Privacy and Security

GENERAL METAL INDUSTRY AND TRADE ANONİM ŞİRKETİ (Hereinafter referred to as COMPANY or GENERAL METAL) İNTERNET SITESI COOKIE DISCLOSURE TEXT 

The Company presents the following explanations to the attention of our customers and persons using our website in order to fulfil its obligation to enlighten arising from Article 10 of the Law No. 6698 on the Protection of Personal Data (KVKK). The Company reserves the right to update this Statement on the Protection of Personal Data at any time within the framework of changes that may be made in the applicable legislation.

SHIRKETİN BİLGİLERİ

TITLE: GENERAL METAL INDUSTRY AND TRADE CO. 

ADDRESS:  ZAFER MAH. 2335 SK. NO: 10 BUCA/ IZMIR

TELEPHONE: +90 510 220 44 18   E-MAIL: info@generalmetal.com.tr 

Personal data shared by you with General Metal is under the supervision and control of General Metal. In accordance with the provisions of the relevant legislation in force, the Company has assumed the responsibility as the data controller to establish the necessary organisation and to take and adapt technical measures in order to protect the confidentiality and integrity of the information. Being aware of our obligation in this regard, we periodically carry out penetration tests in accordance with international and national technical standards on data confidentiality and we would like to inform you that we always update our data processing policies in this context.

1. PERSONSELLERİLERLEGAL BASIS FOR THE CONVENTION

There are regulations in various laws on the use of personal data of our customers. First and foremost, the principles of protection of personal data are determined by the KVKK. In addition, the Law No. 6563 on the Regulation of Electronic Commerce also contains provisions on the protection of personal data. The Turkish Penal Code No. 5237 also stipulates criminal sanctions in some cases for the protection of personal data. On the other hand, data must be collected and used in order to fulfil our obligations arising from the Law No. 6502 on Consumer Protection and the Regulation on Distance Contracts.

PERSONSELLERİLERAREAS OF USE

The sharing of personal data of our customers with third parties is carried out within the framework of the consent of the customers and as a rule, personal data are not transferred to third parties without the consent of our customers. However, personal data are shared with courts and other public institutions due to and limited to our legal obligations. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to control the quality of the services provided. Necessary technical and legal measures are taken to prevent violations of rights during data transfer to third parties. However, General Metal is not responsible for the data protection policies of the third party receiving personal data and for violations that occur in the risk area under the responsibility of the third party.

The Company may transfer the personal data and sensitive personal data of the personal data owner to third parties (Group Companies, business partners and other third parties) by taking the necessary security measures in line with the lawful personal data processing purposes.

In this respect, our company acts in accordance with the regulations stipulated in Article 8 of the KVK Law. Your personal data may be shared with General Metal shareholders, our direct/indirect domestic/foreign subsidiaries, program partner institutions that we cooperate with in order to carry out our activities, our lawyers in litigation proceedings, institutions, domestic/foreign persons and institutions that we receive data storage services in the cloud environment, domestic/foreign institutions that we have contracted to send commercial electronic messages to our customers, It may be shared with the Interbank Card Centre, the banks with which we have an agreement and with various agencies, advertising companies and survey companies in Turkey and abroad and other third parties in Turkey and abroad and our related business partners within the scope of various marketing activities in order to provide you with better service and customer satisfaction.

LEGAL BASIS KVKK NUMBERED 6698

Conditions for processing personal data

ARTICLE 5

(1) Personal data cannot be processed without the explicit consent of the data subject.

(2) In the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the data subject:

1. a) Explicitly stipulated in the laws.
2. b) It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
3. c) Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process the personal data of the parties to the contract.

ç) It is mandatory for the data controller to fulfil its legal obligation.

1. d) it has been publicised by the person concerned.
2. e) Data processing is mandatory for the establishment, exercise or protection of a right
3. f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Conditions for processing special categories of personal data

ARTICLE 6

(1) Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are sensitive personal data.

(2) Processing of sensitive personal data without the explicit consent of the data subject is prohibited

(3) Personal data other than health and sexual life listed in the first paragraph may be processed without the explicit consent of the data subject in cases stipulated by law. Personal data relating to health and sexual life may only be processed without the explicit consent of the data subject by persons under the obligation of confidentiality or authorised institutions and organisations for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing.

(4) In the processing of special categories of personal data, it is also required to take adequate measures determined by the Board.

