Clarification Text on Processing of Personal Data

CLARIFICATION TEXT ON PROCESSING OF PERSONAL DATA

Data Controller: Doğan Dış Ticaret ve Mümessillik A.Ş.

Burhaniye Mahallesi Kısıklı Cadde No:65/1 Üsküdar İstanbul

As Doğan Dış Ticaret ve Mümessillik A.Ş.(“DDT”), we have prepared this Clarification Text on Processing of Personal Data ("Clarification Text") in order to inform data subjects on the processing, storage and transfer of personal data during our operations under the Law on the Protection of Personal Data ("LPPD") No. 6698, and the relevant legislation and applicable regulations.

Prospective Employees
Supplier Representatives
Supplier Employees
Person Purchasing a Product
Potential Customers
Visitors
Online Visitors

The Clarification Text shall apply as of the date it is published by DDT. DDT can make an amendment in the Clarification Text any time it may deem necessary. The amendments to be made shall become effective when the Clarification Text is published on the website www.ddt.com.tr.

EMPLOYEES

Detailed information on processing of personal data belonging to employees is published on the website https://www.ddt.com.tr/en/clarification-text-on-processing-of-personal-data.html, which is only accessible to our employees, who have already been informed in detail.

If you are a former employee of DDT you can exercise your rights regarding your personal data processed during the time you were employed through any of the application channels described in the section "How You Can Exercise Your Rights" in this Clarification Text.

PROSPECTIVE EMPLOYEES
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name, Surname Date of Birth Signature Photograph	Execution of Application Processes for Prospective Employees, Planning of Human Resources Processes, Execution of Interview Processes, Execution of Business Activities, Execution of Contract Processes, Execution of Communication Activities
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your abovementioned personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through the Holding Companies İŞKUR and private employment offices (including electronic means such as kariyet.net, yenibiris.com), applications sought via ads on newspapers and other places, resumes sent, or job application forms.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Email Address Mobile Number Contact Address,	Execution of Application Processes for Prospective Employees, Execution of Communication Activities, Planning of Human Resources Processes, Execution of Interview Processes
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through the Holding Companies İŞKUR and private employment offices (including electronic means such as kariyet.net, yenibiris.com), applications sought via ads on newspapers and other places, resumes sent, or job application forms.
PERSONAL INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Background Data Reference Information	Execution of Application Processes for Prospective Employees, Planning of Human Resources Processes, Execution and Inspection of Business Activities, Execution of Contract Processes, Execution of Compensation Polices Planning of Human Resources Processes
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When the Data Subject gives his explicit consent for reference information It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through the Holding Companies İŞKUR and private employment offices (including electronic means such as kariyet.net, yenibiris.com), applications sought via ads on newspapers and other places, resumes sent, or job application forms.
PROFESSIONAL EXPERIENCE DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Details of Courses Attended, Information on Vocational Training, Certificates Foreign Language Skills Computer Skills,	Execution of Application Processes for Prospective Employees, Planning of Human Resources Processes, Execution and Inspection of Business Activities, Execution of Contract Processes, Execution of Compensation Polices
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	KIn order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through the Holding Companies İŞKUR and private employment offices (including electronic means such as kariyet.net, yenibiris.com), applications sought via ads on newspapers and other places, resumes sent, or job application forms.
TRANSFER OF PERSONAL DATA
Identity, contact, personal and professional experience information of employee candidates; The data are transferred, subject to the permission they grant in this respect, to Authorized Public Institutions and Organizations, the companies of the group in order to ensure that a more effective human resources policy is pursued by the group companies, and when necessary, to offer alternative or better positions in other group companies to such candidates whose job applications are concluded negatively, and also to create a candidate pool.
TRANSFERRING PERSONAL DATA ABROAD
Personal data belonging to prospective employees are not transferred abroad.

