Privacy Notice

Inter Türk Cert takes the highest level of security measures to ensure that your personal data is collected, stored, and shared lawfully and to protect your privacy.

Our aim is to provide you with the most transparent information regarding how your personal data is collected, the purposes of processing, the persons with whom data is shared, legal reasons, and your rights, in accordance with Article 10 of the Personal Data Protection Law No. 6698 and to ensure your satisfaction.

a) Data Controller

In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data will be collected and processed by Inter Türk Cert (“COMPANY”) as the data controller within the scope explained below.

b) Purpose of Processing Personal Data

Personal data may be collected by the COMPANY from parties such as customers, employees, potential customers, job applicants, business partners, and suppliers in categories such as identity information, contact information, customer information, transaction details, transaction security data, legal proceedings and compliance information, marketing and sales data.

The personal data collected will be processed for the following purposes:

• To provide COMPANY’s products and services to you, fulfill our obligations towards you, organize records and documents, comply with information retention, reporting, notification, tax and other obligations required by local and international legislation,
• To offer you personalized advertisements, campaigns, advantages, and other benefits related to sales and marketing activities to improve the quality of products and services,
• To manage infrastructure and commercial activities and comply with internal policies and procedures including audit, finance and accounting, invoicing and collections, IT systems, data and website hosting, business continuity, records, document and print management,
• To communicate necessary information regarding IT requirements, system structure, and support services provided related to these products and services,
• To carry out traffic measurement, statistical analysis, segmentation/profiling, and CRM activities for sales and marketing,
• To measure and increase customer satisfaction, manage complaints, receive feedback and suggestions on new services and products, handle error reports, and provide information related to products, services, complaints and requests,
• To receive orders, process payments, collaborate with third parties for logistics and product delivery, suggest products and services of possible interest, online behavioral advertising and marketing, portfolio management, measuring and improving service quality, communication, optimization, auditing, risk management and control, promotions, analysis, interest identification, scoring, profiling, marketing, sales, advertising, and communication,
• To use your personal data in comparative product/service offers, modeling, existing or new product studies and/or developments, and in any products and services provided to you within the scope of the COMPANY’s main contract regulated by law and related legislation,
• To comply with information retention, reporting, notification obligations imposed by official authorities, fulfill contractual requirements, and comply with legal obligations of the COMPANY,
• For determining and implementing COMPANY’s commercial and business strategies; managing financial operations, communications, market research, social responsibility activities, procurement operations (request, offer, evaluation, order, budgeting, contract), internal system and application management, and legal operations by the COMPANY,
• To comply with anti-money laundering and counter-terrorism laws, other applicable laws and regulatory obligations (including those outside your country of residence), legal processes, and to examine, evaluate, and respond to requests from official and governmental authorities (including those outside your country of residence), your personal data will be processed within the scope and conditions of Articles 5 and 6 of Law No. 6698.

Your personal data collected will be shared, limited to the purposes stated above, with:

• Persons or entities authorized by laws such as the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Laundering Proceeds of Crime, Turkish Commercial Code, Code of Obligations, and other legal provisions,
• Legally authorized public institutions, administrative authorities, and legal authorities,
• Overseas companies and subsidiaries,
• Real or legal persons, program partner institutions and organizations with whom we cooperate or receive services for product/service comparison, analysis, evaluation, advertising and realization of the above purposes; institutions contracted for sending messages to our customers; cargo companies delivering orders, within the framework of personal data processing conditions and purposes set forth in Articles 8 and 9 of Law No. 6698.

Your personal data is collected verbally, in writing or electronically, or through other channels that may be established in the future, mainly from the COMPANY’s headquarters, contracted websites, other institutions we provide or receive support services from, real or legal persons we transact with within the scope of any legislation or contract, our website and mobile application, call centers, social media accounts, and similar platforms.

Personal data is collected by the COMPANY within the framework of applicable laws and for the purposes mentioned above, including the performance of the contract.

As data subjects, if you submit your requests regarding your rights through the methods regulated below, the COMPANY will finalize the request as soon as possible and no later than thirty days, depending on the nature of the request. No fee will be charged for responses up to ten pages. For each page beyond ten, a processing fee of 1 Turkish Lira per page will be charged. If the response is provided on a recording medium such as a CD or flash drive, the fee charged by our company will not exceed the cost of the recording medium.

Within this scope, data subjects have the following rights:

• To learn whether personal data is processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether it is used in accordance with that purpose,
• To know the third parties within the country or abroad to whom personal data is transferred,
• To request correction if personal data is incomplete or inaccurate and request notification of this correction to third parties to whom data was transferred,
• To request deletion or destruction of personal data if the reasons requiring processing no longer exist, despite the data being processed in compliance with Law No. 6698 and related legislation, and request notification of this deletion or destruction to third parties to whom data was transferred,
• To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
• To claim compensation for damages if harmed due to unlawful processing of personal data.

You can submit your request to exercise the above rights in Turkish and in writing or via registered electronic mail (KEP), secure electronic signature, mobile signature, or the previously notified and registered email address in our system according to Article 13, paragraph 1 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 and numbered 30356. Only information about the applicant will be provided in the requests; information about other family members or third parties cannot be obtained. The COMPANY reserves the right to verify your identity before responding.

Your application must include the following information:

• a) Your name, surname, and signature if the application is written,
• b) For Turkish citizens, your Turkish ID number; if foreign, your nationality, passport number, or ID number if any,
• c) Your residence or workplace address for notification purposes,
• ç) If any, your email address, phone, and fax numbers for notification,
• d) The subject of your request,
• If any, related information and documents must be attached to the application.

You can submit your written applications to us as the data controller, along with the necessary documents.

Depending on the nature of your request, you must provide complete and accurate information and documents that enable identity verification. Failure to provide the requested information and documents properly may cause obstacles in fully and properly conducting the investigations related to your request by the COMPANY. In such cases, the COMPANY reserves its legal rights. Therefore, your application must be complete and include the requested information and documents according to the nature of your request.