{"id":5965,"date":"2023-12-04T05:35:35","date_gmt":"2023-12-04T05:35:35","guid":{"rendered":"https:\/\/wp.webtend.net\/convis\/?page_id=3"},"modified":"2026-08-25T13:22:07","modified_gmt":"2026-08-25T13:22:07","slug":"kvkk-aydinlatma-metni","status":"publish","type":"page","link":"https:\/\/csb.com.tr\/en\/kvkk-privacy-notice\/","title":{"rendered":"KVKK Information Notice"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

KVKK Information Notice<\/h1>

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA<\/h2>

Privacy Notice<\/h3>

CSB MACHINE TRADING CO. LTD. (\u201cEmployer\/COMPANY\u201d), located at Derbent Neighborhood, Dilek_1 Street, No. 14, Turgutlu\/Manisa; in our capacity as data controller,<\/p>

  • Depending on the circumstances, the personal data we collect from you in the ways set out below,<\/li>
  • within the scope of our commercial\/service relationships or as part of our business relationship with you;<\/li>
  • within the framework of the purpose for which their processing is required, and in a manner that is relevant to, limited to and proportionate to that purpose,<\/li>
  • by ensuring that the personal data you have provided to us, or as it has been reported to us, remains accurate and up to date,<\/li>
  • We hereby inform you that your personal data will be recorded, stored, retained, reorganised, shared with authorities legally authorised to request such personal data, and, in accordance with the conditions set out in the Personal Data Protection Law (KVKK), transferred or assigned to third parties both within and outside Turkey, classified, and processed in any other manner specified in the KVKK.<\/li><\/ul>

    PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA<\/h3>

    To establish and fulfil a business\/service\/commercial relationship and to comply with the terms of the contract; to use such information in the services we can provide to you; to record other necessary information, including identity details, address, tax number and personal health data, for the purpose of verifying the identity of the person carrying out or commissioning the transaction; to prepare all records and documents serving as the basis for the transaction, whether in electronic (internet\/mobile, etc.) or paper form; to comply with data retention, reporting and disclosure obligations as stipulated by legislation, competent bodies and other authorities; to carry out marketing and statistical activities, to improve service quality, and to be able to provide requested or other products and services. Special categories of personal data are processed in the context of the contractual relationship for the purposes of communication, providing information and similar processes.<\/p>

    Ki\u015fisel verilerinizin i\u015flenebilece\u011fi kapsamlar \u015funlard\u0131r:<\/p>

    • HR operations, internal operations, activities with legal, technical and administrative implications, strategy, planning and management of business partners\/suppliers and customers,<\/li>
    • The planning and execution of corporate communications activities and events,<\/li>
    • The planning and delivery of in-house training programmes,<\/li>
    • Company Workplace Safety, Protection of Workers and Occupational Health and Safety,<\/li>
    • The provision of after-sales services,<\/li>
    • The Provision of Technical Support Services,<\/li>
    • Compliance with the terms of franchise agreements,<\/li>
    • The processing of collections,<\/li>
    • To provide customers with product and service promotions, information, personalised advertising, campaigns and other benefits; to send commercial electronic communications; to conduct surveys and telemarketing activities; and to provide various benefits through statistical analysis;<\/li>
    • Undertaking initiatives to improve service quality and provide a better service,<\/li>
    • Issuing invoices for our services,<\/li>
    • The procurement of services from external sources,<\/li>
    • To enable customers to access services in areas outside their own field of expertise and to provide them with the benefits of specialist organisations for the purpose of obtaining technology services,<\/li>
    • The use of which is necessary for the purposes of the company\u2019s operations,<\/li>
    • Identity verification,<\/li>
    • Responding to enquiries and complaints,<\/li>
    • Taking the necessary technical and organisational measures in the context of data security,<\/li>
    • Reaching a financial agreement with relevant business partners and other third parties regarding the products and services provided,<\/li>
    • Providing the necessary information in accordance with the requests and audits of regulatory and supervisory bodies and official authorities,<\/li>
    • The retention of information relating to data that must be retained in accordance with the relevant legislation,<\/li>
    • Ensuring that the data is consistent,<\/li>
    • Measuring customer satisfaction,<\/li>
    • With regard to employees: creating personnel files, assessing whether they are fit to carry out the duties of the role on an ongoing basis, arranging private health insurance, creating medical records, implementing health and safety measures, and organising travel arrangements,<\/li>
    • With regard to job applicants: Managing and planning the process of assessing suitability for vacant positions,<\/li>
    • The publication of visual and audio material relating to the Company, its employees and its stands, obtained during competitions, events, trade fairs, workshops and other activities carried out within the scope of its business, for the purpose of promoting and sharing the work,<\/li>
    • Harmonising dealer operations and policies within the dealer network,<\/li>
    • Compliance with legal obligations,<\/li>
    • The execution and monitoring of the company\u2019s financial reporting and risk management processes,<\/li>
    • Handling\/monitoring legal matters,<\/li>
    • The creation and monitoring of visitor records,<\/li>
    • Planning and execution of staff use of machinery and equipment; planning and execution of sales transactions; planning and execution of procurement transactions; planning and execution of collections,<\/li>
    • Planning and implementing the lawful use of the company\u2019s internet, shared network and computers,<\/li>
    • The company\u2019s planning and execution of trade fairs, events, social projects, and product and corporate promotion,<\/li>
    • The purposes mentioned are for information purposes only; any further additions we may make to enable the Company to carry out its future operational activities will be announced via updates.<\/li><\/ul>

