As ŞUA İNŞAAT, acting as the data controller defined under Personal Data Protection Law No. 6698, we attach the utmost importance to the protection and security of the personal data we process.
We take all necessary measures to preserve the confidentiality of your data while it is lawfully collected, stored, processed and, where necessary, shared; to protect the privacy of every individual whose personal data we process; and to ensure the security of that data.
Your personal data is processed by Şua İnşaat in compliance with applicable legislation and within the framework of its Personal Data Protection Policies and Procedures.
This notice is intended to inform you about the purposes for which your personal data is processed, the parties to whom it may be transferred and the purposes of such transfers, collection methods, legal grounds for processing, and your rights.
WHAT IS PERSONAL DATA?
Personal data means any information relating to an identified or identifiable natural person.
WHAT DOES PROCESSING PERSONAL DATA MEAN?
Processing personal data means any operation performed on personal data, including obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, acquiring, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means provided that the operation forms part of a data filing system.
WHO IS THE DATA CONTROLLER?
The data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.
WHAT ARE THE GENERAL PRINCIPLES FOR PROCESSING PERSONAL DATA?
Şua İnşaat processes personal data in accordance with the procedures and principles set out in Personal Data Protection Law No. 6698 and other applicable laws, observing the following general principles:
- a) Processing lawfully and fairly.
- b) Ensuring data is accurate and, where necessary, up to date.
- c) Processing for specified, explicit and legitimate purposes.
- ç) Keeping processing relevant, limited and proportionate to its purpose.
- d) Retaining data only for the period prescribed by applicable legislation or required for the purpose of processing.
These general principles govern all processing activities.
PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA
Your personal data is principally processed to carry out activities required by our business processes and commercial operations, protect our rights and interests, fulfil our legal obligations, and follow up and conclude applications submitted to our company.
Personal data is obtained and processed in physical and electronic environments by automated and non-automated means.
For the same purposes, personal data may be shared, as appropriate, with our business partners, suppliers, Şua İnşaat group companies, shareholders, and authorized institutions and organizations.
Although the legal ground for collecting personal data varies according to the processing activity, it is always based on at least one ground defined by applicable legislation, including Articles 5 and 6 of Personal Data Protection Law No. 6698.
PERSONAL DATA PROCESSING ACTIVITIES
Your personal data may be processed for the following purposes:
- fulfilling legal obligations, complying with legislation and exercising legal rights,
- carrying out work required to enter into and perform contracts,
- identifying suitable products, projects and services for customers and tailoring, developing and providing them,
- ensuring and improving coordination, cooperation and efficiency among Şua İnşaat departments,
- ensuring the security of the website and other electronic systems,
- making necessary notifications to relevant parties,
- conducting and improving advertising and marketing activities where legally permitted,
- conducting audit activities,
- carrying out other events, promotions and campaigns that may benefit the data subject,
- investigating, detecting and preventing breaches of contracts and laws and reporting them to administrative and judicial authorities,
- resolving legal disputes,
- evaluating and responding to requests and questions,
- conducting satisfaction, performance and similar measurements,
- creating statistical information,
- conducting operations,
- establishing company policies and strategies, meeting operational needs and conducting recruitment processes,
- establishing, exercising and protecting a right
as permitted by the applicable legal grounds.
PROCESSING ACTIVITIES BY CATEGORY OF DATA SUBJECT
In addition to the processing activities listed above, your personal data is processed in accordance with Personal Data Protection Law No. 6698 and secondary legislation issued under that law, for the following categories of data subject, purposes and legal grounds:
Real Estate Sales — Customers
Personal data obtained by our company, including your name and surname, signature, Turkish identity number, email address, address, telephone number, purchased property information, identity information and sale-price payment information, is processed to enter into and perform a preliminary real estate sales agreement on the legal ground of entering into and performing a contract under Article 5/2-c of Law No. 6698. Personal data such as your name, surname, telephone number and email address may be processed to inform you about company campaigns after obtaining your approval under Law No. 6563 on the Regulation of Electronic Commerce and on the legal ground set out in Article 5/2-a of Law No. 6698. Personal data such as identity and purchased property information may, with your explicit consent, be processed to carry out land registry, preliminary sales agreement, notarial and subscription procedures on your behalf, to issue powers of attorney to company employees for your transactions, and to complete authorized procedures on your behalf.
Human Resources Processes — Job Applicants
Personal data relating to job applicants is processed to assess applications and manage the relevant processes. The legal grounds for collecting and processing such data include steps required to enter into a contract, the legitimate interests of the parties and, in some cases, your explicit consent. Applicant data may be transferred to Şua İnşaat Group Companies and/or third-party service providers that conduct personality inventories or similar tests.
Subcontractors, Suppliers and Consultants
Personal data relating to our subcontractors, suppliers and consultants, and to their employees and authorized representatives, is processed to communicate within business processes, make payments, conduct business operations, fulfil tax obligations, record commercial activities, reconcile financial transactions, and enter into and perform contracts. Legal grounds include the parties’ legitimate interests, entering into or performing a contract, fulfilling legal obligations, and establishing or exercising rights. This data may be transferred to financial institutions, banks, Şua İnşaat Group Companies, contracted security companies or personnel, and official or legally authorized institutions and organizations in order to make payments and other financial transactions, enter into and perform contracts, and fulfil legal obligations.
