Information

ZORLU TESİS A.Ş. PRIVACY POLICY REGARDING APPLICATONS

Protection of personal data is among the top priorities of Zorlu Tesis Anonim Şirketi (“Zorlu” or “Company”). Acting as a data controller with full awareness of our responsibility in this regard, our Company processes and protects personal data in accordance with the Law on the Protection of Personal Data numbered 6698 (“Law”) and other relevant legislation.

With this Disclosure text Regarding the Processing of Personal Data, it is intended to provide the necessary transparency by informing you about the personal data processed in accordance with the Law in order to allow you to benefit from the products and services we offer to our customers. You may access our Policy on Processing and Protection of Personal Data (“Policy”) located at www.zorlucenter.com.tr

This Disclosure text will become effective on the date of its publication, and our Company reserves the right to make changes in this Disclosure text, if necessary. Accordingly, then current Policy will become valid with its publication.

1. Purposes and Legal Reasons of Processing Personal Data

Your personal data may be processed for the purposes specified in the table below, in accordance with the legal reasons specified in Article 5 of the Law:

Personal Data	Purposes	Legal Reasons
Identity details   Contact Details	-       to receive and fulfill our customer's requests or complaints and to handle customer relations management -       to execute accounting and finance processes -       to execute Rental Contract Processes	It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
Identity details   Contact Details     Legal Transaction Details   Transaction Security Details	-       To execute information security processes -       To fulfill our obligations arising from the legislation -       To ensure the Security of Data Controller’s Activities -       To follow-up and execute Legal Transactions	It is mandatory for the data controller to fulfill its legal obligations.

2. Parties to which Personal Data can be Transferred; Purposes of Transfer

Personal data may be shared for the following purposes, within the framework of the conditions of transferring personal data as specified in Article 8 of the Law.

Purposes of Transfer	Transferee
Fulfilling our legal obligations	Authorized bodies and entities

3. Methods of Collecting Personal Data

Your personal data may be collected automatically or non-automatically through our websites, or through printed forms completed at the application points as part of your benefiting from the services offered to you by our company.

4. Retention Period of Personal Data 

Our company will retain personal data for as long as required by the above-mentioned processing purposes. In addition, in case of any disputes that may arise, our Company will be able to retain your personal data for the duration of the statute of limitations determined in accordance with the relevant legislation, for the purpose of making the necessary defenses in connection with such disputes. 

5. Rights of Data Subjects and Use of These Rights

Pursuant to Article 11 of the Law, a Data Subject is entitled to:

• know whether his/her personal data is processed;
• request information if his/her personal data has been processed;
• know the purpose of processing his/her personal data and whether such data have been used appropriately for their purpose;
• know the third parties to whom his/her personal data have been transferred domestically or abroad;
• request rectification in case his/her personal data have been processed incompletely or inaccurately, to request notification of such activities to any third parties to whom the personal data has been transferred;
• request the deletion or destruction of personal data in the event that the reasons requiring processing thereof have disappeared, although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, and to request notification of such activities to any third parties to whom the personal data has been transferred;
• object to the occurrence of any results against himself / herself through analysis of the processed data exclusively through automated systems;
• demand the compensation of damages and losses suffered due to the unlawful processing of personal data.

Such rights shall be finalized within thirty days if such applications are transmitted via one of the methods specified in the Personal Data Protection and Processing Policy of Zorlu Tesis A.Ş. available at https://www.zorlucenter.com.tr/media/dzzod2hj/personal-data-protection-law-application-form-zorlutesis.pdf. Although it is essential not to charge any fees for these applications, the Company reserves the right to charge a fee based on the tariff fixed by the Personal Data Protection Board.