Personal Data Protection Act

Personal Data Protection Disclosure and Clarification Notice

As CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ., the protection of your personal data and private information is important to us. Therefore, we make every effort and exercise due care to ensure that the personal data of individuals associated with CNC LTD. is processed and retained in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). As the Data Controller, CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ. takes the necessary administrative and technical measures to protect your data in all processes concerning your personal data and processes your personal data in accordance with the KVKK, under the conditions explained below and within the limits prescribed by the applicable legislation.

The personal information recorded during visits to our website is processed in accordance with the legislation on the protection of personal data. In this regard, you may also find the relevant information on our website. Privacy Policy inceleyiniz. Ancak önemle belirtelim ki, www.cnc.com.tr internet sitesinde yapılan yönlendirmelerde (link verilen) diğer internet sitelerindeki veri güvenliği konusunda bir garanti sunulamamaktadır. Bu konuda ilgili sayfanın veri güvenliği ile ilgili politikası dikkatlice incelenmelidir.

1. Legal Nature and Scope

Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) requires data subjects to be informed when their consent is obtained. The title of the article is “Data Controller’s Obligation to Inform.”

In accordance with the provisions of the KVKK, CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ. and RESUL OFLAZ are the “Data Controllers.” Within this framework, the obligation to inform requires data subjects to be informed about the identity of the data controller, the purposes for which personal data is processed, the persons to whom personal data is transferred and the purposes of such transfers, the legal grounds for the collection of personal data, the persons to whom and the methods by which personal data may be transferred, and the rights of the personal data subject set forth in Article 11 of the KVKK, such as requesting the updating, deletion, or anonymization of personal data.

As the Data Controller, CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ. and RESUL OFLAZ inform and clarify data subjects that their personal data is processed within the limits and conditions prescribed by the legislation, in accordance with the “Clarification Text on the Processing of Personal Data” and Article 10 of the KVKK.

2. Identity of the Data Controller

In subparagraph (ı) of paragraph 1 of Article 3 of the KVKK, the data controller is defined as “the natural or legal persons who determine the purposes and means of processing personal data and who are responsible for the establishment and management of the data recording system.” Within this framework, the data controller is CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ. and RESUL OFLAZ.

CNC İLERİ TEKNOLOJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ, RESUL OFLAZ

3. Data Processor

A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller is defined as a “Data Processor” in Article 3 of the Personal Data Protection Law (KVKK).

4. Purposes of Processing Your Personal Data

Your personal data is processed in accordance with the principles set forth in the KVKK;

1. To keep you informed about the products and services offered by CNC Advanced Technology Engineering Ind. and Trade Ltd. Co. and to ensure you receive the best possible benefits;
2. To improve the quality of the products and services offered by CNC Advanced Technology Engineering Industry and Trade Ltd. Co., and to present and recommend them in a way that is tailored to our customers’ needs, preferences, and usage habits;
3. We operate with the aim of informing you about our services and, when necessary, providing you with further clarification.
4. To ensure that our human resources policies are planned and implemented in the best possible way; that our business partnerships and strategies are properly planned and executed; to ensure the legal, commercial, and physical security of our company and our business partners; to ensure smooth corporate operations; and to take the necessary steps to ensure that you benefit as much as possible from the products and services we offer,
5. To ensure the highest level of data security, to create databases, to develop the services offered on the website, to communicate with those who submit requests and complaints to our company, to resolve errors on our company’s website, and to share information posted on our website GizlilikPolitikası’nda yer alan hükümlerin uygunluğunun sağlanması,
6. Personal data is processed in accordance with the conditions for personal data processing set forth in Articles 5 and 6 of the Personal Data Protection Law for the purpose of determining our company’s strategies.

5. Our Principles Regarding the Processing of Personal Data

As CNC Advanced Technology and Trade, Inc.;

1. a) To conduct business in accordance with the law and the principles of good faith,
   b) To strive to ensure accuracy and timeliness,
   c) Processing for specific, explicit, and legitimate purposes,
   (c) To be relevant, limited, and proportionate to the purpose for which they are processed,
   d) To be retained for the period specified in the relevant legislation or as necessary for the purpose for which they were processed

We have made it our guiding principle.

