Personal Data Protection Law (KVKK)


Clarification Text

1. Introduction

This clarification text has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) in order to inform data subjects regarding the processing of personal data collected within the legal entity of FOSROC SCC (“FOSROC CONSTRUCTION CHEMICALS INC.”), its relevant directorates, units, and service centers.

The DATA CONTROLLER shows the utmost care and effort in the processing, protection, and security of personal data.

Personal data may be collected by the DATA CONTROLLER through auditory, written, visual, or electronic methods.

Within this scope and in accordance with the Law, personal data of data subjects may be processed by the DATA CONTROLLER, acting in its capacity as the Data Controller, for the purposes of carrying out the necessary activities and operations in line with the general principles specified in the Law.


2. Purpose of Processing Personal Data

Personal data are processed in accordance with the personal data processing conditions set forth in Articles 5 and 6 of the Law, and within the purposes specified in the Law, including but not limited to the purposes listed below:

  • Enabling the DATA CONTROLLER to fulfill its duties and responsibilities and to carry out the necessary operations required under relevant legislation

  • Conducting necessary studies to ensure that maximum benefit is obtained from the services provided by the DATA CONTROLLER

  • Ensuring the legal obligations and service security of the DATA CONTROLLER and its stakeholders

  • Maintaining the services and strategies of the DATA CONTROLLER

  • Fulfilling responsibilities arising from laws and relevant regulations that impose rights, duties, and obligations on the DATA CONTROLLER

  • Managing the human resources and employment policies of the DATA CONTROLLER

  • Carrying out processes related to the protection of cultural assets

  • Conducting library services and related activities

  • Managing support, grant, and incentive processes

  • Carrying out processes related to museums

  • Managing European and international relations

  • Conducting press and media activities

  • Organizing artistic events and activities

  • Improving service and management quality and carrying out related activities

The DATA CONTROLLER makes every effort to take all necessary legal, technical, and administrative measures in accordance with the principles set forth in the Law in order to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the secure storage of personal data.


3. Sharing and Transfer of Personal Data

Personal data collected from employees, job candidates, interns, individuals subject to news, potential product or service buyers, product or service buyers, supplier employees, supplier representatives, parents/guardians/representatives, visitors, and other individuals may be shared with the DATA CONTROLLER’s suppliers, service providers, data processors, and legally authorized institutions and organizations within the framework of Articles 8 and 9 of the Law, in accordance with relevant legislation and in line with the purposes and conditions for processing personal data.

In cases where personal data is shared, the DATA CONTROLLER takes the necessary administrative and technical measures and all required security precautions. Additionally, the DATA CONTROLLER implements ISO 27001 Information Security Management System standards and other data security practices.

The DATA CONTROLLER fulfills its duty of care regarding the transfer and sharing of personal data and attaches great importance to the security of your data.


4. Method and Legal Basis for Collecting Personal Data

The DATA CONTROLLER collects personal data through auditory, written, visual, and electronic environments within the scope of the purposes stated in this clarification text.

The collection of personal data is carried out based on many legal grounds such as ensuring that the services provided by the DATA CONTROLLER are delivered in compliance with laws and relevant regulations, fulfilling contractual and legal obligations, and conducting business activities.

Personal data processing is carried out in accordance with the conditions specified in the Law and based on the following legal grounds:

  • The explicit consent of the data subject

  • Explicitly stipulated by law

  • Necessity for protecting the life or physical integrity of a person who cannot express consent due to actual impossibility

  • Necessity for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract

  • Necessity for the DATA CONTROLLER to fulfill its legal obligations

  • The personal data being made public by the data subject

  • Necessity for the establishment, exercise, or protection of a right

  • Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject


5. Rights of Personal Data Owners and Protection of Rights

According to Article 11 of the Law, personal data owners have the following rights:

  • To learn whether personal data is processed

  • To request information if personal data has been processed

  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose

  • To know the third parties to whom personal data are transferred domestically or abroad

  • To request correction of incomplete or inaccurate personal data

  • To request deletion or destruction of personal data within the conditions specified in Article 7 of the Law

  • To request notification of the correction, deletion, or destruction of personal data to third parties to whom the data has been transferred

  • To object to any outcome against the person arising from the analysis of processed data exclusively through automated systems

  • To request compensation for damages in case personal data is processed unlawfully

To exercise these rights, personal data owners may apply to the DATA CONTROLLER in writing or through other methods determined by the Personal Data Protection Board. Applications will be concluded as soon as possible and within thirty (30) days at the latest, depending on the nature of the request.

For applications to the DATA CONTROLLER, the relevant address and contact information are provided below.