Supplier Clarification Text

Anasayfa » Supplier Clarification Text

Global IT Bilişim Hizmetleri A.Ş (Global IT), as the data controller, processes your personal data in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and other relevant legislation.

According to Article 10 of the KVKK, which regulates the Disclosure Obligation, data controllers are obliged to inform the relevant persons whose personal data they process on certain issues.

This clarification text has been prepared in accordance with the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Disclosure Obligation published by the Personal Data Protection Authority in order to fulfill the legal obligation.

Definitions

According to the Law on the Protection of Personal Data No. 6698:

Personal data includes any information relating to an identified or identifiable natural person;

Processing of personal dataany operation performed on personal data, such as obtaining, recording, storing, preserving, changing, rearranging, disclosure, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system;

The person concerned means the natural person whose personal data is processed;

The data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

The obligation to clarify is that during the acquisition of personal data, the data controller or the person authorized by him/her shall notify the relevant persons; the obligation to provide information about the identity of the data controller, the purpose for which the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data and other rights listed in Article 11 of the Law;

expresses.

Contact Person

You, whose personal data are processed by Global IT , are defined as a Supplier due to the goods and services you provide and you are accepted as a Relevant Person by the Law.

Data Controller

It is the Global IT data controller who determines the purposes and means of processing personal data with respect to personal data concerning you and is responsible for the establishment and management of the data recording system.

Obtaining Your Personal Data

The documents you transmit physically are obtained by non-automatic methods, and your data collected in electronic environment are obtained by automatic and partially automatic methods.

Automatic data processing is the processing activity that takes place spontaneously without human intervention within the scope of algorithms prepared in advance through software or hardware features, performed by processor-bearing devices such as computers and phones. Partially automatic data processing is the activity of processing personal data through devices that have human influence but also have processors such as computers. Of your personal data processed by non-automated methods, only those that are part of a data recording system are considered as personal data processing within the scope of the Law.

The following shows your personal data and methods of acquisition. The same personal data can also be obtained by more than one method.

Method / Environment	Data
Electronically directly from you by automated means	Identity (Name, Surname and T.R. Identity No.), Contact (Telephone Number (Mobile) and Telephone Number (Fixed)) Address (Address, Address, Province, Address, District and Postal Code) Taxpayer Information (Trade Title, Tax Office and Tax Identification Number);
Non-automated methods directly from you on paper	Identity (Name, Surname, Signature, T.R. Identity No., Date of Birth, etc.) Institution Information (Name of the Institution where Employees) Contact (E-Mail Address and Phone Number (Mobile)) Document Information (Document Date) ;

Purposes of Processing Your Personal Data and Legal Reasons

The table below lists the legal grounds for processing your personal data and the purposes for which it is processed.

Provided that it is directly related to the establishment or performance of a contract regulated in Article 5/2c of the KVKK, it is necessary to process the personal data of the parties to the contract
Pursuant to the Goods / Services Purchase Agreement concluded / to be concluded with You for the purpose of carrying out financial and accounting affairs ;	Identity (Name, Surname, T.R. Identity No.), Finance (IBAN, Bank Name, Bank Account No., Bank Branch Name, Amount to be Paid, Payment Date, Payment Description etc.) Contact (Phone Number (Fixed), Phone Number (Mobile)), Address (Address, Address Province, Address County), Taxpayer Information (Trade Name, Tax Office, Tax Identification Number)
Pursuant to the Purchase of Goods / Services Contract concluded / to be concluded with You for the purpose of carrying out the contract processes ;	Identity (Name, Surname, Signature, T.R. Identity No., Date of Birth, etc.), Institution Information (Name of the Institution Where He Works), Contact (E-Mail Address, Phone Number (Mobile)), Document Information (Document Date)

Since it is mandatory for the data controller in Art.5/2ç of the KVKK to fulfill its legal obligation;
In order to carry out storage and archive activities , in accordance with the Commercial Documents to be Kept and the Retention Period (Article 82) in the Turkish Commercial Code;	Identity (Name, Surname, T.R. Identity No.), Finance (IBAN, Bank Name, Bank Account No., Bank Branch Name, Amount to be Paid, Payment Date, Payment Description etc.)

Since data processing is mandatory for the establishment, use or protection of a right in Article 5/2e of KVKK

In accordance with the Tbk General Statute of Limitations (Article 146) in the Turkish Code of Obligations for the purpose of carrying out storage and archive activities ;

Identity (Name, Surname, Signature, T.R. Identity No., Date of Birth, etc.), Institution Information (Name of the institution where he works, trade name, institution address, trade registry number, trade registry name), Communication (Phone Number (Landline), Email Address, Phone Number (Mobile)), Document Information (Document date, document issue date, document number, journal number), Address (Address, Address Province, Address District), Taxpayer Information (Trade Name, Tax Office, Tax Identification Number)

Provided that it does not harm the fundamental rights and freedoms of the data subject in Article 5/2f of the KVKK, since the data processing is mandatory for the legitimate interests of the data controller;
For the purpose of carrying out financial and accounting affairs and carrying out storage and archive activities	Identity (Name, Surname, T.R. Identity No.), Contact (Phone Number (Mobile), Telephone Number (Fixed)), Address (Address, Address Province, Address District, Postal Code), Taxpayer Information (Trade Title, Tax Office, Tax Identification No.)

Transfer of Your Personal Data

If your personal data is requested within the framework of Article 28/1 of the KVKK, it may be transferred to the relevant authorities without any obligation to clarify and without seeking your explicit consent.

Apart from this, in unforeseen cases, your personal data may be transferred to the public institutions specified in the laws (ministries, administrative authorities such as Presidential boards) within the purposes and limitations stipulated in the law if requested in cases clearly stated in the laws.

Your personal data is not transferred to any institution, person or organization except for our legal obligations that do not have an obligation to clarify and do not require your explicit consent

Your Rights Regarding Your Personal Data

Relevant persons must first apply to the data controller in order to exercise their rights regarding their personal data. According to Article 14 of the Law, no complaint can be made directly to the Personal Data Protection Board.

In accordance with the law, your personal data

a) To learn whether personal data is processed or not,

b) If your personal data has been processed, to request information about it,

c) To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

ç) To know the third parties to whom your personal data is transferred domestically or abroad,

d) Requesting the correction of your personal data if it is incomplete or incorrectly processed,

e) Requesting the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear,

f) (d) and Requesting that the transactions carried out in accordance with subparagraphs (e) are notified to the third parties to whom your personal data is transferred,

g) To object to the occurrence of a result against you by analyzing your processed data exclusively by means of automated systems,

ğ) Requesting the compensation of the damage in case you suffer damage due to the unlawful processing of personal data

You can exercise your rights by contacting the data controller, i.e. us.

Method of Application to the Data Controller

Your application

• Fulya Mah. Ortaklar Cad. Bahceler Sok. Onsekiz İş Merkezi No:18/4 Şişli / Istanbul / TURKEY in writing to the address;
• globalit@hs01.kep.tr using your registered electronic mail address to the registered electronic mail address;
• You can do this by sending an e-mail to the kvk@globalit.com.tr address using your e-mail address registered in our system.

More detailed information about the procedures and principles to be followed when applying can be found in the Communiqué on the Procedures and Principles of Application to the Data Controller of the Personal Data Protection Authority.