      Article 5(2) of the KVKK sets out the exceptions that permit the lawful processing of personal data. In line with this, the Company may process personal data not only on the basis of explicit consent but also where one of the other conditions (exceptions) listed below is met. The legal basis for a personal data processing activity may be based on just one of the conditions set out below, or it may be based on more than one of these conditions for the same personal data processing activity.<\/p>

      These are:<\/p>

      • Explicit provision in the legislation,<\/li>
      • Where a person is unable to express their consent due to actual impossibility, or where their consent cannot be recognised as valid, and the processing of their personal data is necessary to protect their own life or physical integrity, or that of another person,<\/li>
      • Directly relating to the conclusion or performance of the contract,<\/li>
      • The Clinic\u2019s Fulfilment of its Legal Obligations,<\/li>
      • Disclosure of Personal Data by the Data Subject,<\/li>
      • Where data processing is necessary for the establishment or protection of a right,<\/li>
      • Provided that this does not infringe upon the data subject\u2019s fundamental rights and freedoms, the necessity of data processing for the Clinic\u2019s legitimate interests<\/li><\/ul>

        are its forms.<\/p>

        For the purpose of carrying out our activities within the scope of our business\/commercial service relationship: Identity details (first name, surname, marital status, place of registration in the population register, gender, Social Security number, Turkish ID number, tax number & registered tax office, identity card serial number, mother\u2019s name, father\u2019s name, date of birth), Contact details (address, telephone number, email address), physical premises security (CCTV footage), and other data necessary for the provision of the service (such as signatures, etc.) are processed in relation to the following matters:<\/p>

        • Updating the information provided to us and verifying its accuracy,<\/li>
        • Ensuring that obligations arising from the contractual relationship are duly fulfilled,<\/li>
        • Conducting Activities in Compliance with the Law<\/li>
        • Conduct and Supervision of Business Activities<\/li>
        • Implementation of Business Continuity Measures<\/li>
        • Implementation of Service Procurement Processes<\/li>
        • Supply Chain Operations<\/li>
        • Conducting Communication Activities<\/li>
        • Monitoring and Handling of Legal Matters<\/li>
        • Conducting Contract Procedures<\/li>
        • Conducting Financial and Accounting Operations<\/li>
        • Implementation of Loyalty Programmes for Companies and Services<\/li>
        • The planning and implementation of corporate sustainability, corporate governance, strategic planning and information security processes<\/li>
        • Verification of powers of attorney and signature circulars<\/li><\/ul>

          PERSONS OR ORGANISATIONS TO WHOM PERSONAL DATA MAY BE TRANSFERRED<\/h3>

          These include individuals, public bodies and organisations, suppliers, relevant service providers, natural persons, private-law legal entities, and institutions and organisations, to the extent permitted by the provisions of the relevant legislation. Sensitive personal data may be transferred to companies, suppliers, relevant service providers, natural persons, private legal entities and organisations, both within and outside the country, from whom we procure services to carry out activities for the purposes specified in the legislation to which we are subject, and which are safeguarded by confidentiality agreements. Personal data and special category personal data are stored in a secure environment not accessible to the general public and are under no circumstances shared with third parties without authorisation or unless required by law.<\/p>

          STORAGE OF PERSONAL DATA<\/h3>

          Method of collecting personal data: Your personal data may be collected verbally, in writing or electronically via all digital channels, such as enquiries and messages sent to our website and telephone calls.<\/p>

