Sardunya Furniture Company Policy on the Processing and Protection of Personal Data Under Law No. 6698
Section 1. Purpose and Enforcement of the Policy
The Personal Data Protection Law No. 6698 (“Law”) entered into force on April 7, 2016. The Law sets forth the procedures and principles regarding the processing of personal data by natural or legal persons who are classified as “data controllers” — those who determine the purposes and means of processing personal data and are responsible for establishing and managing the data recording system.
Under the Law, personal data refers to “any information relating to an identified or identifiable natural person,” and processing means “any operation performed on personal data, whether fully or partially automated, or by non-automated means provided that it forms part of a data recording system — such as collection, recording, storage, retention, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification, or restriction of use.”
Pursuant to Article 10 of the Law, data controllers are obliged to inform data subjects about the following matters:
- The identity of the data controller and, if applicable, its representative,
- The purposes for which personal data will be processed,
- The parties to whom and the purposes for which processed personal data may be transferred,
- The method and legal basis for collecting personal data,
- Other rights set out in Article 11 of the Law.
Special Categories of Personal Data
Personal data relating to health and sexual life may only be processed by persons under an obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment, and the execution of care services.
Sharing of Personal Data
Personal data may be transferred to third parties or abroad in accordance with Articles 8 and 9 of the Law, provided that the above conditions are met.
Cases Outside the Scope of the Law
- Processing of personal data within the scope of purely personal or household activities,
- Processing for statistical purposes after anonymization,
- Processing for artistic, historical, literary, or scientific purposes,
- Processing within the scope of national security, public security, or judicial activities.
Section 3. Processing of Personal Data by Our Company
Categories of Personal Data Processed by Our Company
| Data Category | Description |
|---|---|
| Identity Information | Driver’s license, ID card, passport, etc. (including Turkish ID number, name-surname, date of birth, photo, etc.) |
| Contact Information | Email address, phone number, address |
| Customer Information | Information belonging to customers who benefit from products or services |
| Financial Information | Information showing financial transaction results (payments, balances, credit amounts, etc.) |
| Visual and Audio Data | Photographs, camera recordings, audio recordings |
Purposes of Processing Personal Data
- Management of information security and IT infrastructure,
- Execution of human resources processes,
- Management of customer relations and satisfaction,
- Tracking of financial and accounting transactions,
- Ensuring the security of company facilities,
- Fulfillment of legal obligations.
Transfer of Personal Data
Personal data may be shared with Sardunya Furniture Company subsidiaries, business partners, suppliers, public institutions, and legal authorities.
Personal Data Security
- Prevention of unauthorized access,
- Implementation of internal training and audits,
- Recording of access authorizations to information,
- Regular monitoring of data processing activities,
- Ensuring security commitments with suppliers.
Section 4. Rights of Data Subjects Under the Law
Rights of Data Subjects
- To learn whether personal data is processed,
- To request information if it has been processed,
- To request correction if it is incomplete or inaccurate,
- To request deletion or destruction of personal data,
- To learn the recipients to whom the data has been transferred domestically or abroad,
- To request compensation in case of damage due to unlawful processing of personal data.
Exercising Rights
Data subjects may submit their requests by verifying their identity via email to info@sardunyafurniture.com. Our company will respond to requests free of charge within 30 days at the latest. Additional information or documentation may be requested when necessary.