(5) Our Company has no special categories of personal data requests from third parties. 

Deletion, destruction or anonymisation of personal data  

ARTICLE 7

(1) Although it has been processed in accordance with the provisions of this Law and other relevant laws, personal data shall be deleted, destroyed or anonymised by the data controller ex officio or upon the request of the data subject if the reasons requiring its processing disappear.

(2) The provisions of other laws regarding the deletion, destruction or anonymisation of personal data are reserved.

(3) Procedures and principles regarding the deletion, destruction or anonymisation of personal data shall be regulated by regulation

Transfer of personal data

ARTICLE 8

- (1) Personal data cannot be transferred without the explicit consent of the data subject.

(2) Personal data;

1. a) In the second paragraph of Article 5,
2. b) Provided that adequate measures are taken, in the presence of one of the conditions specified in the third paragraph of Article 6, it may be transferred without seeking the explicit consent of the person concerned.

(3) The provisions of other laws regarding the transfer of personal data are reserved.

 3-KWORKSELLERİLERİN WORKLENME BUTBOTTOM LINES

General Metal processes personal data limited to the purposes and conditions within the personal data processing conditions specified in paragraph 2 of Article 5 and paragraph 3 of Article 6 of the KVKK. These purposes and conditions;

• To confirm the identity information of the shopper / shopper via the website / mobile communication,
• To record the address and other necessary information for contact,
• To communicate with our customers regarding the conditions, current status and updates of the contracts we have concluded within the scope of the distant sales contract and the relevant articles of the Law on Consumer Protection and to provide the necessary information,
• To organise all records and documents that will be the basis of the transaction in electronic (internet/mobile etc.) or paper environment,
• To fulfil the obligations undertaken in accordance with the distance sales contract and the contracts we have concluded within the scope of the relevant articles of the Law on Consumer Protection,
• To be able to provide information to public officials on matters related to public security upon request and in accordance with the legislation,
• To provide our customers with a better shopping experience, to provide information to our customers about our products that our customers may be interested in "taking into account the interests of our customers", to convey campaigns,
• To increase customer satisfaction, to be able to recognise our customers who shop by phone, website and/or mobile applications and to use them in customer environment analysis, to use them in various marketing and advertising activities and to organise surveys in electronic environment and/or physical environment through contracted organisations in this context,
• To be able to offer suggestions to our customers by our contracted institutions and solution partners and to inform our customers about our services,
• To be able to evaluate customer complaints and suggestions about our services,
• To fulfil our legal obligations and to exercise our rights arising from the legislation in force,
• To prevent fraud and other illegal activities.
• It is clearly stipulated in the Laws that General Metal is engaged in the relevant activity regarding the processing of personal data
• The processing of personal data by General Metal is directly related to and necessary for the establishment or performance of a contract
• Processing of personal data is mandatory for General Metal to fulfil its legal obligations
• Planning and execution of Corporate Sustainability activities
• Supporting community staff recruitment processes
• Execution/follow-up of General Metal financial reporting and risk management procedures
• Execution/follow-up of General Metal legal affairs
• Planning and execution of corporate communication activities

4. PERSONSELLERİLERİM PURSUANT TO THE LAW ON THE PROTECTION OFÜŞTERI RIGHTS:

Your personal data in accordance with KVKK; 

1. Learning whether it is processed or not,
2. To request information if processed, to learn the purpose of processing and whether it is used in accordance with its purpose,
3. Knowing the third parties to whom it is transferred domestically / abroad,
4. Request correction if incomplete / incorrectly processed,
5. To request deletion / destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
6. To request notification of the transactions made in accordance with paragraphs (d) and (e) above to the third parties to whom it is transferred,
7. Object to the occurrence of a result that is to your detriment as a result of being analysed exclusively by automated systems,
8. We would like to remind you that you have the right to demand the compensation of the damage in case you suffer damage due to processing in violation of KVKK.

Within the framework of the above explanations, by continuing to visit our website www.generalmetal.com.tr  KVKK within the scope of the disclosure obligation at'collection of your personal data by General Metal in accordance with the LawiYou agree that you approve the processing, sharing with other legal entities within General Metal, updating, periodically checking, keeping in the database, storing and sharing with the specified institutions and organisations, and that you approve the storage and storage of your personal data by these organisations.

This information letter has been prepared to fulfil the disclosure obligation pursuant to Article 10 of the KVKK.