PDPDS

Personal Data Protection Disclosure Statement

KALIPSAN KALIP VE AMBALAJ SAN. TİC. LTD. ŞTİ.

As Kalıpsan Kalıp Plastik ve Ambalaj Sanayi Ticaret Ltd. Şti., we highly value the privacy and security of your personal data and strive to take the highest level of security measures to process and protect this information. Your personal data is processed in accordance with the Law No. 6698 on the Protection of Personal Data ("PDPDS") and other relevant legal regulations, under our capacity as the "data controller", within the scope described below.

This Personal Data Protection Disclosure Statement (“Disclosure Statement”) has been prepared in accordance with Article 10 of PDPDS titled "Data Controller’s Obligation to Inform" to transparently inform you about the identity of the data controller, the methods and legal reasons for collecting your personal data, the purposes for which it will be processed, the parties to whom it may be transferred and the purposes of such transfer, the retention period, and your rights listed under Article 11 of the PDPDS. The term "Your Personal Data" used herein also covers your Special Categories of Personal Data, where applicable.


1. Method and Legal Basis for Collection of Personal Data

Your personal data may vary depending on the nature of your relationship with our company and may be collected verbally, in writing, or electronically through automated or non-automated methods such as our company units, website, social media platforms, call center, mobile applications, or similar channels. Your personal data may be created and updated as long as your relationship with our company continues and will be stored in both digital and physical environments.

Your personal data may be processed and transferred in line with the purposes stated below, and in accordance with the data processing conditions and purposes set out in Articles 5 and 6 of Law No. 6698.


2. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

  • To carry out necessary activities by relevant business units for individuals and/or legal entities (employees, visitors, suppliers, business partners, etc.) who have a relationship with our company;
  • To ensure personal and property security and legal, commercial, and occupational safety within the company;
  • To fulfill legal and regulatory obligations arising from, or that may arise from, relevant laws such as:
    • Labor Law No. 4857,
    • Turkish Commercial Code No. 6102,
    • Turkish Code of Obligations No. 6098,
    • Consumer Protection Law No. 6502,
    • Vocational Education Law No. 3308,
    • Occupational Health and Safety Law No. 6331,
    • Personal Data Protection Law No. 6698,
    • Law No. 5651 on Regulating Broadcasts on the Internet,
    • Tax Procedure Law No. 213,
    • Social Insurance and General Health Insurance Law No. 5510,
    • Basic Law on Health Services No. 3359,
    • Decree Law No. 663 on the Organization and Duties of the Ministry of Health,
    • Regulation on Private Hospitals,
    • Regulation on Processing and Protection of Personal Health Data, and others;
  • To ensure compliance with audits and/or regulatory activities carried out by authorized public institutions, authorities, or professional organizations;
  • To fulfill legal information and document requests from judicial or administrative authorities;
  • To conduct market research, promotions, evaluations of feedback/complaints, and contact you through shared communication channels regarding our products and services;
  • To maintain public order and health;
  • To provide healthcare services such as preventive medicine, diagnosis, treatment, and procurement of medical materials;
  • To train and develop all employees;
  • To respond to participation requests for trainings, seminars, and similar events;
  • To carry out risk management and quality improvement activities;
  • To implement all necessary technical and administrative measures for data security in systems and applications.

Your data will be processed in line with the data processing conditions and purposes stated in Articles 5 and 6 of Law No. 6698.


3. Transfer of Personal Data to Third Parties

Your personal data, processed in accordance with the purposes stated in Section 2 of this Disclosure Statement and limited to these purposes, may be transferred to the following, in accordance with Articles 4, 5, and 6 of the PDPDS:

  • Employers of Kalıpsan Kalıp Plastik ve Ambalaj San. Tic. Ltd. Şti.,
  • Legally authorized natural and/or legal persons,
  • Business partners, subcontractors, and suppliers,
  • Real or legal persons within Turkey or abroad with whom we have a contractual or collaborative relationship for the provision of services or products,

within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPDS.


4. Retention Period for Personal Data

Your personal data will be processed for the duration necessary to fulfill the purposes set out in Section 2 of this Disclosure Statement, and in compliance with the data processing and retention periods stipulated under applicable laws and regulations governing our company’s operations. If there are changes in statutory retention periods, the updated durations will apply.


5. Data Subject Rights under Article 11 of the PDPDS

Subject to exceptions outlined in Article 28 of the PDPDS titled “Exceptions,” you may exercise the following rights by applying to our company:

  • To learn whether your personal data is being processed,
  • To request information if it has been processed,
  • To learn the purpose of processing and whether it is used in accordance with that purpose,
  • To learn the third parties to whom your data has been transferred domestically or abroad,
  • To request correction if your personal data has been processed incompletely or inaccurately,
  • To request deletion or destruction of your personal data in accordance with Article 7 of the PDPDS,
  • To request that corrections or deletions be notified to third parties to whom your data has been disclosed,
  • To object to decisions made exclusively through automated systems that may adversely affect you,

To request compensation for damages arising from unlawful processing of your personal data.