ESTA Construction Industry Logistics and Foreign Trade Inc.
Information Notice under Personal Data Protection Law No. 6698
Esta Construction Industry Logistics and Foreign Trade Inc. (the “Company”) takes all necessary technical and legal measures when processing personal data in accordance with Personal Data Protection Law No. 6698 (“PDPL”). This notice explains which personal data is processed, the purposes and legal grounds for processing, the parties to whom data may be transferred, and the rights of data subjects.
A. Personal data processed, purposes, collection methods and legal grounds
The Company processes personal data where explicit consent has been given; where processing is expressly provided for by law; where it is necessary to protect life or physical integrity; for the establishment or performance of a contract; to meet a legal obligation; where data has been made public by the data subject; for the establishment, exercise or protection of a right; or for the Company’s legitimate interests without harming fundamental rights and freedoms.
Goods, services, procurement and contract processes
Identity, contact, signature, tax, bank, address and reference information may be collected physically, by email or by telephone for procurement, tender, contract, payment and invoicing processes.
Sales and after-sales processes
Identity, contact, signature, banking, address, contract, photograph, passport, tax, subscription, power-of-attorney and insurance information may be processed to conduct sales, contracts, after-sales services, communication and residential payment tracking.
B. Transfer of personal data
Within the limits set by the PDPL and for the purposes described above, personal data may be transferred to authorised public institutions, banks, suppliers, domestic or overseas business partners, independent auditors, professional advisers, supervisory authorities, call-centre providers, information-security and cloud-service providers, logistics and maintenance partners, software companies, courts and law-enforcement authorities.
C. Rights of the data subject
Under Article 11 of the PDPL, you may ask whether your personal data is processed; request information about processing; learn its purpose and whether it is used accordingly; learn the third parties to whom it is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request erasure or destruction where the reasons for processing no longer exist; object to a result produced exclusively by automated systems; and claim compensation for damage caused by unlawful processing.
Requests may be submitted to the Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests will be assessed free of charge as soon as possible and no later than thirty days, except where a fee is permitted under the tariff set by the Personal Data Protection Board.