FOR WEBSITE VISITORS

INFORMATION ON PRIVACY AND PROTECTION OF PERSONAL DATA

Piyap İnşaat Turizm İthalat İhracat Sanayi ve Ticaret Anonim Şirketi (PİYAP) attaches utmost importance to protecting the fundamental rights and freedoms of individuals, particularly the privacy of private life regulated in Article 20 of the Constitution. In this framework, it pays attention to the protection and processing of personal data in accordance with the law and acts with this understanding in all its planning and activities.

PİYAP considers the protection of personal data, which is the basis of privacy, and its legal processing, not only within the scope of compliance with the legislation, but also puts the value it places on people at the basis of its approach. Acting with this awareness, PİYAP takes all necessary administrative and technical measures to keep personal data safe and to prevent its unlawful processing.

In this framework, in accordance with the Law on the Protection of Personal Data No. 6698, information on the processing and transferring conditions of personal data produced or shared during the use of the “ http://www.piyapgrup.com/ ” website is presented below.

1. Definitions

Website: It is the website at the address of “www.piyapgrup.com”.

Law: The Law No. 6698 on the Protection of Personal Data.

Personal Data : Any information relating to an identified or identifiable natural person.

Online Visitor/Contact Person: All persons accessing the Website. It is included in the scope of the Visitor person group in the relevant company policies.

Board: It is the Personal Data Protection Board.

Company: Piyap Construction Tourism Import Export Industry and Trade Joint Stock Company.

Hosting Provider: Refers to natural or legal persons who provide or operate systems hosting services and content on the Internet.

2.  Processed Personal Data

The personal data of the Online Visitor processed depending on his access to the Website and his actions on the Website are presented below:

For Online Visitors visiting the Website;

– Transaction Security Information (IP address, site traffic information, etc.)

For Online Visitors completing forms on the Website,

Apart from the ones listed above, it is possible to process other data that may be necessary for the operation, development and security of the Website in accordance with the Law.

3. Method and Legal Reason for Personal Data Collection

Personal data is collected within the scope of the legitimate interest of the data controller, in order to be kept for the period necessary for the purpose of processing by fully automatic or partially automatic means by using the website and filling out the contact form.

Personal data is processed based on the express consent of the Online Visitor. However, personal data included in the 2nd paragraph of Article 5 of the Law (i) clearly stipulated in the laws (ii) is mandatory for the data controller to fulfill its legal obligation, (iii) data processing is mandatory for the establishment, exercise or protection of a right. , (iv) data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of personal data owners, it can also be processed without seeking explicit consent based on one of the legal reasons.

4. Purposes of Processing Personal Data

In the event that the personal data is expressly stipulated in the law or in accordance with the other conditions specified in the 2nd paragraph of Article 5 of the Law, depending on the transactions made by the Online Visitor on the Website;

• Execution/supervision of business activities ( performing business activities by us and ensuring the supervision of business activities we perform), execution of customer relations management processes ( managing our relations with customers regarding the products and services offered, meeting demands) in case the "identity and contact information" contact form is filled in. for the purpose of following up the complaints ( responding to incoming complaints, requests, thanks and suggestions) and carrying out communication activities within this scope (contacting you in line with the information provided when necessary) ,
• "Site traffic information" is processed for the purpose of carrying out information security processes ( providing transaction security in form creation processes ). On the other hand, in accordance with the Law No. 5651 and other legislation, the Hosting Provider has an obligation to record and store site traffic information.

The processing of personal data for the purpose of sending commercial electronic messages is subject to the express consent of the Online Visitor.

5. Cookie Information

Third party cookies are not used on the Website. However, only cookies that are mandatory for the operation and security of the site can be used. The Online Visitor may not accept cookies by changing their browser settings or may provide a warning. Certain functions of the Website may not work properly when the use of cookies is stopped.

• Purposes of Use of Cookies

The following links have information on how to manage (and disable) cookies in some common browsers:

As PİYAP, we use cookies for various purposes on our site and application and we process your personal data through these cookies. These purposes are mainly:

• To perform the basic functions necessary for the operation of the Site and the application. 

For example, the logged-in members do not need to enter passwords again while visiting different pages on the Site.

• To analyze the Site and the application, to increase the performance of the Site and the application. 

For example, the integration of different servers on which the Site works,  determining the number of visitors to the Site and adjusting performance accordingly, or making it easier for visitors to find what they are looking for.

• To increase the functionality of the Site and the application and to provide ease of use. 

For example, sharing to third-party social media channels through the Site, remembering the username information or search queries on the next visit of the visitor to the Site.

• • Cookies Used on Our Site

Only mandatory cookies are used on our site. The use of these cookies is essential for the correct functioning of our site and application. For example, authentication cookies, which are activated when you log in to our site, ensure that your active session continues when you switch from one page to another on our site.

• How Can I Control the Use of Cookies?

The preferences of our visitors and users regarding the use of cookies and similar technologies are essential for us. However, Cookies, which are mandatory for the Platform to work, must be used. In addition, we would like to remind you that some functions of the Platform may not work partially or completely if some cookies are turned off.

