Policy on the Protection and Processing of Personal Data
As Almer Kimya San. Tic. Ltd. Şti., we place great importance on the protection of personal data. We commit to acting in compliance with the Constitution of the Republic of Turkey, the Personal Data Protection Law No. 6698 (KVKK), and other relevant legislation regarding the security and confidentiality of personal data. In this context, we fulfill our legal responsibilities at the highest level in the process of processing and protecting personal data.
Scope and Purpose of the Policy
This policy has been created to determine the principles and rules that Almer Kimya will adhere to regarding the protection, processing, storage, and destruction of personal data. The policy encompasses all Almer Kimya employees, business partners, interns, support service providers, and all individuals whose personal data are processed.
Principles of Processing Personal Data
In the process of processing personal data, as Almer Kimya, we adhere to the following fundamental principles:
- Compliance with Law and Fairness Principles: Personal data are processed lawfully and fairly.
- Accuracy and Up-to-dateness: Personal data are kept accurate and up-to-date.
- Processing for Specific, Explicit, and Legitimate Purposes: Personal data are processed only in line with predetermined purposes and are not used outside these purposes.
- Data Minimization: Personal data must be relevant, limited, and proportionate to the purpose for which they are processed.
- Retention Period: Personal data are stored for the period stipulated in the relevant legislation or necessary for the purposes for which they are processed.
- Confidentiality and Security: All necessary technical and administrative measures are taken to protect personal data.
Purposes of Processing Personal Data
Almer Kimya processes personal data for the following purposes:
- Establishment and execution of contracts,
- Fulfillment of legal obligations,
- Management of customer relations and execution of service processes,
- Continuation and development of commercial activities,
- Execution of human resources processes,
- Fulfillment of data processing obligations within the framework of legal requirements.
Storage and Destruction of Personal Data
Almer Kimya stores personal data in accordance with relevant legislation. In cases where the purposes of processing end or legal retention periods expire, personal data are destroyed, deleted, or anonymized. Data destruction processes are controlled through audits to be conducted at specific periods.
Data Security
Almer Kimya takes necessary technical and administrative measures to ensure the confidentiality and security of personal data. In this context, security measures are implemented to protect data against unauthorized access and to ensure secure data transmission and storage. Only authorized personnel can access personal data, and audits regarding data security are conducted regularly.
Rights of the Data Subject
Under Law No. 6698, data subjects have the following rights:
- To learn whether their personal data are processed,
- To request information if their personal data have been processed,
- To learn the purpose of processing and whether they are used in accordance with that purpose,
- To know the third parties to whom data are transferred at home or abroad,
- To request correction of personal data,
- To request deletion or destruction of personal data,
- To request notification of transactions to third parties to whom data have been transferred,
- To object to the processing of personal data,
- To demand compensation for damages in case of unlawful processing of personal data.
Method of Application for Data Subjects
Data subjects can submit their applications to exercise their rights by verifying their identity in writing or by sending an email to almer@almerkimya.com. Almer Kimya will evaluate and conclude applications within 30 days at the latest.
Transfer of Personal Data Abroad
Personal data can be transferred abroad only to countries with adequate protection or with the permission of the Personal Data Protection Board. In this process, Almer Kimya acts in compliance with all legal regulations to ensure the security of data. In the transfer of data abroad, the security and confidentiality of data are protected at the highest level.
Sharing Personal Data with Third Parties
Almer Kimya shares personal data with third parties only when one of the following conditions is met:
- The explicit consent of the data subject is obtained,
- To fulfill a legal obligation,
- To protect the legitimate interests of Almer Kimya without harming the fundamental rights and freedoms of the data subject,
- When it is necessary for the execution of a contract to which Almer Kimya is a party,
- Sharing in accordance with legal regulations and court orders.
Security of Personal Data
Almer Kimya takes all necessary technical and administrative measures to ensure the security of personal data. By limiting access to personal data, only authorized personnel are allowed access, and modern technological security measures are implemented for the security of these data. Additionally, any data security breaches will be reported to the Personal Data Protection Authority within 72 hours.
Explicit Consent and Data Processing Activities
In cases where explicit consent is required in data processing processes, Almer Kimya informs data subjects and obtains their explicit consent. If explicit consent is given, this approval is recorded in a verifiable manner. During personal data processing activities, if there is no legal basis other than explicit consent, the data processing activity is not carried out.
Updating the KVKK Policy
Almer Kimya regularly reviews this policy and updates it when deemed necessary. Any changes and updates will be publicly announced through internal company communications and the website. The policy is clearly communicated to Almer Kimya personnel, and all employees are ensured to act in accordance with this policy.
KVKK Committee and Responsibilities
The KVKK Committee, responsible for managing processes related to the protection of personal data at Almer Kimya, ensures the compliance of data processing activities with legal legislation by conducting regular audits and evaluations. The committee also organizes personnel training related to the protection of personal data and evaluates the requests of data subjects.
Informing and Training Data Subjects
Almer Kimya regularly informs all its personnel about the protection of personal data and organizes training programs. These trainings aim to increase awareness of data security and ensure compliance with legal legislation.