Personal Data Protection Law

INFORMATION TEXT

As Atlas Consulting, we care about the security of your personal data processed as data controllers defined in the Personal Data Protection Law No. 6698. Therefore, we would like to inform you about the processing of your personal data.

PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your personal data is processed in accordance with the Personal Data Protection Law No. 6698 and secondary regulations for the purposes and legal grounds specified below: In this context, your personal data such as “Name-Surname, Email Address, Phone Number, Software Used, IP Address, Log Records” obtained from our website www.atlaskulturel.com is processed based on the legal grounds in Article 5(2) of Law No. 6698 regarding the legitimate interests of the company and the fulfillment of legal obligations, as well as the establishment and protection of rights, as well as under the obligations set forth in Law No. 5651. The data is processed for purposes such as fulfilling obligations, improving the service provided to you, ensuring security, detecting fraudulent or unauthorized uses, investigating operational assessments, correcting errors related to website services, communicating with you, facilitating your internet usage activities, and other purposes specified in our cookie policy.

DEFINITIONS

Explicit consent: Consent related to a specific subject, based on being informed and expressed freely,

Anonymization: The process of making personal data incapable of being related to a specific or identifiable natural person even if matched with other data,

Data subject: The natural person whose personal data is processed,

Personal data: Any information relating to an identified or identifiable natural person,

Processing of personal data: Any operation performed on personal data, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use, either by automatic means or as part of any data recording system,

KVKK: The Personal Data Protection Law No. 6698,

Data processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,

Data controller: A natural or legal person who determines the purposes and means of the processing of personal data and is responsible for establishing and managing the data recording system.

TRANSFER OF PERSONAL DATA

Atlas Consulting may share your personal data for the above-mentioned purposes, including the fulfillment of obligations under Law No. 5651, improving the service provided to you, ensuring security, detecting fraudulent or unauthorized uses, investigating operational assessments, correcting errors related to website services, communicating with you, facilitating your internet usage activities, and other purposes specified in our cookie policy, with third parties such as external service providers, hosting service providers, law offices, research companies, call centers, and others, in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698, both domestically and/or abroad with its affiliates and/or third-party business partners.

DATA PROTECTION PRINCIPLES

Atlas Consulting will comply with personal data protection legislation and data protection principles. The data protection principles adopted by Atlas Consulting include:

  1. Processing personal data only when it is clearly necessary for legitimate corporate purposes,
  2. Processing only the minimum amount of personal data necessary for these purposes and not processing excessive data,
  3. Providing clear information to individuals about who uses their personal data and how it is used,
  4. Processing only relevant and appropriate personal data,
  5. Processing personal data fairly and lawfully,
  6. Maintaining an inventory of the categories of personal data processed by Atlas Consulting,
  7. Keeping personal data accurate and up to date when necessary,
  8. Storing personal data only as long as required by legal regulations, Atlas Consulting’s legal obligations, or legitimate corporate interests,
  9. Respecting individuals’ rights regarding their personal data, including the right to access,
  10. Keeping all personal data secure,
  11. Transferring personal data abroad only when there is adequate protection,
  12. Applying exceptions permitted by the legislation,
  13. Establishing and implementing a personal data protection system for the application of the policy,
  14. Identifying internal and external stakeholders involved in the personal data protection system as necessary and determining the extent of their involvement in Atlas Consulting’s personal data protection system,
  15. Identifying personnel or staff with special authority and responsibilities regarding the personal data protection system.

METHODS OF COLLECTING PERSONAL DATA

Atlas Consulting collects your personal data from various sources in accordance with evolving technological conditions. These include but are not limited to: our website, social media, instant messaging tools, emails, phone calls, faxes, manual methods, contracts, all documents and papers submitted to our company for the execution of the work, and mobile applications. The data obtained through these methods can be collected verbally, in writing, or electronically. The data collected within Atlas Consulting is processed and transferred in accordance with the conditions, purposes, and principles specified in this information text and in accordance with the provisions of the Personal Data Protection Law No. 6698.

Additionally, for the purpose of ensuring security and maintaining operations, Atlas Consulting conducts monitoring activities with security cameras in and around its buildings (internal and external), and visitor entries and exits are recorded. This monitoring complies with the Constitution, the Personal Data Protection Law, and other relevant legislation. Through the camera monitoring system at building entrances and ground floors, recordings of our visitors are obtained for purposes such as ensuring reliability, improving service quality, and ensuring the safety of visitors and others. Access to digitally recorded and stored data is limited to a small number of Atlas Consulting employees, who declare that they will maintain the confidentiality of the accessed data under a confidentiality agreement.

OBTAINING EXPLICIT CONSENT

Atlas Consulting considers the consent provided by the data subject regarding specific data processing activities, based on being informed and expressed freely, either through a written/oral statement or an explicit confirmatory action, as explicit consent. Explicit consents are obtained in a written form or in a manner suitable for proof systemically. Explicit consent can be withdrawn by the data subject at any time.

Explicit consent can be obtained by having the data subject sign an explicit consent form template or by including the elements in a contract or electronic form to be made with the data subject.

STORAGE OF PERSONAL DATA

Your personal data will be processed and stored in accordance with the legal exceptions mentioned above under Article 5 of the Personal Data Protection Law No. 6698. In this context, Atlas Consulting will store personal data for the duration required by the processing purposes mentioned above. Additionally, Atlas Consulting may store personal data for a limited time for the purpose of fulfilling necessary defenses in the event of any disputes that may arise with the relevant parties, in accordance with the statutory limitation periods defined by the legislation.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

As a data subject, you can apply to Atlas Consulting to:

  • Learn whether your personal data is being processed,
  • If your personal data has been processed, request information about it,
  • Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
  • Know the third parties to whom your personal data has been transferred, domestically or abroad,
  • Request correction of your personal data if it is incomplete or inaccurately processed and demand that the transactions carried out in this context are notified to the third parties to whom your personal data has been transferred,
  • Request deletion or destruction of your personal data if the reasons requiring processing have ceased to exist and demand that the transactions carried out in this context are notified to the third parties to whom your personal data has been transferred,
  • Object to the emergence of a negative result against you by analyzing your processed data exclusively through automated systems,
  • Request the deletion or destruction of your personal data within the framework of the conditions set forth in Article 7 of the law, and demand that the rectification, deletion, or destruction operations are communicated to the third parties to whom the personal data has been shared,
  • Request compensation for damages incurred due to unlawful processing of your personal data.