M-D2 Personal Data Protection Law Disclosure Text
This “Information Text” has been prepared by M-D2 MÜHENDİSLİK DAN. İNŞ. TAAH. İÇ VE DIŞ TİC. LTD. ŞTİ. (“M-D2 ENGINEERING”) within the scope of the Law No. 6698 on Protection of Personal Data (“KVKK”). The text has been created in accordance with Article 10 of the KVKK, which pertains to the “Obligation of Data Controller to Inform” and Article 11, which covers the “Rights of the Data Subject” in order to provide you with information about the methods of collecting, processing, using, transferring, and disposing of your personal data.
Purposes of Processing Personal Data
Your personal data is processed orally, in writing, or electronically in accordance with Articles 4, 5, and 6 of the KVKK. These processes are carried out for the following purposes:
- Conducting human resources processes and activities within the legal framework,
- Planning, auditing, and execution of information security processes,
- Creation and management of information technology infrastructure,
- Monitoring financial and/or accounting affairs,
- Managing contracts, establishing legal processes, and tracking legal procedures,
- Ensuring facility and personnel security,
- Enabling company personnel to benefit from preventive and therapeutic health services,
- Conducting analyses of business efficiency and/or suitability, planning, and/or execution of these activities,
- Determining and implementing commercial and business strategies,
- Fulfilling the contractual and legal obligations of M-D2 ENGINEERING completely,
- Processing data for the purpose of evaluating suggestions, requests, complaints, and fault notifications you transmit through our website, responding to them, and carrying out improvement works based on these notifications.
Methods of Collection and Legal Grounds for Personal Data
- Your personal data is automatically obtained through the forms on our website in electronic form, in line with the stated purposes and scope, and processed based on the following legal grounds:
- Your explicit consent,
- The necessity of processing personal data of parties related to the establishment or performance of a contract,
- The necessity for fulfilling our legal obligations,
- The processing of information made public by the data subject,
- The necessity for establishing, exercising, or protecting a right,
- The necessity for processing data within the framework of our company’s legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject,
- The necessity for protecting the vital interests of the data subject or another person when consent cannot be obtained due to physical impossibility or the data subject’s inability to disclose consent.
Rights of the Data Subject as Stated in Article 11 of Law No. 6698
As data subjects, when you submit your requests regarding your rights to M-D2 ENGINEERING in accordance with the methods specified in M-D2 ENGINEERING’s Policy on Protection and Processing of Personal Data, your request will be responded to free of charge as soon as possible and within a maximum of thirty days, depending on the nature of the request. In this context, the rights of data subjects are listed below:
- The right to learn whether personal data is processed,
- The right to request information regarding the processing if personal data is processed,
- The right to learn the purpose of the processing of personal data and whether data is used for this purpose,
- The right to know the third parties to whom personal data is transferred at home or abroad,
- The right to request correction of personal data in case of incomplete or inaccurate processing,
- The right to request deletion or destruction of personal data within the framework of Law No. 6698 on Protection of Personal Data and other relevant laws, despite being processed in accordance with the law, if the reasons requiring processing have disappeared, and to request notification of these processes to third parties if the data is transferred to third parties,
- The right to object to the occurrence of a result against you due to the analysis of personal data exclusively through automated systems,
- The right to claim compensation for damages in case personal data is processed unlawfully and causes damages to the data subject.
If you wish to exercise your rights:
It is of critical importance that the information and data you provide to M-D2 ENGINEERING are accurate and complete for you to be able to exercise your rights. Any liability arising from providing incorrect or erroneous information is the responsibility of the party providing the relevant information or data to M-D2 ENGINEERING.
In accordance with Article 11 of the Law No. 6698 regulating “Rights of the Data Subject” you can personally submit your requests to M-D2 ENGINEERING at the address 1308. Street, Outer Door No: 6, Inner Door No: Z09, Ostim, Ankara, 06374, Turkey, or securely transmit them with an electronic signature to the address info@m-d2.com.tr by attaching documents that identify your identity, as required by the “Communiqué on the Principles and Procedures for Application to the Data Controller.” The data subject must clearly express their requests in the application made to exercise the specified rights. Documents and information related to the application must be attached. Applications made within this framework will be accepted after identity verification, and depending on the nature of the request, they will be concluded as soon as possible and within a maximum of 30 (thirty) days. If the response is given in written or recorded media such as a CD or flash drive, the processing fee specified in the “Communiqué on the Principles and Procedures for Application to the Data Controller” may be charged. You can reach M-D2 ENGINEERING via the contact information provided at www.m-d2.com.tr/contact.
Sharing of Personal Data with Third Parties
Our company shares your personal data in accordance with the Law on the Protection of Personal Data (KVKK), based on individuals’ explicit consent or as required by legislation, within the framework of contractual obligations, legal compliance, protection of legitimate interests, and by taking adequate security and privacy measures. These sharing activities are carried out directly or indirectly, domestically or internationally, with our subsidiaries, business partners, suppliers, subcontractors, legal and natural persons with whom we have agreements, shareholders, legal, financial, and tax advisors, auditors, audit firms, or public institutions authorized to request data under legal obligations, as necessary for conducting Company operations. These sharing activities are conducted in compliance with the processing conditions and purposes of personal data specified in Articles 8 and 9 of the KVKK.