This clarification text has been prepared to inform the relevant persons whose personal data are processed by Optiyol Karar Destek Hizmetleri A.Ş. (the "Company") as the data controller, pursuant to Article 10 of the Personal Data Protection Act ("PDPA") No. 6698.
Within the scope of this text;
- "Personal data" means any information relating to an identified or identifiable natural person.
- "Relevant person" means natural persons whose personal data are processed, such as:
- Potential or current service recipients and suppliers, along with their employees and managers,
- Visitors,
- Public officials who deal with the Company on behalf of public institutions,
- Employee candidates and intern candidates.
A. IDENTITY OF THE DATA CONTROLLER:
Company Name: Optiyol Karar Destek Hizmetleri Anonim Şirketi
Headquarter Address: Teknopark İstanbul Sanayi Mah. Teknopark Bulvarı No:1/2C 2110 Pendik, İstanbul 34906
Branch Address: ODTÜ Teknokent Bilişim İnovasyon Merkezi Mustafa Kemal Mah. Dumlupınar Bulvarı No: 280 Çankaya, Ankara 06530
B. PURPOSES OF PROCESSING YOUR PERSONAL DATA
1) The purposes of processing the personal data of service recipients, suppliers, or their personnel/representatives are as follows:
- Fulfillment of obligations arising from laws and other legislation,
- Fulfillment of goods/services purchasing and selling activities,
- Performance of mutual obligations arising from contracts,
- Execution of after-sales support services for goods/services,
- Management of complaints and requests.
2) The purposes of processing the personal data of potential service recipients and suppliers, or their personnel/representatives are as follows:
- Management of advertising and campaign processes,
- Management of product and service marketing processes,
- Management of complaints and requests.
3) The purposes of processing the personal data of employee candidates or intern candidates are as follows:
- Finalizing job applications,
- Fulfillment of obligations arising from laws and other legislation,
- Planning of human resources processes,
- Management of complaints and requests.
4) The purposes of processing the personal data of online visitors are as follows:
- Management of information security processes,
- Management of complaints and requests,
- Providing information to authorized institutions and organizations,
- Execution of communication activities.
5) The purposes of processing the personal data of public officials who deal with the Company on behalf of public institutions are as follows:
- Execution of activities in compliance with legislation,
- Providing information to authorized persons and institutions.
C. TO WHOM AND FOR WHAT PURPOSES YOUR PERSONAL DATA MAY BE TRANSFERRED
Your personal data processed by the Company may be transferred, limited to the purposes specified in Section "B. PURPOSES OF PROCESSING YOUR PERSONAL DATA" of this text, to:
- Suppliers,
- Service recipients,
- Legally authorized public institutions and organizations,
- Other natural persons or private law legal entities required by the purpose of data processing.
D. METHOD OF COLLECTING YOUR PERSONAL DATA AND LEGAL BASIS FOR COLLECTION:
Your personal data is collected:
- Automatically during the use of information processing, communication, and automatic data recording systems owned by or allocated for the use of the Company (e-mail, website forms, etc.), and in other cases through non-automatic means (in physical environments and verbally), through:
- Application forms,
- CVs,
- Website forms,
- E-mail and messaging applications,
- Turkish Employment Agency (İŞKUR) and private employment offices,
- Cookies created by our website,
- Tracking cookies created by third parties,
- Site usage measurement systems (e.g., Google Analytics),
- Other documents declared by the data subject,
- Business cards and other promotional documents,
- Your social media accounts.
Your personal data is collected and processed based on any of the following legal grounds:
- Being explicitly stipulated in laws,
- Being necessary for the protection of life or physical integrity of the person or another person who is unable to express consent due to actual impossibility or whose consent is not legally recognized,
- Being necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the establishment and performance of the contract,
- Being mandatory for the data controller to fulfill its legal obligation,
- Having been made public by the data subject,
- Being mandatory for the establishment, exercise, or protection of a right,
- Being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
- Having the explicit consent of the data subject.
E. YOUR RIGHTS UNDER THE PERSONAL DATA PROTECTION ACT:
The rights you can exercise by applying to the data controller are as follows:
a) To learn whether your personal data have been processed,
b) To request information if your personal data have been processed,
c) To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom your personal data have been transferred, domestically or abroad,
d) To request the correction of your personal data if they have been processed incompletely or incorrectly,
e) To request the deletion, destruction, or anonymization of your personal data in case the conditions requiring their processing no longer exist,
f) To request that the operations carried out pursuant to paragraphs (d) and (e) be notified to the third parties to whom your personal data have been transferred,
g) To object to the emergence of a result against you through the exclusive analysis of processed data by automated systems,
h) To demand compensation for damages in case your personal data have been processed unlawfully.
Within the scope of your rights specified in Article 11 of the Act, you may submit your requests to the Company in writing or by using a registered electronic mail (KEP) address, secure electronic signature, or mobile signature.
Your application must include:
a) Your name, surname, and signature if the application is in writing,
b) Your Turkish Republic identification number,
c) Your residential or workplace address for official notification,
ç) Your e-mail address, telephone and fax number, if any, for notification purposes,
d) The subject matter of the request.
As a rule, your applications will be answered free of charge. However, if the response requires a cost, a fee may be charged within the limits set by the relevant regulations.
The contact information for your applications is as follows:
COMPANY ADDRESS: Teknopark İstanbul Sanayi Mah. Teknopark Bulvarı No:1/2C 2110 Pendik, İstanbul 34906
PDPA E-MAIL ADDRESS: