The protection of your personal data is of vital importance to us. We would like to inform you that we will take all necessary measures in this regard and that we will continue to be extremely transparent and will be updated in accordance with the updates made by law.
1. What is Personal Data?
It refers to any information relating to an identified or identifiable natural person. Data such as name, surname, date and place of birth, information on the physical, family, economic and other characteristics of the person, name, telephone number, motor vehicle license plate number, social security number, passport number are personal data.
2. What is Sensitive Personal Data?
Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.
3. What is Processing of Personal Data?
It is any operation performed on personal data such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, limiting or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.
4. Who is Data Controller.
The natural or legal person who determines the purposes and methods of processing personal data and is responsible for the establishment and management of the data recording system.
5. Who is the Data Processor.
Natural or legal persons outside the organization of the data controller who process personal data on behalf of the data controller based on the authority granted by the data controller. These persons are a separate natural or legal person authorized by the data controller by concluding a personal data processing agreement, who processes personal data within the framework of the instructions given to them.
6. What is a Data Recording System.
A data recording system is a recording system where personal data is structured and processed according to certain criteria. These systems can be created electronically or physically.
7. What is Automated Data Processing.
It is a processing activity that is performed by devices with processors such as computers, phones, watches, etc., and that takes place spontaneously without human intervention within the scope of algorithms prepared in advance through software or hardware features.
8. Anonymization
Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even if it is matched with other data.
9. Publicization
The concept of publicization, which means “making known to everyone”, is listed in Article 5 of Law No. 6698 as one of the cases where personal data can be processed without explicit consent.
Accordingly, personal data that are made public by the data subject himself/herself, in other words, personal data that the data subject has disclosed to the public in any way with the will of publicization, may also be processed without the explicit consent of the data subject within the scope of the purpose of publicization and the general principles regulated in Article 4 of the Law.
Name, Surname - TR Identity Number - Tel No - E-mail Address - Blood Group - IBAN Number - Vehicle License Plate.
10. Contact Person
The natural person whose personal data is processed.
Pursuant to Article 10 titled “Data Controller's Obligation to Inform” of the Personal Data Protection Law No. 6698 (“KVKK” or “Law”) published in the Official Gazette dated April 7, 2016 and numbered 29677, which aims to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform published in the Official Gazette dated March 10, 2018 and numbered 303577 In accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK” or “Law”) titled “Data Controller's Obligation to Inform” and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform published in the Official Gazette dated March 10, 2018 and numbered 30356, we aim to inform you about your personal data processed with this Clarification Text.
Pursuant to Law No. 6698 on the Protection of Personal Data, your personal data, including any information that makes your identity specific or identifiable and your personal data of special nature, may be processed by TolCamp (Tolga Doğan Personal Enterprise) as the data controller.
Your Processed Personal Data, Collection Methods, Purposes of Processing and Reasons for Lawfulness.
Your personal data collected during your membership phase in order to receive products/services and then edited to complete your membership profile;
Your Personal data available and processed in the My Profile tab:
Under the heading of Your account: Display name, Date of birth, Country, City.
Under the heading Your reservation information: Name, Surname, E-mail address, Cell phone, Phone, Gender, Profession.
Under the heading Your address information: Country, City, County, District, Postcode, Address.
Under the heading Your billing information: Country, E-mail address, City, Invoice type, District, Tax office, Address, Tax number, Trade name.
For the following purposes:
Ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company, conducting satisfaction assessment activities for our existing customers, conducting communication activities, conducting company, product and service loyalty processes, monitoring and conducting legal affairs, conducting training activities, organization and event management, sales, marketing and purchasing processes, execution of advertising, campaign, promotion processes, execution of finance and accounting transactions, execution and supervision of logistics activities, execution of business activities, execution of internal audit processes, execution of occupational health and safety activities, fulfillment of the obligation to notify relevant/authorized public institutions (Courts, Ministry of Finance, Ministry of Labor and Social Security, Ministry of Internal Affairs, etc.), ensuring the execution of our Company's human resources policies, fulfillment of contractual and legislative obligations for employees, execution of information and physical security processes, execution of storage and archive activities, execution of activities in accordance with the legislation. b.), ensuring the execution of our Company's human resources policies, fulfilling the obligations arising from the employment contract and legislation for employees, carrying out information and physical security processes, carrying out storage and archive activities, and carrying out activities in accordance with the legislation. TolCamp (Tolga Doğan Personal Business) and www. tolcamp.com with SSL certificate with SHA-256 and X9.62 ECDSA security level for membership and transactions in a limited and measured manner and in accordance with the principles of KVKK and in accordance with the legislation of the K.V.K.Law No. 6698, it is obtained and processed by automatic and non-automatic means.
About your personal data in Payment Services:
In the event that a person who sells over the internet processes the data of its customers through an agreement with a payment service company; the payment service company is not the data processor of the seller, it has the status of data controller in terms of data processing.