SUPPLIER REPRESENTATIVES
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name – Surname T.R. ID No. Tax Identity Number A copy of Birth Certificate/Identity Card Signature	Execution of Finance and Accounting Affairs, Follow-up and Execution of Legal Affairs, Execution of Communication Activities, Execution of Contract Processes, Execution of Supply Chain Management Processes, Informing Authorized Persons, Institutions and Organizations, Execution of Procurement of Goods / Services
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your abovementioned personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Email Address Contact Address, Mobile Number	Execution of Finance and Accounting Affairs, Execution of Communication Activities, Execution of Procurement of Goods / Services, Execution of Contract Processes, Execution of Supply Chain Management Processes
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
LEGAL TRANSACTION DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Information in correspondence with judicial authorities, Information in correspondence with administrative authorities, Information in the Action File. Warning Letters	Follow-up and Execution of Legal Transactions, Execution of Internal Audit Activities, Execution of Risk Management Processes, Procuring Security of Data Controller Operations, Execution of Finance and Accounting Operations, Informing Authorized Persons, Entities and Institutions
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is mandatory for the data controller to fulfill its legal obligation. When data processing is mandatory for the establishment, exercise or protection of any right
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
CUSTOMER TRANSACTION DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Invoice	Follow-up and Execution of Legal Affairs, Execution of Business Activities, Execution of Procurement of Goods / Services, Execution of Finance and Accounting Affairs, Execution of Supply Chain Management Processes, Informing Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
FINANCIAL INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Bank account details	Execution of Finance and Accounting Transactions, Execution of Business Activities, Execution of Goods/Service Purchase Processes, Execution of Contract Processes, Execution of Supply Chain Management Processes, Informing Authorized Persons, Entities and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is clearly stipulated in laws, It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
TRANSFER OF PERSONAL DATA
Personal data belonging to supplier representatives; The relevant data are transferred to our group companies, business partners for the abovementioned purposes. The relevant data are transferred to authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations.
TRANSFERRING PERSONAL DATA ABROAD
Personal data belonging to supplier representatives are not transferred abroad.

SUPPLIER EMPLOYEES
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name, Surname TR Identity Number Birth Certificate / Identity Card Photocopy, Signature Photograph	Execution / Inspection of Business Activities, Execution of Goods / Services Procurement Processes, Execution of Contract Processes, Execution of Supply Chain Management Processes, Providing Information to Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through data subject declarations and printed forms.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Email Address Contact Address, Mobile Number	Execution of Contingency Management Processes, Execution of Supply Chain Management Processes, Execution of Communication Activities, Informing Authorized Persons, Entities and Institutions
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through data subject declarations and printed forms.
LEGAL TRANSACTION DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
(In Case of Dispute) Information in the Case File Warning Letters Information in Correspondence with Judicial and Administrative Authorities	Follow-up and Execution of Legal Affairs, Execution and Supervision of Business Activities. Providing Information to Authorized Persons, Institutions and Organizations, Execution of Activities in Compliance with the Legislation, Execution of Storage and Archive Activities, Execution of Contract Processes, Follow-up of Requests / Complaints
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is mandatory for the data controller to fulfill its legal obligation. When data processing is mandatory for the establishment, exercise or protection of any right
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through official letters from judicial and administrative authorities and printed/electronic documents.
FINANCIAL INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Bank account details	Execution of Finance and Accounting Transactions, Execution of Business Activities, Execution of Goods/Service Purchase Processes, Execution of Contract Processes, Execution of Supply Chain Management Processes, Informing Authorized Persons, Entities and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is clearly stipulated in laws, It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through contracts and printed forms.
TRANSFER OF PERSONAL DATA
Personal data belonging to the supplier employees; The relevant data are transferred to our group companies, business partners and authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations limited to the above mentioned purposes.
TRANSFERRING PERSONAL DATA ABROAD
Personal data belonging to the supplier employees are not transferred abroad.

