Terms and Conditions

Personal Data Protection Law Clarification Statement

Definitions

In this clarification text;

Personal Data: Any information relating to an identified or identifiable natural person,
Law on the Protection of Personal Data (KVKK): Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on April 7, 2016,
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller,
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,
Data Subject: Refers to the natural person whose personal data is processed.

About Our Company

As NORM DİJİTAL HİZMETLER TİCARET A.Ş. (“Our Company”), protection of fundamental rights and freedoms, protection of privacy regarding private lives, ensuring and protecting information security, respect for ethical values are among our prioritized principles. Accordingly, within the scope of fulfilling our disclosure obligation arising from Article 10 of the Law on the Protection of Personal Data (“KVKK”), the following explanations are provided for your information.

Data Controller

“Data Controller” in terms of your personal data is Norm Digital A.Ş., registered with the İzmir Trade Registry with the registration number 227198, 0631152363600001 Mersis number, company headquarters Adatepe Mah. Doğuş Cad. No: 207 AG Interior Door No: 1 Buca / İzmir Norm Digital A.Ş.

Data Collected Parties

Within the scope of the Law on the Protection of Personal Data, the data of the following parties who are in business relations with our company are collected:

Employees and employee candidates,
Family members and relatives of employees and employee candidates,
Customers,
Suppliers,
Consultants,
Business partners,
Shareholders,
Company officials,
Company proxies,
Persons in a contractual relationship and their employees,
Persons who are the addressees of legal proceedings,
Survey participants,
Visitors.

Data Collected and Processed by our Company from its Parties

Within the scope of Articles 5 and 6 of the Law on the Protection of Personal Data, our company collects and processes the following data:

Family and social life information,
Education and training information,
Employment information,
Information on request/complaint management,
Information on legal affairs,
Information on compliance with ethical values and law,
Financial information,
Audit information,
Electronic media usage information,
Information on goods and services provided and procured,
Business activities information,
Information related to trade and other licenses and permits,
Physical space security information,
Visual and audio information (photographs, cameras, audio recordings),
Telecommunication records,
E-mail and information systems services usage records,
Login records,
Health reports and health information,
Biometric data,
Criminal record information.

Our Company’s Data Collection Purposes

Within the scope of Articles 5 and 6 of the Personal Data Protection Law, data is collected and processed for the following purposes:

• Realization of our Company’s commercial activities,
  Fulfillment of business processes related to commercial activities,
  Management and execution of relations with business partners and / or suppliers,
  Technical management of our Company’s websites,
  Customer management and follow-up of complaints,
  Product surveys and follow-up of questions sent to our Company,
  Carrying out the necessary work to benefit from the products and services offered by our Company,
  Planning and execution of sales, marketing and after-sales processes of products and / or services,
  Providing information about products and services,
  Sending commercial electronic messages in accordance with legal regulations,
  Competitions, events and other
  Conducting legal and commercial relations with our Company and persons in business relations with our Company,
  Employee administration and management,
  Ensuring the physical security of Company locations,
  Planning logistics activities,
  Ensuring compliance with ethical values and law, Ensuring compliance with ethical values and law,
  Following up contract processes and legal requests,
  Managing human resources and personnel recruitment processes,
  Conducting research and development activities,
  Planning corporate communication and management activities,
  Information security management,
  Following up finance and accounting affairs,
  Determining and implementing commercial and business strategies,
  Creation of visitor records

Transfer of Data Collected and Processed by Our Company within the Purposes

Your personal data collected by our company within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law on the Protection of Personal Data may be shared with our affiliates, shareholders, business partners (only anonymously), legally authorized public institutions and private persons for the purposes stated above.

Method and Legal Reason for Collection of Data by our Company

Personal data are collected, used, recorded, stored and processed by our company in accordance with the law and the rules of honesty, by providing verbal, written and/or electronic information to the personal data owners in a clear and understandable manner, by obtaining explicit consent when necessary.

Retention Period of the Data Collected by our Company

Your personal data are stored for the retention periods specified in the relevant legal regulations or for the period required by the processing purposes. It will then be deleted, destroyed or anonymized in accordance with Article 7 of the Personal Data Protection Law.

Security of Your Data

Your personal data are protected against unauthorized access in the environments where they are processed and stored, and necessary security measures are taken to prevent loss and damage.

Rights of the Data Subject

Pursuant to Article 11 of the Law on the Protection of Personal Data, each individual whose personal data is processed may exercise the following rights by applying to the data controller:

To learn whether his/her personal data has been processed, To request information if his/her personal data has been processed,
To learn the purpose of processing personal data,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data,
To request deletion or destruction of personal data,
To object to data analyzed through automated systems,
To request compensation for damages due to unlawful processing.

Application Methods

Pursuant to Article 13 of the LPPD, you can make your application to exercise your rights mentioned above by the following methods:

By applying in person, you can fill out the application form and submit it to Norm Digital A.Ş.
You can send a notification through a notary public.
By applying with Secure Electronic Signature, you can send an e-mail to normdigital@hes02.kep.tr.

Adress: Adatepe Mah. Doğuş Cad. No: 207 AG İç Kapı No: 1 Buca / İzmir