Privacy and Personal Data Policy

Privacy and Personal Data Policy

Nexwom Reklam Yazılım ve Danışmanlık Ltd. Şti. (“Company”), within the scope of the Law on Protection of Personal Data No. 6698 (the “Law”), in compliance with the law and the rules of honesty; accurate and up-to-date where necessary; for specific, explicit and legitimate purposes; in a limited, measured and purpose-related manner; carries out personal data processing activities in accordance with Article 20 of the Constitution of the Republic of Turkey and Article 4 of the Law, by preserving personal data for a limited period of time required by the law or for the purpose of processing personal data.


A- Data Controller and Representative

Your personal data, in accordance with the Personal Data Protection Law, Nexwom Reklam Yazılım ve Danışmanlık Ltd. Şti. is processed by the data controller in accordance with the information described below.


B- Purposes of Processing Personal Data

Your personal data; best planning and implementation of our human resources policies; the correct planning and execution of our commercial partnerships and strategies; Ensuring the legal, commercial and physical security of our company and our business partners, ensuring the corporate functioning of the Company, fulfilling the obligations arising from the contract signed with you, working to make the best use of the products and services offered by our Company; Suggesting the products and services offered by our company to you by customizing them according to your demands, needs, usage habits and wishes; Ensuring the highest level of data security, creating databases, improving the services offered on our company’s website, communicating with those who have submitted their requests and complaints to our company, eliminating errors on our company’s website, and Nexwom Reklam Yazılım ve Danışmanlık, which has been shared on the website https://cdhistanbul.com/ Ltd. Sti. It is processed within the scope of the personal data processing conditions specified in the 5th and 6th articles of the Law in order to ensure the compliance of the provisions in the Personal Data Protection and Processing Policy.


The Processing Conditions of Personal Data specified in Article 5 of the KVKK are listed below. (1) Personal data cannot be processed without the express consent of the person concerned. (2) In the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the data subject: 2.1) It is expressly stipulated in the laws. 2.2) It is compulsory for the protection of life or bodily integrity of himself or another person, who is unable to express his consent due to actual impossibility or whose consent is not given legal validity. 2.3) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract. 2.4) It is mandatory for the data controller to fulfill its legal obligation. d) The person concerned has been made public by himself. 2.5) Data processing is mandatory for the establishment, exercise or protection of a right. 2.6) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.


C- To Whom The Processed Personal Data Can Be Transferred And For What Purpose

Your personal data; To our shareholders, business partners, suppliers, group companies, affiliates, companies and institutions with which we cooperate, companies that we outsource to fulfill our contractual or legal obligations (in matters of security, health, work safety, law, etc.), authorized institutions and organizations. limited to the purposes stated in Article 8 and 9 of the Law.


Ç. Method and Legal Reason for Personal Data Collection

Your personal data; in all kinds of verbal, written, electronic media; with technical and other methods, technical and procedural methods such as the call center, our Company’s website, mobile application, e-commerce, closed circuit camera systems; It is collected within the framework of legal reasons arising and executed based on the relevant legislation, contract, demand, commercial practice and honesty rules that have the opportunity to be implemented in order to provide our commercial services to you by using these channels and to carry out our commercial activities within this framework. Your personal data collected for these legal reasons can be processed for the purposes specified in article b- of this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698, and may be transferred within the framework specified in article c.


D- Retention Period of Personal Data

The Company will keep the personal data for the period required by the purposes specified in the Clarification Text on the Processing of Personal Data. In addition, in case of any dispute that may arise between the Company and the data owner, the necessary defenses are realized within the scope of the dispute.


E- Rights of Personal Data Owners Pursuant to Article 11 of the Law

Our company informs you of your rights in accordance with Article 10 of the Law; It provides guidance on how to exercise these rights and carries out the necessary internal functioning, administrative and technical arrangements for all these. Our company, in accordance with Article 11 of the Law, to the persons whose personal data are received;

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with the purpose,

Knowing the third parties to whom personal data is transferred at home or abroad, requesting correction of personal data in case of incomplete or incorrect processing,

Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,

Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the Law, to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

Explains that they have the right to demand the compensation of the damage in case of loss due to unlawful processing of personal data.

Pursuant to paragraph 1 of Article 13 of Law No. 6698, you can submit your request to exercise your above-mentioned rights in “written” or by other methods determined by the Personal Data Protection Board, using the contact information on the website https://cdhistanbul.com/.

In order to use your above-mentioned rights, you must submit your request to us, together with the necessary information identifying your identity and your explanations about the right you want to use, by specifying which of your right is related to the use specified in Article 11 of the Law No. 6698; will ensure that your application regarding your request is answered more quickly and effectively.

Our Company will conclude the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost, we will charge the tariff determined by the Personal Data Protection Board.