Your personal data, as detailed below, which identifies you or makes you identifiable, shall be processed by RCT Danışmanlık Hizmetleri Limited Şirketi (hereinafter referred to as RCT), acting in its capacity as the Data Controller, in compliance with the provisions of the Law No. 6698 on the Protection of Personal Data (KVKK).
Processing of personal data refers to any operation performed upon personal data, whether wholly or partially by automated means or by non-automated means provided that it forms part of a data filing system. These operations include collection, recording, storage, preservation, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, or blocking its use.
The Law No. 6698 on the Protection of Personal Data was published in the Official Gazette dated 07.04.2016 (Issue No. 29677) and has entered into force. Any personal data lawfully obtained by our company prior to the effective date of the aforementioned law shall continue to be processed and stored in accordance with this Privacy Notice and the terms and conditions stipulated under the KVKK.
As RCT, we emphasize that we attach the utmost importance to the security of your personal data. Maintaining the security of your personal data remains at the forefront of the services we provide to you. Our fundamental principle while processing your personal data within our services is to respect your right to privacy and to protect your fundamental rights and freedoms.
Purposes and Legal Grounds for Processing Your Personal Data
In order to deliver services within the scope of the laws and regulations to which our company is subject, to determine your requirements, and to provide you with better service in the future, your personal information, address, telephone number, tax number (if any), and any other information defined as personal data under the KVKK shall be recorded. These data are processed to prepare information and documents based on transactions executed in physical or electronic environments; to comply with information storage, reporting, and disclosure obligations mandated for all judicial and administrative authorities in accordance with the relevant legislation; to perform our services within the scope of the laws we are subject to; and to execute other services requested or offered by our Company.
Pursuant to the second paragraph of Article 5 of the Law, titled “Conditions for processing personal data,” it is possible to process personal data without obtaining the explicit consent of the data subject in the presence of one of the following conditions:
a) It is expressly permitted/provided for by law;
b) It is mandatory for the protection of life or physical integrity of the data subject or another person where the data subject is physically or legally incapable of giving consent;
c) Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the execution or performance of the contract;
d) It is mandatory for compliance with a legal obligation to which the data controller is subject;
e) The relevant data has been made public by the data subject himself/herself;
f) Data processing is mandatory for the establishment, exercise, or protection of a right;
g) Data processing is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
Transfer of Your Personal Data
Your personal data held within our Company may be transferred to individuals, institutions, and/or organizations, and relevant third parties as required or permitted by the laws, regulations, and other legislation we are subject to, within the framework of legal restrictions.
Deletion, Destruction, and Anonymization of Personal Data
(a) Personal data processed in accordance with this Law or other relevant laws shall be deleted, destroyed, or anonymized either ex officio (by the company's own motion) or upon the request of the data subject, in the event that the reasons necessitating its processing cease to exist.
(b) The provisions of other laws regarding the deletion, destruction, and anonymization of personal data are reserved.
(c) The procedures and principles regarding the deletion, destruction, and anonymization of personal data shall be governed by a specific regulation.
Methods of Collecting Personal Data
Your personal data is collected through various methods, including but not limited to declaration/information forms and other documents concerning sales, returns, exchanges, and all other transactions; notifications issued with your approval and/or signature; electronic approvals and/or signatures; and through our branches, web pages, and similar channels, in oral, written, or electronic environments pursuant to the relevant legislation.
Rights of the Data Subject Under Article 11 of the Law
As a personal data owner, you may apply to the data controller to exercise the following rights:
a) Learn whether or not your personal data have been processed;
b) Request information as to processing if your personal data have been processed;
c) Learn the purpose of processing your personal data and whether they are used in accordance with their purpose;
d) Know the third parties in the country or abroad to whom your personal data have been transferred;
e) Request rectification in case your personal data are processed incompletely or inaccurately;
f) Request the deletion or destruction of your personal data within the framework of the conditions set forth under Article 7;
g) Request notification of the operations made pursuant to indents (e) and (f) to third parties to whom your personal data have been transferred;
h) Object to the occurrence of any result to your detriment by means of analyzing the processed data exclusively through automated systems;
i) Request compensation for damages in case you incur loss due to the unlawful processing of your personal data.
Data Controller Contact Information
The contact details of the data controller to whom you can apply under the law are as follows:
Company Title: RCT Danışmanlık Hizmetleri Limited Şirketi
Address: Maslak Mah. Bilim Sokak No:5 K:13 Sarıyer Istanbul
Depending on the nature of the request, the data controller shall finalize the requests included in the application free of charge and within thirty days at the latest. However, if the transaction incurs an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board may be charged.