This clarification text has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) in order to inform data subjects regarding the processing of personal data collected within the legal entity of FOSROC SCC (“FOSROC CONSTRUCTION CHEMICALS INC.”), its relevant directorates, units, and service centers.
The DATA CONTROLLER shows the utmost care and effort in the processing, protection, and security of personal data.
Personal data may be collected by the DATA CONTROLLER through auditory, written, visual, or electronic methods.
Within this scope and in accordance with the Law, personal data of data subjects may be processed by the DATA CONTROLLER, acting in its capacity as the Data Controller, for the purposes of carrying out the necessary activities and operations in line with the general principles specified in the Law.
Personal data are processed in accordance with the personal data processing conditions set forth in Articles 5 and 6 of the Law, and within the purposes specified in the Law, including but not limited to the purposes listed below:
Enabling the DATA CONTROLLER to fulfill its duties and responsibilities and to carry out the necessary operations required under relevant legislation
Conducting necessary studies to ensure that maximum benefit is obtained from the services provided by the DATA CONTROLLER
Ensuring the legal obligations and service security of the DATA CONTROLLER and its stakeholders
Maintaining the services and strategies of the DATA CONTROLLER
Fulfilling responsibilities arising from laws and relevant regulations that impose rights, duties, and obligations on the DATA CONTROLLER
Managing the human resources and employment policies of the DATA CONTROLLER
Carrying out processes related to the protection of cultural assets
Conducting library services and related activities
Managing support, grant, and incentive processes
Carrying out processes related to museums
Managing European and international relations
Conducting press and media activities
Organizing artistic events and activities
Improving service and management quality and carrying out related activities
The DATA CONTROLLER makes every effort to take all necessary legal, technical, and administrative measures in accordance with the principles set forth in the Law in order to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the secure storage of personal data.
Personal data collected from employees, job candidates, interns, individuals subject to news, potential product or service buyers, product or service buyers, supplier employees, supplier representatives, parents/guardians/representatives, visitors, and other individuals may be shared with the DATA CONTROLLER’s suppliers, service providers, data processors, and legally authorized institutions and organizations within the framework of Articles 8 and 9 of the Law, in accordance with relevant legislation and in line with the purposes and conditions for processing personal data.
In cases where personal data is shared, the DATA CONTROLLER takes the necessary administrative and technical measures and all required security precautions. Additionally, the DATA CONTROLLER implements ISO 27001 Information Security Management System standards and other data security practices.
The DATA CONTROLLER fulfills its duty of care regarding the transfer and sharing of personal data and attaches great importance to the security of your data.
The DATA CONTROLLER collects personal data through auditory, written, visual, and electronic environments within the scope of the purposes stated in this clarification text.
The collection of personal data is carried out based on many legal grounds such as ensuring that the services provided by the DATA CONTROLLER are delivered in compliance with laws and relevant regulations, fulfilling contractual and legal obligations, and conducting business activities.
Personal data processing is carried out in accordance with the conditions specified in the Law and based on the following legal grounds:
The explicit consent of the data subject
Explicitly stipulated by law
Necessity for protecting the life or physical integrity of a person who cannot express consent due to actual impossibility
Necessity for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract
Necessity for the DATA CONTROLLER to fulfill its legal obligations
The personal data being made public by the data subject
Necessity for the establishment, exercise, or protection of a right
Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
According to Article 11 of the Law, personal data owners have the following rights:
To learn whether personal data is processed
To request information if personal data has been processed
To learn the purpose of processing personal data and whether they are used in accordance with their purpose
To know the third parties to whom personal data are transferred domestically or abroad
To request correction of incomplete or inaccurate personal data
To request deletion or destruction of personal data within the conditions specified in Article 7 of the Law
To request notification of the correction, deletion, or destruction of personal data to third parties to whom the data has been transferred
To object to any outcome against the person arising from the analysis of processed data exclusively through automated systems
To request compensation for damages in case personal data is processed unlawfully
To exercise these rights, personal data owners may apply to the DATA CONTROLLER in writing or through other methods determined by the Personal Data Protection Board. Applications will be concluded as soon as possible and within thirty (30) days at the latest, depending on the nature of the request.
For applications to the DATA CONTROLLER, the relevant address and contact information are provided below.