1. Disclosure Text Under Law No. 6698 on the Protection of Personal Data Regarding Telephone Call Recordings
YILDIZ METAL INDUSTRY AND TRADE LIMITED COMPANY shares the following disclosure within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 (“PDPL”) to fulfill its obligation to inform regarding the processing of personal data obtained from real persons who communicate with our company officials via telephone. The Disclosure Text we have prepared below is presented to inform you about your rights regarding the methods of collection, purposes of processing, legal grounds, and the recipients of your personal data.
2. Legal Basis, Collection Method, and Legal Grounds of the Telephone Call Recording Activity
Your personal data is collected and stored through the YILDIZ METAL telephone switchboard system and by voice recording during verbal conversations with authorized personnel. Your personal data is processed based on the legal ground stated in Article 5/2-(f) of the Law, which allows data processing “provided that it does not harm the fundamental rights and freedoms of the data subject, if it is necessary for the legitimate interests of the data controller.” Identity data, contact information, voice recordings, and any personal data you mention during the conversation may be processed for the purposes of: · Conducting communication activities · Conducting audit/ethics activities · Conducting internal audit/investigation activities · Execution/inspection of business operations · Managing customer relationship processes · Managing goods and service processes · Managing after-sales support services of goods and services · Conducting goods, services, production, and operational processes · Tracking requests and complaints
3. Ensuring the Security of Collected Data
YILDIZ METAL takes necessary technical and administrative measures to ensure the security of personal data obtained as a result of telephone voice recordings, in accordance with Article 12 of the PDPL.
4. Retention Period of Personal Data Obtained Through Telephone Call Recordings
Personal data recorded will be retained lawfully and in accordance with legislation for the maximum period necessary for the purposes for which they were processed and in any case for the statutory limitation periods. The retention period for personal data obtained through telephone call recordings is 3 months.
5. Recipients and Purposes of Personal Data Obtained Through Telephone Call Recordings
Access to the information obtained from telephone call recordings is limited to a small number of employees. YILDIZ METAL may transfer the data to authorized public institutions in compliance with the legislation, within the conditions and purposes of data processing specified in Articles 8 and 9 of the PDPL. (For example, in the case of a judicial investigation, upon a written request from a prosecutor or judge.) Except for the cases mentioned above, your voice recording data is not shared with third parties and is not transferred abroad. Persons who have access to the recordings are bound by a confidentiality agreement to protect the privacy of the accessed data.
6. Deletion, Destruction, or Anonymization of Personal Data Obtained Through Telephone Call Recordings
YILDIZ METAL, even if it processes the personal data specified in this disclosure text in accordance with the provisions of the Turkish Penal Code Article 138 and PDPL Article 7, will delete, destroy, or anonymize the personal data upon the elimination of the reasons requiring its processing, either upon its own decision or upon the request of the data subject.
7. Rights of the Personal Data Subject under Article 11 of the PDPL:
As personal data subjects, if you submit your requests regarding your rights to our Company using the methods set out below, our Company will conclude the request free of charge within 30 days depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, personal data subjects have the right to: a- Learn whether personal data is being processed b- Request information if personal data has been processed c- Learn the purpose of processing personal data and whether they are used in accordance with the purpose d- Know the third parties to whom personal data is transferred domestically or abroad e- Request correction if personal data is incomplete or inaccurate f- Request deletion or destruction of personal data under the conditions stipulated in Article 7 of the PDPL g- Request that third parties to whom personal data is transferred be informed of the actions taken under subparagraphs (e) and (f) h- Object to a result against oneself arising from the analysis of processed data exclusively through automated systems i- Request compensation if damage is suffered due to unlawful processing of personal data According to Article 13(1) of the PDPL, you may submit your request to exercise your above-mentioned rights to our Company in writing or through other methods determined by the Personal Data Protection Board. As the Board has not yet determined other methods, your application must be submitted in writing to our Company in accordance with the PDPL. The channels and procedures for delivering your written applications under Article 11 of the PDPL are explained below: a. In-person application by the applicant b. Notification via notary c. By sending it signed with a “secure electronic signature” defined in Law No. 5070 to our Company’s registered electronic mail address
| Application Method | Address of Application | Information to Be Written on the Envelope |
| In-person application (Applicant applies in person with an ID document) | YILDIZ METAL INDUSTRY AND TRADE LIMITED COMPANY. Akse Mah. 534 Sokak No: 5 Çayırova/Kocaeli | “Information Request under the Law on the Protection of Personal Data” must be written on the envelope. |
| Notification via notary | YILDIZ METAL INDUSTRY AND TRADE LIMITED COMPANY. Akse Mah. 534 Sokak No: 5 Çayırova/Kocaeli | “Information Request under the Law on the Protection of Personal Data” must be written on the envelope. |
| By sending via Registered Electronic Mail (REM) signed with a “secure electronic signature” | yildizmetal@hs01.kep.tr | “Information Request under the Law on the Protection of Personal Data” must be written in the subject line of the e-mail. |
Your applications submitted to us will be answered within thirty days from the date we receive them, depending on the nature of the request, pursuant to Article 13(2) of the PDPL.
Our responses will be delivered to you in writing or electronically in accordance with Article 13 of the PDPL.
To exercise the above-mentioned rights, you may submit your request to our Company in a clear and understandable manner, including the necessary identity information and your explanations regarding which of the rights under Article 11 of the PDPL you wish to exercise, using the methods described above.
Sincerely