          The personal data we collect is stored securely, either physically or electronically, for an appropriate period of time, to enable the Company to carry out its activities. In the context of these activities, the Company acts in accordance with the obligations set out in all relevant legislation, in particular the Personal Data Protection Act (KVKK), regarding the protection of personal data.<\/p>

          In accordance with the relevant legislation, except in cases where the retention of personal data for a longer period is permitted or required, once the purposes for which the personal data is processed have ceased, the Company shall, either on its own initiative or at the request of the data subject, and using various available technical methods, delete, destroy or anonymise the data. Where personal data is erased using the aforementioned methods, it will be destroyed in such a way that it cannot be used again in any form or recovered.<\/p>

          In cases where the data controller has a legitimate interest, and provided that the law permits it, personal data may be retained even after the purpose of processing and the time limits specified in the relevant legislation have expired, provided that this does not infringe upon the fundamental rights and freedoms of data subjects. Following the expiry of the aforementioned limitation period, personal data shall be erased, destroyed or anonymised in accordance with the procedure set out above.<\/p>

          MEASURES TAKEN TO ENSURE DATA SECURITY<\/h3>

          The company takes all necessary technical and organisational measures to ensure the appropriate level of security required for the protection of personal data. The measures set out in Article 12(1) of the Personal Data Protection Act are as follows:<\/p>

          1. To prevent the unlawful processing of personal data,<\/li>
          2. To prevent unauthorised access to personal data,<\/li>
          3. To ensure the protection of personal data.<\/li>
          4. Processing of video recordings.<\/li><\/ol>

            In order to ensure the general and commercial security of its premises and operations, the Company records images of visitors, employees and other relevant individuals in accordance with the fundamental principles set out in the Personal Data Protection Act (KVKK), and these recordings are stored securely in physical or electronic form for the period necessary to fulfil the purposes for which they were processed.<\/p>

            At entrances to areas where video recording takes place, a notice indicating that video recording is in progress is displayed in a clearly visible manner to inform data subjects. Video recording is strictly prohibited in areas where privacy is required. In the context of these activities, the Company acts in accordance with the obligations set out in all relevant legislation, particularly the Personal Data Protection Act (KVKK), regarding the protection of personal data.<\/p>

            RETENTION OF RECORDS RELATING TO THE INTERNET ACCESS PROVIDED BY THE COMPANY TO VISITORS<\/h3>

            Our company is able to provide internet access to visitors who request it whilst they are on our premises. In such cases, log records relating to your internet access are recorded in accordance with the provisions of Law No. 5651 and the relevant regulations issued pursuant to this Law; these records are processed only upon request by authorised public authorities or to fulfil our legal obligations during internal audit processes carried out within the Company.<\/p>

            Only a limited number of Company employees have access to the log records obtained in this context. Company employees with access to these records may only access them for the purpose of responding to requests from authorised public bodies and organisations or for use in audit processes, and may only share them with persons who are legally authorised to do so and who undertake to protect the confidentiality of the data to which they have access.<\/p>

            TRACKING OF VISITOR ENTRIES AND EXITS AT COMPANY ENTRANCES AND WITHIN THE PREMISES<\/h3>

            Our company carries out personal data processing activities to monitor the entry and exit of visitors to the Company\u2019s buildings and premises, for the purposes of ensuring security and for the specified purposes.<\/p>

            The data subjects in question are informed in this regard when their first names and surnames are collected, or through notices displayed on the Company\u2019s premises or made available to visitors in other ways. Data collected for the purpose of monitoring visitors\u2019 arrivals and departures is processed solely for this purpose, and the relevant personal data is recorded in a data recording system in physical and\/or electronic form.<\/p>

            PROCESSING OF BUSINESS PARTNERS\u2019 PERSONAL DATA<\/h3>

            In the course of carrying out the activities it has established with business partners such as dealers and distributors, the company may process personal data relating to the employees of such business partners where this is necessary for the performance of the work, or for the purposes specified by law; to ensure the smooth running of service operations; to fulfil human resources objectives and policies; and to ensure the legal and commercial security of the mutual working relationship.<\/p>

            APPLICATION PROCEDURES AND RIGHTS<\/h3>

            Pursuant to Article 11 of the KVKK, your rights are as follows: By contacting us, you may request that your personal data;<\/p>