Commercial Customers
Personal data relating to our commercial customers, their employees and authorized representatives is processed to communicate with customers, make payments, conduct business processes, fulfil tax obligations, record commercial activities, reconcile financial transactions, and enter into and perform contracts. The legal grounds include the parties’ legitimate interests, legal obligations, the exercise of rights, and existing or prospective contractual relationships. This data may be transferred to financial institutions, banks, Şua İnşaat Group Companies, contracted security companies or personnel, and official or legally authorized institutions and organizations for payments and other financial transactions, contractual performance and compliance with legal obligations.
Website Visitors
Personal data relating to visitors of our website at www.suainsaat.com.tr may be processed to provide a faster and safer website experience, collect statistical information and improve the website. Data is collected by automated means during the visit on the legal ground of our company’s legitimate interests. Visitor data may be transferred to service providers and business partners to improve and develop the website experience, ensure proper access to the website and obtain statistical information. Şua İnşaat may use cookies from time to time to provide visitors with a faster and safer experience. For details, please review the Cookie Policy published on the company website.
Other Processing Activities
Other personal data may also be processed in addition to the activities described above. Personal data contained in applications, complaints, requests and inquiries sent to our company by post or email may be processed to communicate with the sender, fulfil the purpose of the correspondence, protect our rights, and conclude the relevant matter. This data may principally be shared with Şua İnşaat Group Companies only as necessary to complete the relevant operation. Depending on the circumstances, it may also be transferred to various third parties, including shareholders, consultants, public institutions and organizations.
METHODS OF COLLECTING PERSONAL DATA
Şua İnşaat may obtain personal data directly in writing, orally or electronically, or from institutions and natural or legal persons with whom we have a business relationship, including business partners, subcontractors, suppliers, service providers, agencies, agents, contractors, sub-contractors and consultants.
Your personal data may be collected wholly or partly by automated means, or by non-automated means provided that the collection forms part of a data filing system.
For real estate sales, our company collects personal data such as your name and surname, signature, Turkish identity number, email address, address, telephone number, purchased property information and sale-price payment information when you demonstrate an intention to purchase real estate by completing and submitting a Real Estate Request and Preliminary Allocation Form or a Preliminary Real Estate Sales Agreement. Identity and purchased property information may be collected when you provide it with your explicit consent for contract and power-of-attorney procedures.
Your personal data is also collected when you disclose it by contacting our company through other methods.
TRANSFER OF PERSONAL DATA
Within the purposes set out above, the scope of your explicit consent and the choices stated in the privacy notice and explicit consent form, our company may share your personal data with notaries, suppliers, relevant site management bodies, banks or financial institutions, project partners, customers, legally authorized public or private institutions, domestic and/or overseas partners, subsidiaries, business partners, suppliers and affiliates, and other third-party business partners where sharing is necessary to perform the work. Data may also be shared with legally authorized public and private institutions when officially requested or legally required, in accordance with Articles 8 and 9 of Personal Data Protection Law No. 6698.
Your personal data is processed and transferred under Article 5 of Personal Data Protection Law No. 6698. Provided that the statutory conditions are met, Şua İnşaat may process and transfer special categories of personal data under Article 6 of that law.
RETENTION OF PERSONAL DATA
Personal data may be retained for the periods accepted in Şua İnşaat’s relevant policies or prescribed by applicable legislation.
For real estate sales, personal data such as name and surname, signature, Turkish identity number, email address, address, telephone number, purchased property information and sale-price payment information processed for entering into and performing a contract, and data processed after your approval to provide information about company campaigns under the Law on the Regulation of Electronic Commerce, will be processed and retained for the applicable statutory limitation periods under Articles 5/2-c and 5/2-a of Law No. 6698. Personal data such as identity and property information processed on the basis of explicit consent will be processed and retained until you withdraw that consent.
You may withdraw your explicit consent at any time.
YOUR RIGHTS CONCERNING PERSONAL DATA
Under Article 11 of Personal Data Protection Law No. 6698, you have the right to:
- learn whether your personal data is being processed,
- request information if your personal data has been processed,
- learn the purpose of processing and whether your data is used in accordance with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data is transferred,
- request correction of incomplete or inaccurate personal data and request that the correction be notified to third parties to whom the data was transferred,
- request deletion or destruction of personal data where the reasons requiring processing no longer exist, even though the data was processed in accordance with Law No. 6698 and other applicable laws, and request that this action be notified to third parties to whom the data was transferred,
- object to an outcome against you arising from the exclusive analysis of processed data by automated systems,
- claim compensation if you suffer damage because your personal data was processed unlawfully
as provided by law.
If you submit a request to exercise these rights in accordance with the procedures set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, our company will conclude the request free of charge as soon as possible and no later than 30 days, depending on its nature. If the operation requires an additional cost, a fee may be charged in accordance with the Communiqué.
Under Article 13(1) of Personal Data Protection Law No. 6698, you may submit your request concerning the rights listed above to our company in writing or by any other method that may be determined by the Personal Data Protection Board.
To exercise your rights under Article 11 of Personal Data Protection Law No. 6698, you may send a wet-signed petition through a notary public to: Şerifali Mah. Çetin Cad. Kızkalesi Sok. No:1 A Blok / sua Plaza Kat:14 Ümraniye, İstanbul.