Privacy Notice
PURPOSE AND SCOPE OF THE DISCLOSURE STATEMENT
We aim to inform you about how SRN Petrochemicals ('Company') processes personal data within the limits and conditions stipulated in Article 10 of the Law. We prioritize the security and protection of the personal data you share with us.
In the instances specified in this document, the Company acts as a "data controller." We process your personal data in accordance with Law No. 6698 on Protection of Personal Data ("KVKK" or "Law"), taking appropriate, reasonable, and sufficient administrative and technical measures to ensure the protection of your personal data. The responsibility for the third-party websites owned and operated by third parties to which we refer or share information on our website rests with the operators and owners of the respective sites, not our organization. To learn about the processing of personal data and to understand fundamental concepts related to personal data, you can review our Privacy Policy.
2. WHO WE ARE AS DATA CONTROLLER?
As a data controller, we fulfill our obligations arising from the law and Board decisions by taking administrative measures and adopting appropriate and reasonable levels of technical measures:
Title: |
SRN Petrochemicals |
Address: |
Cumhuriyet Mahallesi, Özgürlük Caddesi, Akaryakıt İstasyonu No:13 Çayırova/Kocaeli
|
Our Website: |
https://www.srnpetrochemicals.com |
Phone: |
+90 216 206 0010 |
E-Mail: |
info@srnpetrokimya.com |
3. WHOSE PERSONAL DATA WE PROCESS AND WHICH CATEGORIES OF PERSONAL DATA?
We process the personal data and special categories of personal data of the website visitors in the following listed categories:
a. CATEGORIES OF PERSONAL DATA
Identity, Contact, Transaction Security
4. FOR WHAT PURPOSES WE PROCESS YOUR PERSONAL DATA?
We process your personal data for the following general and specific purposes on our websites and internet services in accordance with the principles of the Law:
a. GENERAL PURPOSES
Conducting Purchase Processes for Goods/Services, Conducting Communication Activities, Managing Company/Product/Service Loyalty Processes, Conducting Marketing Analysis Studies
b. SPECIFIC PURPOSES
Receiving Hosting Services, Operating Internet Websites, Processing Internet Website Cookie Records
5. HOW WE PROCESS AND PROTECT PERSONAL DATA?
We take care to process your data in accordance with the principles listed in Article 4 of the Law and the conditions specified in Articles 5 and 6.
Your personal data is processed in electronic environments such as Hosting, Server, Electronic Mail, and physical environments using both automated and non-automated methods.
As a company, we take all necessary technical and administrative measures in a suitable and proportional manner to protect the personal data we process, prevent unauthorized access, and ensure that data subjects are not adversely affected. Within this framework, we strive to ensure that our applications, software, and information systems are compliant with standards and kept up to date. We also sign data transfer agreements with parties we share data with, and we ensure that our employees who handle personal data adhere to the "Privacy Commitment" we obtain from them.
6. WHO WE SHARE PERSONAL DATA WITH AND WHY?
As Srn Petrokimya, we share personal data with organizations we have a business relationship with for the purposes listed below and in accordance with Articles 8 and 9 of the Law. These organizations include service providers and solution partners from whom we benefit for administrative, legal, and technical services, as well as official institutions/organizations in cases of legal obligations.
As a data controller, we take necessary measures to ensure that the institutions and organizations we share data with fulfill their obligations arising from the Law. We secure the obligations of parties through data transfer agreements, data processing agreements, and commitments, where applicable.
6.1 What is the Nature and Scope of Domestic Sharing/Access?
We share personal data with the following domestically based data controllers and data processors for the purposes mentioned below:
1-With IT Companies: To Manage Maintenance and Repair Processes and Receive Technical Support and Services,
2-With Authorized Public Institutions and Organizations and Judicial Authorities: Due to Legal Obligations arising from regulations such as Law No. 5651 or Possible Legal Disputes.
6.2. What is the Nature and Scope of Overseas Sharing/Access?
For the operation of our internet websites, service development, office operations, providing services to users and visitors, ensuring satisfaction, meeting expectations, and establishing communication purposes, we share personal data with the following service providers located abroad:
1- For the purposes of conducting information security processes, conducting communication activities, receiving hosting services, managing corporate email accounts, and operating internet websites, we share personal data with Natro.com from Turkey and LLC from the USA, for the purposes specified above.
You can access the privacy policies of service providers through the following links:
1- Natro.com, LLC Privacy Policy
7. WHAT LEGAL GROUNDS WE PROCESS PERSONAL DATA?
Your personal data can primarily be processed based on the requirement of "explicit consent" as stipulated in Article 5 of the Law. Additionally, as mentioned in the same article:
We process personal data within the framework of the following legislation:
1- Personal Data Protection Law No. 6698 Article 5/f (Legitimate Interests)
8. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
As data subjects, in accordance with Article 11 of the Law, you have the right to:
-
Learn whether your personal data is being processed,
-
Request information if your personal data has been processed,
-
Learn the purpose of the processing of personal data and whether they are used for their intended purpose,
-
Know the third parties to whom personal data is transferred, whether domestically or abroad,
-
Request the correction of personal data if they are incomplete or inaccurately processed and request that this correction be notified to third parties to whom the personal data has been transferred within this scope,
-
Request the deletion or destruction of personal data within the scope of Article 7 of the Law, even if they have been processed in accordance with the Law and other related provisions, and request that the transactions made within this scope be notified to third parties to whom the personal data has been transferred,
-
Object to the occurrence of a result against yourself through the analysis of personal data exclusively by automated systems,
-
Demand compensation for damages in case of damage due to the unlawful processing of personal data.