Information on how you can manage your preferences for cookies used on the Platform is as follows:

• Visitors have the opportunity to customize their preferences for cookies by changing the browser settings in which they view the Platform. If the browser in use offers this possibility, it is possible to change the preferences for cookies through the browser settings. Thus, although it may differ according to the possibilities offered by the browser, data owners have the opportunity to prevent the use of cookies, to choose to receive a warning before the use of cookies, or to disable or delete only some cookies.
• Although the preferences on this subject vary according to the browser used, the general explanation  can be accessed at https://www.aboutcookies.org/. Preferences regarding cookies may need to be made separately for each device from which the visitor accesses the Platform.
• Click ( https://tools.google.com/dlpage/gaoptout)  to turn off cookies managed by Google Analytics .
• Click (https://myaccount.google.com/not-supported)  to manage the personalized advertising experience provided by Google . 
• Preferences in terms of cookies used by many companies for advertising activities can  be managed through Your Online Choices (https://www.youronlinechoices.com/tr/ad-preferences) .
• The settings menu of the mobile device can be used to manage cookies on mobile devices.
• You have the opportunity to customize your preferences regarding cookies by changing the settings of your browser.

6. To Whom and For What Purpose the Processed Personal Data Can Be Transferred

Personal data can be shared with PİYAP's group companies, subsidiaries, affiliates, business partners and authorized public institutions and organizations, limited to the purposes specified in the fourth article of this text, in case one of the conditions in the 2nd paragraph of Article 5 of the Law exists. and within the framework of the conditions specified in Articles 9, provided that the necessary security measures are taken.

In the absence of one of the conditions in paragraph 2 of Article 5 of the Law, the transfer of Personal Data is subject to the express consent of the Online Visitor.

7. Measures Taken for the Security of Data

PİYAP has to take all necessary administrative and technical measures to prevent the illegal processing of personal data and illegal access to personal data, to ensure the preservation of personal data, and to ensure the appropriate level of security.

In case of redirection to other sites or applications through the website, PİYAP is not aware of the compliance of the redirected sites and applications with the legislation on the protection of personal data and is not responsible for their privacy policies and their contents.

• Administrative Measures

As PİYAP, we provide our personnel with the necessary training for the legal processing and protection of your personal data, and we regularly audit their employees to measure the level of compliance with the Law. We adopt the compliance and care shown by our personnel to the Law as a criterion in the performance evaluation of our personnel.

Although these measures are taken within the company, we ensure your data security by signing confidentiality agreements and undertakings with the person groups (suppliers, business partners) with whom we share your personal data in accordance with the law, and we ensure that our stakeholders show sufficient sensitivity for your personal data.

In addition to these trainings, inspections and precautions, in the event of a breach of your personal data, response plans have been created to remedy the breach, and the Company has made necessary preparations to remedy the breach by working with the Board.

• Technical Measures

In order to ensure data security and prevent illegal access to your data, an information infrastructure equipped with security measures in accordance with international standards has been established. The system, which is built on this infrastructure, is constantly audited internally for the smooth functioning of the system.

Technical measures given by the Personal Data Protection Authority such as encryption, authorization matrix, application and network security, data masking, firewalls, backup, key management and up-to-date anti-virus systems are complied with in our information infrastructure, where your data collected through our website is processed and stored.

In addition, intrusion detection and prevention systems have been established to prevent attacks on our information infrastructure, and the security of the system is checked by regularly applying risk analysis, data classification, vulnerability scans and penetration tests. In order to carry out all these processes, software programs and support in accordance with international standards are also received as a requirement of the importance we attach to your personal data.

8.  Rights of Personal Data Owners Pursuant to Article 11 of the Law

PIYAP informs the data owner of its rights in accordance with Article 10 of the Law; It provides guidance on how to exercise these rights and carries out the necessary internal functioning, administrative and technical arrangements for all these.

Personal data owners pursuant to Article 11 of the Law;

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting correction of personal data if it is incomplete or incorrectly processed

• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law, Requesting notification of the transactions (correction and destruction of data) carried out pursuant to subparagraphs (d) and (e) of Article 11 of the Law, to the third parties to whom their personal data has been transferred,
• Objecting to the emergence of a negative result by analyzing the processed data exclusively through automated systems,
• To request the compensation of the damage in case of loss due to the unlawful processing of personal data, has rights.
• Requests and applications related to the implementation of the Law are filled in personally and " Akdeniz Mah. Gazi Bulvarı No:16 Kat:6 D:61 Vural İş Merkezi Konak/ " can be deposited in person in writing or sent via a notary public or registered electronic mail (KEP) address ( ……@hs01.kep.tr ), secure electronic signature or electronically using a mobile signature.
• Requests and applications can also be forwarded to “  info@piyapinsaat.com ” if there is an e-mail address previously notified to PİYAP by the data owner and registered in PİYAP's system.

In requests and applications;

• Name, surname and signature if the application is written,
• Turkish identity number for citizens of the Republic of Turkey, nationality, passport number or identity number, if any, for foreigners,
• Domicile or workplace address for notification,
• If available, the e-mail address, telephone and fax number for notification,
• Demand, must be present.

Information and documents related to the subject must be attached to the application.

PİYAP finalizes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the said transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.

PİYAP may accept the request or reject it by explaining its reason, and notifies the Related Person in writing or electronically. If the request in the application is accepted, PİYAP fulfills its requirement as soon as possible and informs the Related Person. In case the application is caused by the fault of PİYAP, the fee charged is returned to the data owner.

In cases where the application is rejected, the response given is insufficient, or the application is not responded to in due time; The data owner has the right to file a complaint with the Board within thirty days from the date of learning the answer and in any case within sixty days from the date of application.

By using the Website, the Online Visitor declares that he has read all the terms written in this information text and has been informed about the processing of his personal data.