PRODUCT OR SERVICE RECIPIENTS
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name, Surname TR Identity Number Tax Identity Number Birth Certificate / Identity Card Photocopy, Signature Photograph	Execution of Finance and Accounting Transactions, Execution of Communication Activities, Execution and Inspection of Business Activities, Execution of Goods / Services Purchase Processes, Execution of Goods/Services After-Sales Activities, Execution of Contract Processes
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through the sales process, contracts, printed forms or similar electronic forms.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Email Address Contact Address Mobile Number	Execution of Finance and Accounting Transactions, Execution of Communication Activities, Execution of Business Activities, Execution of Contract Processes, Execution of Goods / Services Sales Activities, Execution of Customer Relations Management Processes
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through the sales process, contracts, printed forms or similar electronic forms.
LEGAL TRANSACTION DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
(In Case of Dispute) Information in the Case File Warning Letters Information in Correspondence with Judicial and Administrative Authorities	Follow-up and Execution of Legal Transactions, Execution of Supply Chain Management Processes, Execution and Inspection of Business Activities, Informing Authorized Persons, Entities and Institutions, Execution of Activities in accordance with the Legislation, Execution of Storage and Archiving Activities, Execution of Risk Management Activities, Following Up Requests / Complaints
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is mandatory for the data controller to fulfill its legal obligation. When data processing is mandatory for the establishment, exercise or protection of any right
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through official letters from judicial and administrative authorities and printed/electronic documents.
CUSTOMER TRANSACTION DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Invoice, promissory note and cheque details, Request Information	Execution and Inspection of Business Activities, Informing Authorized Persons, Entities and Institutions, Execution of Activities in accordance with the Legislation, Execution of Finance and Accounting Transactions, Execution of Storage and Archiving Activities, Execution of Contract Processes, Execution of Goods / Services Purchase Processes, Following up Requests / Complaints
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through the sales process, contracts, printed forms or similar electronic forms.
FINANCIAL INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Bank account details	Execution of Finance and Accounting Affairs, Execution and Control of Business Activities, Execution of Goods / Service Sales Processes, Follow-up of Requests / Complaints, Execution of Contract Processes, Informing Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is required to process personal data pertaining to the parties of a contract to the extent personal data are directly related to the conclusion or execution of the contract, When it is mandatory for the data controller to fulfill its legal obligation.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected during participation in a meeting or event as well as through the sales process, documents submitted by the data subject, printed forms or similar electronic forms.
MARKETING INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Cookie logs. Information Obtained from the Campaign Study	Execution of Loyalty to Company Products and Services Processes, Execution of Customer Relationship Management Processes, Execution of Marketing Analysis Studies, Execution of Marketing Processes of Products and Services, Execution of Business Activities
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected due to the campaign activities and through website cookies.
TRANSFER OF PERSONAL DATA
Ürün veya Hizmet Alan Kişilere ait kişisel veriler; The personal data belonging to persons who buy products or services; The relevant data are transferred to our group companies and authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations limited to the above mentioned purposes.
TRANSFERRING PERSONAL DATA ABROAD
The personal data belonging to persons who buy products or services are not transferred abroad.

POTENTIAL CUSTOMERS
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name- Surname	Execution of Communication Activities, Execution of Marketing Processes of Products / Services, Execution of Advertising / Campaign / Promotion Processes, Execution of Marketing Analysis Studies
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected through forms and campaign activities conducted.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Email Address Mobile Number Contact Address,	Execution of Communication Activities , Execution of Business Activities, Execution of Ensuring Business Continuity Activities, Execution of Marketing Processes of Products / Services, Execution of Advertising / Campaign / Promotion Processes, Execution of Marketing Analysis Studies
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected through forms and campaign activities conducted.
MARKETING INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Cookie logs. Information Obtained from the Campaign Study	Execution of Loyalty to Company Products and Services Processes, Execution of Customer Relationship Management Processes, Execution of Marketing Analysis Studies, Execution of Marketing Processes of Products and Services, Execution of Business Activities
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected due to the campaign activities and through website cookies.
TRANSFER OF PERSONAL DATA
Data of potential customers; The relevant data are transferred to authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations.
TRANSFERRING PERSONAL DATA ABROAD
Data of potential customers are not transferred abroad.

VISITORS
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name- Surname	Execution of Contingency Management Processes, Execution of Storage and Archiving Activities, Procuring Security of Movable Goods and Resources, Creation and Monitoring of Visitor Records, Informing Authorized Persons, Organizations and Institutions
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected through the records taken during the access.
PHYSICAL SETTING SECURITY DATA
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
CCTV Record Data Access/Exit Record Data	Ensuring Security of Physical Setting, Execution of Storage and Archiving Activities, Informing Authorized Persons, Organizations and Institutions, Creating and Following up Visitor Records
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected via the camera systems.
INFORMATION ABOUT THE VISIT
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
The Person Visited Reason of Visit Time / Duration of Visit	Ensuring Security of Physical Setting, Execution of Storage and Archiving Activities, Informing Authorized Persons, Organizations and Institutions, Creating and Following up Visitor Records.
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	The above mentioned personal data are collected via forms and camera systems.
TRANSFER OF PERSONAL DATA
Personal data of visitors; The relevant data are transferred to authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations.
TRANSFERRING PERSONAL DATA ABROAD
Personal data of visitors are not transferred abroad.

