SUN-KA SUNGURLU KAĞITÇILIK SANAYİ VE TİCARET ANONİM ŞİRKETİ
CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA WITHIN THE SCOPE OF THE CONTACT FORM
This “Sun-Ka Clarification Text on the Protection and Processing of Personal Data within the Scope of the Contact Form” has been prepared by Sun-Ka Sungurlu Kağıtçılık Sanayi ve Ticaret Anonim Şirketi (“Company” or “Sun-Ka”), as data controller, in order to fulfill the clarification obligation regarding the processing of your personal data pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
- Purpose and Identity of the Data Controller
Your personal data may be processed by Sun-Ka, located at Hacettepe Mah. 11111 Sk. Sunka Kağıt Fb. Blok No: 1 Sungurlu/Çorum, in its capacity as data controller under the Law, for the purposes listed below and in a manner connected with, limited to and proportionate to those purposes, as received by us, by automated or non-automated means, while preserving the accuracy and currency of the personal data, within the scope explained below.
- Purposes of Processing Personal Data, Collection Method, Legal Bases and Recipients of Transfers
| Personal Data Category | Identity Name and surname |
| Purpose of Processing | Keeping records of contact requests submitted via the contact form at /contact-and-collaboration-6; forwarding contact matters to the relevant departments of our company; conducting necessary reviews regarding your contact matter; creating records for your contact request; providing responses to contact requests; and fulfilling legal obligations under the legislation applicable to Sun-Ka. |
| Collection Method | Obtained through the contact form completed at /contact-and-collaboration-6. |
| Legal Basis | KVKK Art. 5/2 (ç): It is mandatory for the data controller to fulfill its legal obligation. KVKK Art. 5/2 (f): Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Domestic transfer | Authorized public institutions and organizations; natural persons or private-law legal entities |
| International transfer | No international transfer is made. |
| Personal Data Category | Contact E-mail address |
| Purpose of Processing | Keeping records of contact requests submitted via the contact form at /contact-and-collaboration-6; forwarding contact matters to the relevant departments of our company; conducting necessary reviews regarding your contact matter; creating records for your contact request; providing responses to contact requests; and fulfilling legal obligations under the legislation applicable to Sun-Ka. |
| Collection Method | Obtained through the contact form completed at /contact-and-collaboration-6. |
| Legal Basis | KVKK Art. 5/2 (ç): It is mandatory for the data controller to fulfill its legal obligation. KVKK Art. 5/2 (f): Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Domestic transfer | Authorized public institutions and organizations; natural persons or private-law legal entities |
| International transfer | No international transfer is made. |
| Personal Data Category | Customer Transaction Contact subject, explanations provided in the form, contact date and time information, and responses provided regarding the contact |
| Purpose of Processing | Keeping records of contact requests submitted via the contact form at /contact-and-collaboration-6; forwarding contact matters to the relevant departments of our company; conducting necessary reviews regarding your contact matter; creating records for your contact request; providing responses to contact requests; and fulfilling legal obligations under the legislation applicable to Sun-Ka. |
| Collection Method | Obtained through the contact form completed at /contact-and-collaboration-6. |
| Legal Basis | KVKK Art. 5/2 (ç): It is mandatory for the data controller to fulfill its legal obligation. KVKK Art. 5/2 (f): Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Domestic transfer | Authorized public institutions and organizations; natural persons or private-law legal entities |
| International transfer | No international transfer is made. |
When the purpose requiring the processing of your personal data ceases pursuant to Art. 7/1 of the KVK Law and/or when the statute of limitations / retention periods for which we are obliged to process your data under legislation expire, your personal data will be deleted, destroyed or anonymized.
- Your Rights as a Data Subject and How to Exercise Them
Pursuant to Article 11 of the Law, without prejudice to the exceptions set out in Article 28, we hereby inform you that as data subjects you have the following rights:
- to learn whether your personal data are processed,
- to request information if your personal data have been processed,
- to learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- to know the third parties to whom your personal data are transferred domestically or abroad,
- to request correction of your personal data if they are incomplete or incorrectly processed, and to request that such correction be notified to third parties to whom your personal data have been transferred,
- to request deletion or destruction of personal data if the reasons requiring processing cease to exist, even though they have been processed in accordance with the Law and other applicable legislation, and to request that such action be notified to third parties to whom your personal data have been transferred,
- to object to a result against you arising from analysis of processed data exclusively through automated systems,
- to request compensation of damages if you suffer damage due to unlawful processing of your personal data.
Regarding requests concerning the rights listed above, you may deliver a signed written petition containing the minimum requirements set out in the Communiqué on the Procedures and Principles of Application to the Data Controller in person to the Company headquarters at Hacettepe Mah. 11111 Sk. Sunka Kağıt Fb. Blok No: 1 Sungurlu/ÇORUM, send it via notary, send it with an electronic signature to the Company’s KEP address sunkakagitcilik@hs01.kep.tr, or — if your e-mail address is registered in our systems — send it to kvkk@larton.com.tr.