Because it is a payment service company;
(1) Decides what data should be collected from customers to ensure accurate payments.
(2) It has control over the purpose for which the collected data is used.
(3) It has its own terms and conditions that it applies directly to customers whose personal data is processed, independently of the merchant.
(4) It is subject to legal obligations independent of the Seller.
Your personal data may be sent to authorized public institutions / organizations in accordance with the obligations arising from legal legislation such as KVKK, TTK, VUK, SGK, Labor Law, OHS Law, Vocational Qualifications Authority Law, Workplace Medicine Regulation in order to complete the delivery / ordering of the Product / Service you have purchased by selecting the location as Domestic and Foreign, and to intermediary financial institutions in order to evaluate financial risks, To independent audit firms for the purpose of conducting audit processes, to intermediary training institutions providing vocational training services, to our business partners, subsidiaries and affiliates, shareholders, group companies and local/international organizations from which we receive support in our business processes, to law enforcement agencies, and to Domestic and Foreign Countries within the framework of legal grounds and your consent, in compliance with the law.
2. Protection, Preservation and Destruction of Your Personal Data
Your personal data will be processed by TolCamp (Tolga Doğan Personally Owned Business) for the period required by the purpose of processing personal data and will be retained until the end of the legal period in any case. Following the expiration of the retention period, your personal data will be deleted, destroyed or anonymized from electronic and physical media in accordance with the Personal Data Protection and Privacy Policy, the Personal Data Protection and Privacy Policy and the Personal Data Storage and Destruction Policy of TolCamp (Tolga Doğan Sole Proprietorship) in accordance with the KVK legislation.
TolCamp (Tolga Doğan Personal Enterprise) takes all necessary technical and administrative measures in accordance with the PDP legislation in order to prevent access to your personal data by unauthorized persons, incorrect processing of your personal data, disclosure, change/deletion for unlawful reasons, and to ensure its protection and security.
In the event that your personal data is damaged and/or seized/disclosed by third parties as a result of attacks on the physical archive and/or servers and/or other systems of TolCamp (Tolga Doğan Personal Business), TolCamp (Tolga Doğan Personal Business) shall immediately inform you and the Personal Data Protection Board.
3. Rights of the Data Subject Whose Personal Data is Processed
In accordance with the provisions of Article 11 of the Law, you have the following rights in relation to your personal data.
To learn whether personal data is being processed or not,
If personal data has been processed; to request information regarding this,
To learn the purpose of processing personal data and whether they are used for their intended purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing
Request deletion or destruction of personal data,
In case of correction, deletion or destruction of personal data, to request notification of these transactions to third parties to whom personal data are transferred,
To object to the occurrence of a result to the detriment of the data subject by analyzing the processed personal data exclusively through automated systems,
In case of damage due to unlawful processing of personal data, to demand compensation for the damage.
4. If you would like to contact us for your rights and requests
Within the scope of the above-mentioned rights, you can submit your requests to us in writing to our headquarters located at the address “Yunusemre Mahallesi 6440. Sokak No:4 Daire:6 / Denizli/Pamukkale” in person with a petition or through a notary public by attaching the official documents required for identity confirmation in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” and/or you can send it to info.tolcamp.com e-mail address by attaching the official documents required for identity confirmation.
Personal applications to be made within this scope will be accepted following the identity verification to be made by us and your requests will be finalized as soon as possible and within 30 days at the latest, depending on their nature. In case of a written response to the application, no fee will be charged up to 10 pages, and for each page over 10 pages, the transaction fee specified in Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged. If the response to the application is given in a recording medium such as CD, flash memory, a fee equal to the cost of the recording medium may be charged.
In cases of misuse of personal data, the following articles of the Turkish Penal Code will come into play.
Article 35 Responsibility for attempted crime
Article 42 Compound Crime
Article 43 Decision to commit a crime
Article 44 Intellectual Consolidation
Article 135 Recording of personal data
Article 136 Unlawful disclosure or interception of data
Article 137 Qualifying circumstances
Article 138 Failure to destroy data
Article 139 Complaint
Article 140 Imposition of security measures against legal entities
Article 142/2-E Theft through informatics
Article 243 Hacking into the information system
Article 244 Obstructing, disrupting, destroying or altering the system
Article 245 Misuse of debit or credit cards
Article 245/A Prohibited devices or programs
DATA CONTROLLER:
In terms of your personal data processed during the fulfillment of the service / product delivery you receive for a fee within the scope of your Explicit Consent approval, TolCamp (Tolga Doğan Personal Business) has the title of “Data Controller” in accordance with the Law and you can reach the Data Controller through the contact information below.
Address: Yunusemre Mahallesi, 6440th Street, No:4 Apartment:6 Pamukkale / Denizli / Turkey
Telephone: +90 555 028 06 49
Internet Address: www.tolcamp.com
E-Mail Address: info@tolcamp.com
