Personal Data Protection
CAMERA SURVEILLANCE AND RECORDING PRIVACY NOTICE
This Camera Surveillance and Recording Privacy Notice has been prepared to inform you that camera surveillance equipment has been installed within the premises of Tureks Turunç Madencilik İç ve Dış Ticaret A.Ş. (Tureks and/or the Company) and/or in areas where camera surveillance warning signs are displayed.
(1) Data Controller and Contact Person
Pursuant to the Personal Data Protection Law No. 6698 (the “PDPL”), your personal data may be processed by Tureks Turunç Madencilik İç ve Dış Tic. A.Ş., acting as the data controller, within the scope described below.
(2) Methods and Legal Grounds for Collecting Personal Data
The camera surveillance system records and processes images of individuals and objects passing within the range of the system. The system operates continuously, 24 hours a day, seven days a week. Visual data and camera recordings are processed through the video surveillance system.
Such data is processed on the basis of the personal data processing conditions specified in Articles 4, 5 and 6 of the PDPL and the applicable legislation, particularly Law No. 5188 on Private Security Services, Labour Law No. 4857 and Occupational Health and Safety Law No. 6331.
(3) Purposes for Which Personal Data Is Processed
The personal data referred to above may be processed for the following purposes:
- Protecting the Company’s premises and the individuals, property and products located on the premises against attacks, theft, robbery and all other forms of damage,
- Ensuring the security of the Company’s premises, infrastructure, products and operations and taking precautions against all types of security breaches,
- Providing information to authorized institutions and organizations,
- Ensuring the legal, technical, commercial and occupational security of the Company and the persons with whom the Company has a business relationship,
- Planning, auditing and carrying out information security processes,
- Controlling entry to and exit from the workplace,
- Planning and/or carrying out occupational health and safety processes and fulfilling the obligations relating to these purposes,
- Preventing fires and similar disasters,
- Managing the areas in which the Company’s premises are located,
- Identifying and investigating violations of workplace rules.
(4) Parties to Whom Processed Personal Data May Be Transferred and the Purposes of Such Transfers
For the purposes stated above and only to the extent necessary to fulfil such purposes, camera recordings may be transferred to legally authorized public institutions, private persons or organizations and other third parties, as well as to the Company’s business partners, suppliers and shareholders.
Such data may be processed within Türkiye and transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL, limited to the purposes stated in this Privacy Notice.
Further details regarding the parties with whom your personal data may be shared and the purposes of such sharing are provided below:
- Sharing data such as camera recordings with security companies and companies that install or operate the relevant technical infrastructure for the purpose of ensuring the security of the Company’s premises;
- Sharing data with authorized external service providers for the management and storage of data;
- Sharing data with suppliers for the physical and electronic storage of employee data;
- Sharing data with experts, law firms and auditing companies for auditing and due diligence activities, and with public institutions, insurance companies, social assistance funds and business consultants for the fulfilment of regulatory and contractual obligations;
- Processing and sharing data where required by the legitimate interests of the data controller.
Personal data may also be shared with public institutions, public authorities and official bodies as follows:
- Sharing camera recordings with official authorities such as the police, public prosecutor’s offices and courts where such recordings are requested;
- Sharing data with authorized administrative and supervisory boards and/or other authorized regulatory authorities.
(5) Personal Data Retention Periods
The Company retains the personal data it processes in physical and/or electronic environments for the periods stipulated under the applicable legislation or required for the relevant processing purposes, in accordance with the PDPL.
The approximate retention periods specified in the Personal Data Retention and Destruction Policy are as follows:
| Data Type | Retention Period | Legal Basis |
| Camera Recordings | 90 days | Ensuring the Security of the Company’s Premises |
(6) Your Rights as a Data Subject Under Article 11 of the Law
As personal data subjects, where you submit your requests concerning your rights to the Company through the methods specified in this Privacy Notice, the Company will conclude your request free of charge within no later than thirty days, depending on the nature of the request.
However, where a fee is prescribed by the Personal Data Protection Board, the fee determined in the applicable tariff may be charged by the Company. You may obtain further information regarding the personal data processed by contacting us at [kvkk@tureks.com.tr].
Within this scope, personal data subjects have the right to:
- Learn whether their personal data is being processed,
- Request information regarding the processing of their personal data, where their personal data has been processed,
- Learn the purpose for which their personal data is processed and whether it is being used in accordance with that purpose,
- Know the third parties to whom their personal data has been transferred within Türkiye or abroad,
- Request the correction of personal data where it has been processed incompletely or inaccurately and request that the action taken in this regard be communicated to the third parties to whom the personal data has been transferred,
- Request the deletion or destruction of personal data where the reasons requiring its processing no longer exist, despite the data having been processed in accordance with the PDPL and other applicable laws, and request that the action taken in this regard be communicated to the third parties to whom the personal data has been transferred,
- Object to any outcome arising against the individual as a result of the processed data being analyzed exclusively through automated systems,
- Claim compensation for damages arising from the unlawful processing of personal data.