ONLINE VISITOR
Detailed information about the cookies to be used in case you visit our website can be found in the Cookie Policy published at https://www.ddt.com.tr/en/cookie-policy.html
ID DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Name, Surname	Execution of Information Security Processes, Execution of Communication Activities, Management of Customer Relationship Management Processes, Execution of Activities for Customer Satisfaction, Execution of Marketing and Analysis Studies, Follow-up of Requests and Complaints, Providing Information to Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is mandatory for the data controller to fulfill its legal obligation. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected through web applications, Information systems and electronic devices (e.g. telecommunication infrastructure, computers and phones) and other documents declared by you.
CONTACT DETAILS
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
E-Mail Address	Execution of Information Security Processes, Execution of Communication Activities, Management of Customer Relationship Management Processes, Execution of Activities for Customer Satisfaction, Execution of Marketing and Analysis Studies, Follow-up of Requests and Complaints, Providing Information to Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is mandatory for the data controller to fulfill its legal obligation, It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected through web applications, Information systems and electronic devices (e.g. telecommunication infrastructure, computers and phones) and other documents declared by you.
TRANSACTION SECURITY DATA
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
IP Address Details, Website Login / Logout Data Password Details, Computer Screen Recordings Device IMEI Number, Device MAC Address,	Execution of Information Security Processes, Execution of Activities in Compliance with the Legislation, Management of Customer Relationship Management Processes, Follow-up of Requests and Complaints, Providing Information to Authorized Persons, Institutions and Organizations
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. When it is clearly stipulated in laws, When it is mandatory for the data controller to fulfill its legal obligation. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected through web applications, Information systems and electronic devices (e.g. telecommunication infrastructure, computers and phones) and other documents declared by you.
MARKETING INFORMATION
PROCESSED PERSONAL DATA	PURPOSES OF PERSONAL DATA PROCESSING
Cookie logs.	Execution of Loyalty to Company Products and Services Processes, Execution of Customer Relationship Management Processes, Execution of Marketing Analysis Studies, Execution of Marketing Processes of Products and Services, Execution of Business Activities
LEGAL GROUNDS OF PROCESSING PERSONAL DATA	In order to achieve the purposes listed above by DDT, your personal data can be processed on legal grounds in accordance with the relevant legislation and article 5 of LPPD, i.e. It is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
PERSONAL DATA COLLECTION METHODS	Your personal data mentioned above are collected due to the campaign activities and through website cookies.
TRANSFER OF PERSONAL DATA
Personal data belonging to online visitors; The relevant data are transferred to authorized persons and official entities in accordance with the legislation and regulations in order to fulfill our legal obligations.
TRANSFERRING PERSONAL DATA ABROAD
Personal data of Online Visitors are not transferred abroad.

YOUR RIGHTS

In the scope of the LPPD and the relevant legislation, you have the following rights in relation to your personal data;

To learn whether your personal data are being processed,
To request information in case your personal data has been processed,
Find out the reason for processing of personal data and whether they have been used properly for that purpose,
To know the third parties to whom personal data have been transmitted at home or abroad,
To request for rectification of your personal data if they are processed incompletely or inaccurately,
To request for erasure or destruction of your personal data within the framework of the conditions set forth in the LPPD legislation,
To request notification of the rectification of inaccurate or incomplete data, erasure or destruction of personal data to third parties to whom we have transferred your personal data,
To object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems, and
To request compensation in case you incur damages due to unlawful processing of your personal data.

METHODS OF APPLICATION RELATED TO YOUR RIGHTS

You can submit your applications and requests related to your personal data to Doğan Dış Ticaret ve Mümessillik A.Ş.(“DDT”) by filling out the data subject application form and

by sending the form containing your original signature to the address Burhaniye Mahallesi Kısıklı Caddesi No:65/1 Üsküdar/İstanbul along with a photocopy of your identity card,
by applying in person to Doğan Dış Ticaret ve Mümessillik A.Ş. (“DDT”) along with a valid ID,
by sending the form to DDT's registered electronic mail address ddisticaret@hs02.kep.tr using a registered e-mail (KEP) address and a secure electronic signature or mobile signature,
by sending the form to our address kvkk@ddt.com.tr from the electronic mail address which has already been notified by the Data Subject to Doğan Dış Ticaret ve Mümessillik A.Ş. (“DDT”) and is registered in our system.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application should contain the Data Subject's name and surname, and if the application is in writing, then also his/her signature, Turkish Identification Number (passport number if the applicant is a foreigner), place of residence or a business address for the service of notices, or electronic mail address if any, for the service of notices, a telephone number, fax number and the details of the request.

The Data Subject should provide a clear and easy-to-understand description of the rights he/she intends to exercise in his/her application which is to be submitted for the purpose of exercising the above mentioned rights. The information and documents related to the application should be attached to the application.

The subject of the request should be related to the applicant, and if the applicant is acting on behalf of another person, the applicant should have been authorized specifically in that respect, and such authorization should be evidenced (special power of attorney). In addition, the application should contain identity and address details, and documents evidencing the identity should be appended.

Requests submitted for unauthorized third parties shall not be evaluated.

RESPONDING TO YOUR APPLICATIONS
Your requests regarding your personal data shall be evaluated and answered within no later than 30 days following our receipt of your request. In case your application is declined, the justified reasons of rejection are sent to the address indicated in your application via electronic mail or regular mail, if possible, through such means with which you submitted your application.