As Dias Bilişim ve Teknoloji Hizmetleri A.Ş. ("DIAS"), this Personal Data Processing Clarification Text ("Clarification Text") has been prepared in order to enlighten the data owners regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Personal Data Protection Law No. 6698 ("KVKK") and related legislation and legal regulations.
The Clarification Text will be valid as of the date of its publication by DIAS. DIAS may make changes to the Clarification Text at any time if necessary. Changes to be made become effective immediately upon the publication of the Clarification Text on the website.
Purpose of Processing Your Personal Data, Legal Reason and Collection Methods
Your identity (name, surname), contact (e-mail address), transaction security (IP information, browser information, page visit time and viewing information) and request and complaint (e-mail content) data; carrying out communication activities, following up requests/complaints and customer relations, conducting the necessary research/examinations to perform support services on the subject of the request, information and support to you limited to the purposes of providing services, ensuring system security, preventing abuse and keeping access records, Article 5, Article 2 of the Law. It is processed through e-mail messages and information systems in accordance with the legal reason of subparagraph (ç) of the paragraph "It is mandatory for the data controller to fulfill its legal obligation".
Your personal data will be processed by complying with the rules in Article 8 of the KVKK titled "Transfer of Personal Data" and by taking the necessary technical and administrative measures;
- to authorized persons and official institutions in accordance with legal regulations and legislation in order to fulfill our legal obligations for the legal reasons listed above,
- to suppliers and our group companies for the purposes of carrying out business activities, carrying out goods/services procurement and operation processes, carrying out goods/services production and operation processes and carrying out contract processes,
can be transferred.
Retention of Personal Data, Your Rights and Application
Storage and Disposal
DIAS has established a Storage and Disposal Policy for the storage and deletion of personal data. The storage and destruction of your personal data are carried out within the scope of this policy. Accordingly, if a period is determined for the storage of data in the KVKK or in the relevant laws and other relevant legislation, the data in question must be stored for at least this period.
Considering the possibility that a possible court request or a request of an administrative authority authorized by law regarding the relevant data reaches us late or a dispute that we may be a party to, a period of 6 months to 1 year is added to the periods stipulated in the legislation for the storage of your data, and the data in question is deleted, destroyed or anonymized at the end of the specified period.
If the legislation does not stipulate a period for the retention period of the data we process, your data will be deleted, destroyed or anonymized without the need for any request upon the expiration of the 10-year statute of limitations from the termination of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.
If all of the processing conditions of personal data have disappeared or the retention period declared by us or determined within the scope of the legislation has expired, your data is deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest, to the extent legally possible. If you request the deletion or destruction of your data, the retention period of which is determined in the legislation, before the stipulated periods, your request will not be fulfilled.
Your rights
Regarding your personal data within the scope of KVKK and relevant legislation;
- To learn whether your personal data is processed or not,
- If your personal data has been processed, to request information about it,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your personal data is transferred at home or abroad,
- To request correction of your personal data if it is incomplete or incorrectly processed,
- To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
- When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, to request that this situation be notified to third parties to whom we have transferred your personal data,
- To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and
- If you suffer damage due to unlawful processing of personal data, to request compensation for this damage,
you have the rights.
Application
You can submit your applications and requests regarding your personal data by using the Data Owner Application Form on our website;
- By sending it to the address Barbaros Mahallesi Begonya Sokak Nidakule Kuzey Ataşehir No:3E İç Kapı No:5 34746 Ataşehir/İstanbul with wet signature and a copy of the identity card ,
- By applying to Dias Information Services and Technology Company in person with a valid identity document,
- By sending it to our diasbilisim@hs03.kep.tr e-mail address using a registered electronic mail (KEP) address and a secure electronic signature or mobile signature,
- By sending it to our kvkk@diasteknoloji.com address from the e-mail address previously notified to Dias Bilişim ve Teknoloji Hizmetleri A.Ş. by the Relevant Person and registered in the system.
You can forward it to Dias Bilişim ve Teknoloji Hizmetleri A.Ş.
Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application of the Data Subject must include the name, surname, signature if the application is in writing, TR identity number, (passport number if the applicant is a foreigner), place of residence or workplace address for notification, e-mail address, telephone number and fax number, if any, and information about the subject of the request.
The matter requested must be clearly and understandably stated in the application, which includes explanations about the right that the Relevant Person will make and request to exercise the above-mentioned rights. Information and documents related to the application must be attached to the application.
Although the subject of the request must be related to the applicant's person, if the applicant is acting on behalf of someone else, the applicant must be authorized in this regard and this authority must be documented. In addition, the application must include identity and address information and documents confirming identity must be attached to the application.
Requests made by unauthorized third parties on behalf of someone else will not be evaluated.
Your requests regarding your personal data are evaluated and answered within 30 days at the latest from the date they reach the relevant department. If your application is evaluated negatively, the reasons for rejection will be sent to you by e-mail or mail to the address you specified in the application, if possible, through the procedure in which the request was made.