a) Data Controller and Its Representative
In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be processed by Noya Computer Systems and Consulting Industry and Trade Limited Company (“Company” or “Noya”) as the data controller, within the scope explained below.
b) Purpose of Processing Personal Data
Your collected personal data may be processed for the following purposes in line with your disclosure of such data:
• Ensuring the legal, technical, and commercial-operational security of the Company and related parties in business relationships;
• Planning and execution of activities required to customize the Company’s products and services according to the preferences, usage habits, and needs of individuals, and to offer and promote them accordingly;
• Conducting necessary work by relevant business units to benefit individuals from products and services offered by the Company and to carry out related business processes;
• Planning and execution of the Company’s commercial and business strategies;
• Performing necessary work by relevant business units to realize commercial activities and managing related business processes;
• Planning and execution of the Company’s human resources policies and processes.
This processing will be carried out in accordance with the personal data processing conditions and purposes stated in Articles 5 and 6 of Law No. 6698.
c) To Whom and For What Purpose the Processed Personal Data May Be Transferred
Your collected personal data may be transferred for the following purposes:
• Customizing and promoting Company products and services based on individuals’ preferences, habits, and needs;
• Performing necessary operations and business processes to execute the Company’s commercial activities and strategies;
• Ensuring the legal, technical, and commercial-operational security of the Company and related individuals;
These transfers may be made to our business partners, suppliers, shareholders, affiliates, and legally authorized public institutions and private parties, and only within the scope of the purposes defined in Articles 8 and 9 of Law No. 6698.
ç) Method and Legal Basis for Collecting Personal Data
Your personal data may be collected by our Company through various channels and based on different legal grounds, for the purpose of improving our services and conducting commercial activities.
This data may be collected through information and request forms on our websites and mobile applications, or via physical forms. Based on these legal grounds, your personal data may be processed and transferred for the purposes stated in sections (b) and (c) of this Disclosure Statement, in accordance with the personal data processing conditions set out in Articles 5 and 6 of Law No. 6698.
d) Rights of the Data Subject Under Article 11 of Law No. 6698
As personal data owners, if you submit a request concerning your rights,
Noya will process your request and provide a response as soon as possible, and
within no later than thirty (30) days. If fulfilling the request incurs a cost, a fee may be charged based on the tariff set by the
Personal Data Protection Board.
Within this scope, personal data owners have the following rights:
- To learn whether their personal data is being processed;
- To request information if personal data has been processed;
- To learn the purpose of processing and whether it is used in accordance with that purpose;
- To know the third parties to whom personal data is transferred, domestically or abroad;
- To request correction of personal data if it is incomplete or incorrectly processed, and to request that such corrections be notified to third parties to whom the data has been transferred;
- To request deletion or destruction of personal data if the reasons for processing no longer apply, even though it was processed in accordance with the law, and to request notification of such actions to third parties;
- To object to a result against themselves arising solely from automated processing of personal data;
- To demand compensation if they suffer damage due to unlawful processing of personal data.
