Clarification and Consent Text
Clarification Text
This Clarification Text outlines the principles regarding the processing of your personal data by the data controller, Panel Elektro Sanayi ve Ticaret A.Ş. (“Panel Elektro” or the “Company”), located at Emek Mahallesi Onur Caddesi No:51, Sancaktepe/Istanbul, in compliance with the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation.
1. Purpose of Processing Personal Data
Personal data, such as name, surname, phone number, email, and title, belonging to representatives, authorized persons, and employees of our customers, are processed for purposes including establishing, maintaining, and monitoring commercial relationships, conducting administrative activities, providing information to authorized persons, institutions, and organizations, tracking requests and complaints, managing sales processes, receiving and evaluating suggestions for improving business processes, conducting communication activities, managing finance and accounting tasks, monitoring and executing legal affairs, ensuring business continuity, providing after-sales support services, managing customer relationship processes, and conducting customer satisfaction activities.
Personal data, such as name, surname, phone number, email, and title, belonging to representatives, authorized persons, and employees of potential customers, are processed for pre-sales communication, organizing meetings, conducting communication activities to establish commercial relationships, and ensuring business continuity.
2. Recipients and Purpose of Transfer of Processed Personal Data
Processed personal data may be transferred, in compliance with the Law, to our domestic business partners, affiliates, and suppliers for the execution of business activities; to our legal advisors for monitoring and executing legal affairs; and to relevant public institutions to fulfill legal obligations upon request. With your explicit consent, your personal data may also be transferred, in written, verbal, electronic, or other forms, to servers of cloud service providers, business partners, and suppliers located abroad from which the Company receives services.
3. Method and Legal Basis for Collecting Personal Data
Personal data of customers, potential customers, supplier representatives, authorized persons, employees, or real-person customers and suppliers are collected through non-automated methods, such as forms filled out by the individuals, business cards obtained during meetings, or platforms facilitating professional communication, in physical or electronic environments.
Your personal data are processed based on the legal basis under Article 5/2(c) of the Law, which stipulates that processing is necessary for the establishment or performance of a contract directly related to the commercial relationship. Additionally, with your explicit consent, personal data may be transferred abroad pursuant to Article 5/1 of the Law. Furthermore, in cases of sending commercial electronic communications, data processing activities are carried out as a service provider in accordance with the legal obligations arising from the Regulation on Commercial Communication and Commercial Electronic Messages.
4. Application Methods and Your Rights
Under Article 11 of the Law, individuals whose personal data are processed may apply to our Company to: a) learn whether their personal data are processed, b) request information if their data have been processed, c) learn the purpose of processing and whether the data are used in accordance with that purpose, d) know the third parties to whom the data are transferred domestically or abroad, e) request correction of incomplete or inaccurate data, f) request deletion or destruction of data within the conditions set out in Article 7 of the Law, g) request notification of the actions taken under points (e) and (f) to third parties to whom the data have been transferred, h) object to any adverse outcome resulting from analysis solely through automated systems, and i) demand compensation for damages caused by unlawful processing.
You may submit your information and application requests to us in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
Our Company will finalize requests free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process incurs additional costs, a fee may be charged in accordance with the legislation. The Company may accept and process the request or reject it in writing, stating the reasons.
In cases where the application is rejected, the response is deemed insufficient, or no response is provided within the specified period, you have the right to file a complaint with the Personal Data Protection Board (“Board”) within thirty days from the notification of the response or sixty days from the application date, whichever applies. However, the complaint process cannot be initiated without exhausting the application process.
Upon a complaint or ex officio upon learning of an alleged violation, the Board conducts the necessary examination within its scope of authority. The Board reviews the complaint and provides a response to the relevant parties. If no response is provided within sixty days from the complaint date, the request is deemed rejected. If a violation is identified during the examination, the Board decides that the data controller must remedy the unlawfulness and notifies the relevant parties. This decision must be implemented without delay and within thirty days at the latest from the notification. In cases where irreparable or significant harm may occur and there is a clear violation of the law, the Board may decide to suspend the processing or transfer of data abroad.
We emphasize that your personal data are protected with utmost care at our Company, and we thank you for your trust in us.