WHICH PERSONAL DATA DO WE PROCESS?

The personal data that may be processed by us are as follows:

• Identity Data: Name, surname, identification details (for natural persons), company information, title, tax ID (for legal entities)

• Contact Data: Phone number (mobile or landline), fax number, address, email address

• Financial Data: Bank information

• Sensitive Personal Data: Identity photocopy (photo) (for natural persons)

• Other: Signature

METHOD OF COLLECTING PERSONAL DATA AND LEGAL BASIS
Your personal data is obtained through verbal, written, or electronic means in accordance with the purposes outlined above. The purpose of collecting your data is to provide our products and services within the legal framework, allowing our company to fulfill its contractual and legal obligations fully and correctly. Personal data collected for this legal reason may be processed and transferred for the purposes specified in sections (1) and (2) of this text, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data may be processed by the Company for the following purposes and legal reasons. To ensure the fulfillment of our contracts and the execution of terms and conditions, and to meet our legal obligations:

• Coordination and execution of communication and services related to the goods and services provided to the Company by you or the company you represent, and quality control and evaluation related to service/contract performance

• Keeping financial and accounting records, creating current accounts, and performing payment/collection transactions

• Information used for the receipt and endorsement of promissory notes or checks issued on behalf of suppliers.

• If necessary, obtaining services for employees

• Management of the Company, execution of business operations, and implementation of company policies, especially:

  • Creating an approved supplier and customer list

• Processing may also occur in order to exercise our right of defense or fulfill our legal obligations if requested within a proper legal process.

Your personal data will be kept for the maximum period necessary for the purposes specified in the relevant legislation or the purpose for which it was processed, and in any case, for the statutory limitation periods.

SHARING YOUR PERSONAL DATA WITH THIRD PARTIES
Your personal data may, from time to time and to the extent required by our activities, be shared with third parties with whom the Company has a commercial, administrative, or contractual relationship, such as banks, partner companies, and their group companies, for the purpose of managing our internal relations.

TRANSFER OF PERSONAL DATA ABROAD
Dido Ray Yapı A.Ş may transfer your personal data abroad, either by obtaining explicit consent in accordance with the principles set forth in Article 4(2) of the KVKK, or in the presence of the conditions specified in Articles 5(2) and 6(3) of the Law. Once the Personal Data Protection Board ("Board") identifies foreign countries with sufficient protection, personal data may be transferred to persons and organizations in those countries, provided sufficient protection is guaranteed. For countries without sufficient protection, data transfer is only possible if the data controllers in both Turkey and the foreign country guarantee sufficient protection in writing, and the Board’s consent is obtained.

RIGHTS OF PERSONAL DATA OWNERS UNDER ARTICLE 11 OF THE KVKK
As data owners, you have the following rights regarding your personal data:

• Learn whether your personal data has been processed,

• Request information about your personal data if it has been processed,

• Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

• Learn the third parties to whom your personal data is transferred, either within the country or abroad,

• Request the correction of your personal data if it is incomplete or inaccurate, and request the notification of the correction to third parties to whom the data has been transferred,

• Request the deletion or destruction of your personal data when the reasons for processing are no longer valid, and request the notification of the deletion or destruction to third parties to whom the data has been transferred,

• Object to the result of the processing of your personal data exclusively through automated systems if it leads to an unfavorable outcome for you,

• Request the compensation of damages if you suffer harm due to unlawful processing of your personal data.

According to Article 13(1) of the KVKK, you may send your request regarding the exercise of the above rights to us in writing or via other methods determined by the Personal Data Protection Board. As the Personal Data Protection Board has not yet determined any specific method, your request must be submitted in writing to the Company in accordance with the KVKK. To exercise your rights under Article 11 of the KVKK, you may send your request, including necessary identity verification information and an explanation of the right you wish to exercise, via email to iletisim@didoray.com or by delivering it personally to the address İlkbahar Mah. 606 cad. No: 18 Çankaya/ANKARA.