6. Methods of Processing Personal Data

Your data is stored at CNC Advanced Technology and Trade, Inc., but only your consent ya da cases of compliance with the law It is retained and processed if a certain condition is met.

7. To Whom and for What Purposes Personal Data May Be Disclosed

Your personal data, which is collected and processed by our company in compliance with the Personal Data Protection Law (KVKK), may be transferred to CNC Advanced Technology and Trade Inc., its solution partners, and companies acting as service providers, solely for the purpose of performing the work and in accordance with confidentiality agreements.

8. How We Collect Your Personal Data and the Legal Basis for Doing So

Your personal data may vary depending on the services, products, or business activities provided by our company;

In accordance with Articles 4, 5, and 6 of the KVKK, personal data may be collected and processed—whether updated or not—through automated or non-automated methods, verbally, in writing, or electronically, via offices, call centers, websites, social media platforms, mobile applications, and similar channels.

Your personal data is collected through any verbal, written, or electronic means for the purposes stated above, in order to enable the products and/or services provided by our company to be offered within the determined legal framework and to enable our company to fully and accurately fulfill its obligations arising from contracts and the law within this scope. Your personal data collected on this legal basis may also be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data, including the purposes specified in this Clarification Text.

9. How Do We Protect It?

CNC LTD. takes all necessary technical and administrative measures to protect the personal data it collects, prevent it from falling into the hands of unauthorized individuals, and ensure that our customers and prospective customers are not harmed. In this context, we ensure that our software complies with standards, carefully select third parties, and within our company Privacy Policy Compliance is ensured.

10. Rights of Data Subjects and Requests

As personal data subjects, if you submit your requests regarding your rights listed in Article 11 of the KVKK to our company through the methods specified below in this Clarification Text, our company will conclude your request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee specified in the tariff determined by our company will be charged.In addition, pursuant to the applicable legislation, applications concerning personal data must be made personally by the data subject. Therefore, only the part of your application concerning you will be answered, and an application made on behalf of your spouse, relative, or friend will not be accepted.

In this regard, data subjects may contact us via the contact information provided on our website to request the following regarding their personal data:

1. The right to know whether personal data is being processed,
2. To request information regarding the processing of personal data,
3. The right to learn the purpose of the processing of personal data and whether it is being used in accordance with that purpose,
4. The right to know which third parties, whether within the country or abroad, personal data is transferred to,
5. In the event that personal data has been processed incompletely or incorrectly, the right to request the correction of such data and, in this context, to request that the third parties to whom the personal data has been disclosed be notified of the action taken,
6. The right to request the erasure or destruction of personal data if the grounds for its processing no longer exist, even though it was processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and the right to request that third parties to whom the personal data was transferred be notified of the action taken in this regard,
7. The right to object to a decision made solely through the automated processing of personal data that results in adverse consequences for the individual,
8. If you suffer damage as a result of the unlawful processing of your personal data, you have the right to request compensation for such damage.

11. Submitting the Application

Pursuant to Article 13, Paragraph 1 of the KVK Law, you may submit your request to exercise the rights specified in Article 11 of the same law by using a registered electronic mail (KEP) address or the email address you previously provided to our company and which is registered in our system,  www.cnc.com.tr  You may submit it to the address provided or in writing—either in person, through a notary, or by certified mail. Along with the necessary explanations, Application and Information Request Form You can access it via the link below.

In the application:

1. a) Your first name, last name, and, if the application is in writing, your signature,
2. b) If you are a citizen of the Republic of Turkey, your Turkish ID number; if you are a foreign national, your nationality, passport number, or ID number (if applicable),
3. c) Your residential or business address for service of process,

(c) Your email address, phone number, and fax number, if any, to be used for notifications,

1. d) Your request must address a specific issue. Information and documents related to the issue must be included with the application.