Privacy and Data Protection

Country Consulting Danışmanlık Finansal Danışmanlık accepts, declares and undertakes that it will not sell, rent or allow third parties to use your name, e-mail address, work and home address, telephone number and other personal data provided by electronic or physical mail, courier or hand delivery in accordance with the Personal Data Protection Law No. 6698 and the European Union General Data Protection Regulation (GDPR) except for the cases specified in the relevant legislation (KVKK and GDPR).

Processing of Your Personal Data

Processing of your personal data means any operation performed on your personal data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing its use, in whole or in part, by automatic means or non-automatic means provided that it is part of any data recording system.

Data Controller and Representative

According to the law, your personal data may be processed by Country Consulting Consultancy as the data controller within the scope explained in this text. Country Consulting Consultancy is responsible for the establishment and management of the data recording system by determining the processing purposes and means of personal data recorded in the database. If the conditions specified in the law are met, it declares that it will have the status of registered data controller by registering with the Data Controllers Registry.

Reasons We Process Your Data

Your personal data is processed in accordance with Articles 5 and 6 of the Law for the purposes of carrying out the necessary operational activities within the company to ensure that the services offered by our company can be provided to you, carrying out the necessary work with the relevant business unit, official authorities and business partners to be able to offer appropriate services to you, our customers, ensuring the rights of real persons by providing human resources management by our Company, taking the necessary steps for the making, implementation and execution of commercial decisions by our Company, ensuring the legal security of real persons with whom we have established business relations and our Company arising from these relations, and for similar purposes, including but not limited to these.

Your Personal Data may be processed by Country Consulting, acting as the Data Controller, without your express consent in the following cases:

· It is mandatory for the protection of the life or physical integrity of the person who is unable to give his consent due to a de facto impossibility or whose consent is not legally valid, or of another person; ·
It is necessary to process personal data of the parties to the contract, provided that it is directly related to the performance of the contract; ·
It is mandatory for the fulfillment of our legal obligations as the data controller; · It has been made public by the relevant person;
· Data processing is mandatory for the establishment, exercise or protection of a right;
· Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person; It may be used for the purposes we will specify below, based on any of the following conditions.

Your personal data may be processed for the following purposes:

· Communicate with you and others as part of the business;
· Send you important information about changes to our terms of service, changes to our electronic services, and other administrative information;
· Provide quality, training, and security improvements (for example, regarding recorded or monitored telephone conversations to our contact numbers);
· Resolve complaints and process data access or correction requests;
· Comply with applicable laws and regulatory obligations (including those outside your country of residence), including anti-money laundering and anti-terrorism laws, comply with legal process, and respond to requests from public authorities and government authorities (including those outside your country of residence);
· Manage our infrastructure and business activities, and comply with internal policies and procedures, including those related to auditing, finance and accounting, billing, IT systems, data and website hosting, business continuity and records, document and print management;
· Establish and defend legal rights; · To protect our operations or the operations of our business partners, our rights, privacy, safety or property and/or yours or others’ such assets and to exercise available remedies or limit our damages;
· To conduct market research and analysis, including satisfaction surveys;
· To facilitate social media sharing functionality;
· To personalize your experience with electronic services by providing you with personalized information and advertising.

To Whom and For What Purposes Can Processed Personal Data Be Transferred?

Your collected personal data may be transferred to our business partners, suppliers, shareholders, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law for the purposes of ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company, ensuring that our business units carry out the necessary work to enable you to benefit from the services offered by our Company, customizing the services offered by our Company according to your tastes and needs and recommending them to you, determining and implementing our Company’s commercial and business strategies, and ensuring that our Company’s human resources policies are carried out.

Method and Legal Reason for Collecting Personal Data

Your personal data is collected by our Company through different channels and based on different legal reasons in order to carry out our commercial activities. Your personal data collected for this legal reason can be processed and transferred for the purposes specified within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.

If you submit your requests regarding the rights of the Personal Data Owner listed in Article 11 of the Personal Data Protection Law and your rights as Personal Data Owners to our Company through the methods set out below in this Information Text, our Company will finalize the request free of charge as soon as possible depending on the nature of the request. However, if a fee is foreseen by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, personal data owners;

· To learn whether personal data has been processed,
· To request information if personal data has been processed,
· To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
· To know the third parties to whom personal data is transferred in the country or abroad,
· To request correction of personal data if they are processed incompletely or incorrectly and to request notification of the action taken within this scope to third parties to whom personal data is transferred,
· To request deletion or destruction of personal data in case the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the PDP Law and other relevant laws and to request notification of the action taken within this scope to third parties to whom personal data is transferred,
· To object to the emergence of a result to the detriment of the person by analyzing the processed data exclusively through automated systems,
· To request compensation for the damages in case the person suffers damages due to the processing of personal data in violation of the law.

In accordance with Article 13, paragraph 1 of the PDP Law, you may submit your request to our Company regarding the exercise of your rights specified above, in writing or through other methods determined by the Personal Data Protection Board. In accordance with the PDP Law, you must submit your application to our Company in writing. In this context, the channels and methods through which you will submit your written application to our Company within the scope of Article 11 of the PDP Law are explained below.