whom our Group has a contractual relationship and whose details are stated above, for the purposes stated in this Privacy Policy (providing and offering various advantages and making all kinds of electronic communication for personalized promotion, advertising, sales, marketing, surveys and similar purposes via telephone, short message (SMS), e-mail and similar means and sending other communication messages, etc.).