            • to find out whether it has been processed or not,<\/li>
            • to request information regarding this, if it has been processed,<\/li>
            • to find out the purpose of the processing and whether it is being used in accordance with that purpose,<\/li>
            • knowing the third parties to whom data has been transferred, whether within the country or abroad,<\/li>
            • a request for correction if it has been processed incorrectly or incompletely,<\/li>
            • To request the erasure or destruction of personal data in accordance with the conditions set out in Article 7 of the KVKK,<\/li>
            • to request that the third parties to whom the data has been disclosed be informed of the processing carried out in accordance with sub-paragraphs (d) and (e) set out above,<\/li>
            • to object to a decision being made to your detriment solely as a result of processing carried out by automated systems,<\/li>
            • We hereby inform you that, should you suffer any loss as a result of the processing of your personal data in breach of the law, you have the right to claim compensation for that loss.<\/li><\/ul>

              The requests contained in your application will be processed free of charge within thirty days at the latest, depending on the nature of the request. However, should the process entail an additional cost to the Company, a fee may be charged in accordance with the tariff set out in the \u2018Communication on the Procedures and Principles for Applications to the Data Controller\u2019 issued by the Personal Data Protection Board. Pursuant to Article 13(1) of the Personal Data Protection Law, Data Subjects may submit their requests to exercise the aforementioned rights using the methods and information specified in the \u2018Communication on the Procedures and Principles for Applications to the Data Controller\u2019, published in the Official Gazette No. 30356 dated 10 March 2018.<\/p>

              Exceptions to the Right to Make a Request: Pursuant to Article 28 of the Personal Data Protection Act, data subjects will not be able to exercise their rights in the matters set out below.<\/strong><\/p><\/blockquote>

              • The processing of personal data for purposes such as research, planning and statistics by anonymising it through official statistics<\/li>
              • The processing of personal data for artistic, historical, literary or scientific purposes, or within the scope of freedom of expression, provided that such processing does not infringe national defence, national security, public safety, public order, economic security, the privacy of private life or personal rights, nor does it constitute a criminal offence<\/li>
              • The processing of personal data in the context of preventive, protective and intelligence activities carried out by public bodies and organisations to which the law has conferred duties and powers aimed at safeguarding national defence, national security, public safety, public order and economic security<\/li>
              • The processing of personal data by judicial authorities or enforcement authorities in connection with investigations, prosecutions, trials or enforcement proceedings<\/li><\/ul>

                Pursuant to Article 28(2) of the Data Protection Act; Provided that they are consistent with and proportionate to the purpose and fundamental principles of the Act, Article 10, which regulates the data controller\u2019s duty to provide information; Article 11, which regulates the data subject\u2019s rights (excluding the right to claim compensation for damage); and Article 16, which regulates the obligation to register with the Register of Data Controllers, shall not apply in the following circumstances:<\/p>

                • Where the processing of personal data is necessary for the prevention of crime or for the purposes of a criminal investigation<\/li>
                • The processing of personal data that has been made public by the data subject themselves<\/li>
                • Where the processing of personal data is necessary for the performance of supervisory or regulatory duties by public bodies and organisations with the relevant mandate and authority, as well as by professional bodies with the status of public bodies, in accordance with the powers conferred by law, and for the purposes of disciplinary investigations and proceedings<\/li>
                • The processing of personal data is necessary for the protection of the State\u2019s economic and financial interests in relation to budgetary, tax and financial matters<\/li><\/ul>

                  We would like to inform you that we continue to operate with the understanding that the security of personal data is a top priority in all the products and services we offer.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                  KVKK Ayd\u0131nlatma Metni K\u0130\u015e\u0130SEL VER\u0130LER\u0130N \u0130\u015eLENMES\u0130 AYDINLATMA METN\u0130 Ayd\u0131nlatma Metni Derbent Mahallesi Dilek_1 Sokak No:14 Turgutlu\/Manisa adresindeki CSB MAK\u0130NA T\u0130C LTD.\u015eT\u0130 (“\u0130\u015fveren\/\u015e\u0130RKET “) olarak; veri sorumlusu s\u0131fat\u0131yla, duruma g\u00f6re a\u015fa\u011f\u0131da belirtilen \u015fekillerde elde etti\u011fimiz ki\u015fisel verilerinizin, ticari\/hizmet ili\u015fkilerimiz kapsam\u0131nda veya sizlerle olan i\u015f ili\u015fkimiz dahilinde; i\u015flenmelerini gerektiren ama\u00e7 \u00e7er\u00e7evesinde ve bu ama\u00e7 ile ba\u011flant\u0131l\u0131, s\u0131n\u0131rl\u0131 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5965","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/pages\/5965","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/comments?post=5965"}],"version-history":[{"count":0,"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/pages\/5965\/revisions"}],"wp:attachment":[{"href":"https:\/\/csb.com.tr\/en\/wp-json\/wp\/v2\/media?parent=5965"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}