Disclosure Text

Üçay Mühendislik Enerji ve İklimlendirme Teknolojileri Anonim Şirketi Website

Privacy Policy and Disclosure Text

Website: https://www.ucay.com.tr

Phone Number: 444 82 29

E-mail Address: info@ucay.com.tr

Address: Cevizli Mah. Zuhal Cd. Mazaya Ritim İstanbul A3 Blok K:32 D:169 34846 Maltepe/İstanbul

General Principles of Data Protection

We process your personal data in accordance with the general principles of data protection law. These principles are:

  • Processing personal data in a transparent, lawful, and fair manner,
  • Processing personal data for specific, explicit, and legitimate purposes,
  • Processing personal data only to the extent limited to the stated purposes,
  • Keeping data accurate and up to date,
  • Retaining data for no longer than necessary for the purpose of processing,
  • Storing data securely.

What Types of Data Do We Collect?

As Üçay Mühendislik Enerji ve İklimlendirme Teknolojileri Anonim Şirketi (“Üçay”), within the scope of our activities we process your personal data in line with the general principles set out in Article 4 of the Personal Data Protection Law (“KVKK”) and Article 5 of the General Data Protection Regulation (“GDPR”). The personal data we process are:

  • Your identity information (Name, surname, and for sole proprietorships, trade name)
  • Your contact information (Phone number, e-mail address, city and district details)
  • Your legal transaction information (Information contained in correspondence with judicial authorities, personal data within case–enforcement files)
  • Information contained in your requests, complaints, and applications,

Where Do We Obtain This Data?

We obtain the data we process through:

  • Our WhatsApp line, by automated means,
  • Our call center, by automated means,
  • Case/enforcement files and notifications, by non-automated and partially automated means,
  • Documents you provide to us, by non-automated means,
  • Relevant public institutions and organizations, by non-automated and partially automated means,
  • E-mail, by partially automated means,
  • Orally, by non-automated means,
  • Physical documents delivered to us, by non-automated means,
  • Applications made, by partially automated and non-automated means.

For What Purposes Do We Process This Data and On What Legal Basis?

Legal bases for processing under the KVKK are:

  • Explicit consent (“Art. 5/1, Art. 6”).
  • Clear stipulation by law (“Art. 5/2-a, Art. 6/3”).
  • Necessity to protect the life or physical integrity of the data subject or of another person where the data subject is unable to give consent due to physical impossibility or legal invalidity of consent (“Art. 5/2-b”).
  • Necessity for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract (“Art. 5/2-c”).
  • Necessity for the data controller to fulfill its legal obligation (“Art. 5/2-ç”).
  • Data made public by the data subject (“Art. 5/2-d”).
  • Necessity for the establishment, exercise, or protection of a right (“Art. 5/2-e”).
  • Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (“Art. 5/2-f”).

Legal bases for processing under the GDPR are:

  • The data subject has given consent for one or more specific purposes (“Art. 6(1)(a)”),
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (“Art. 6(1)(b)”),
  • Processing is necessary for compliance with a legal obligation to which the controller is subject (“Art. 6(1)(c)”),
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person (“Art. 6(1)(d)”),
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (“Art. 6(1)(e)”),
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, in particular where the data subject is a child (“Art. 6(1)(f)”).

We request your data to fulfill the following purposes:

Your identity information,

  • To verify your identity,
    • (KVKK, Art. 5/2-ç, Art. 5/2-f) – (GDPR, Art. 6(1)(c), Art. 6(1)(f))
  • To conduct and audit business operations,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To carry out communication activities,
    • (KVKK, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(c), Art. 6(1)(f))
  • To execute payments,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To fulfill our legal obligations,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To follow legal and judicial processes,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To manage contract processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage invoicing processes,
    • (KVKK, Art. 5/2-ç) – (GDPR, Art. 6(1)(c))
  • To create customer ledgers and reconcile accounts,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To carry out collection processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To handle free on-site survey requests,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage processes related to your requests, complaints, and applications,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To contact you and send commercial electronic messages for promotional, advertising, and marketing purposes,
    • (KVKK, Art. 5/1) – (GDPR, Art. 6(1)(a))

Your contact information,

  • To conduct and audit business operations
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To carry out communication activities
    • (KVKK, Art. 5/2-c, Art. 5/2-ç, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(c), Art. 6(1)(f))
  • To fulfill our legal obligations,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To follow legal and judicial processes,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To manage contract processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage invoicing processes,
    • (KVKK, Art. 5/2-ç) – (GDPR, Art. 6(1)(c))
  • To create customer ledgers and reconcile accounts,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To carry out collection processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To handle free on-site survey requests,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage processes related to your requests, complaints, and applications,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To contact you and send commercial electronic messages for promotional, advertising, and marketing purposes,
    • (KVKK, Art. 5/1) – (GDPR, Art. 6(1)(a))

Your legal transaction information,

  • To conduct and audit business operations
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To fulfill our legal obligations,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To follow legal and judicial processes,
    • (KVKK, Art. 5/2-a, Art. 5/2-ç, Art. 5/2-e) – (GDPR, Art. 6(1)(c))
  • To manage contract processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage invoicing processes,
    • (KVKK, Art. 5/2-ç) – (GDPR, Art. 6(1)(c))
  • To carry out collection processes,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))

Your information regarding requests, complaints, and applications

  • To conduct and audit business operations
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To handle free on-site survey requests,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))
  • To manage processes related to your requests, complaints, and applications,
    • (KVKK, Art. 5/2-c, Art. 5/2-f) – (GDPR, Art. 6(1)(b), Art. 6(1)(f))

We process the foregoing data. The legal bases we rely on are indicated in parentheses.

You may give your consent for commercial electronic messages for advertising, promotion, and marketing purposes by ticking the consent checkbox.

With Whom Do We Share the Data?

We may share the personal data we process with:

  • Courts and competent public institutions and organizations in order to follow legal and judicial processes,
  • Competent public institutions and organizations in order to fulfill our legal obligations,
  • Relevant banks to execute payment processes,
  • Independent auditors to carry out audit processes,
  • Relevant suppliers and companies within Üçay Group for conducting and auditing business operations,
  • Counterpart natural and legal persons to carry out necessary correspondence and communication activities. We do not share your personal data with unrelated or unauthorized third parties other than those specified.

Storage and Destruction of Personal Data

As İFM, we process and store your personal data in line with the purpose of processing, in connection with and proportionate to that purpose, and in accordance with the general principles. We take all necessary technical and administrative measures for the security of stored personal data and audit the compliance of third parties to whom we transfer your data with these measures.

We store your personal data by considering factors such as the purpose and reason for processing your personal data, the period required by the relevant legislation, and our legal obligations. According to these criteria, if we no longer need a particular personal data and are not legally obliged to retain it, we destroy such personal data.

What Are Your Rights Under the KVKK?

Data subjects may apply to us and:

  • Learn whether personal data is processed,
  • Request information if personal data has been processed,
  • Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
  • Know the third parties to whom personal data is transferred at home or abroad,
  • Request correction of personal data if it is incomplete or incorrectly processed and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
  • Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the law and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
  • Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
  • Request compensation in case of damage due to unlawful processing of personal data.

You may submit your requests regarding your rights in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your requests will be evaluated and finalized as soon as possible and in any case within thirty (30) days free of charge. If the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will apply. You may also contact us regarding your data processing processes.

Post Views: 27