Personal Data Protection Information Notice

ANKARA CHAMBER OF INDUSTRY (ACI)

INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

This Information Notice is provided by the Ankara Chamber of Industry (ACI), acting in its capacity as the Data Controller, pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”) entitled “Obligation of the Data Controller to Inform” and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. This notice explains the purposes for processing your personal data shared through our website, the recipient groups to whom such data may be transferred, the methods of collection, the legal basis for our data processing activities, and your rights under the Law regarding such personal data.

ACI takes all necessary technical and administrative measures to ensure that the personal data of its members, visitors, employees, and other related individuals are securely stored and processed in compliance with the Law and applicable legislation.

1. DATA CONTROLLER AND PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed by ACI, acting as the Data Controller, for the following purposes:

  • For applicants to the Career Portal System: evaluating applications based on personal data contained in applicants’ resumes, including identity information, contact details, educational background, work experience, military service status, and other relevant information.
  • Carrying out the activities conducted by ACI and managing related business processes, including the establishment and management of information technology infrastructure, planning and execution of business continuity activities, corporate communication activities, event management, procurement processes, and corporate sustainability initiatives.
  • Fulfilling obligations relating to retention, disclosure, reporting, and other requirements prescribed by applicable legislation.
  • Planning and carrying out activities necessary for recommending and promoting products, services, and support offered by ACI to relevant individuals by tailoring them according to their preferences, usage habits, and needs.

Your personal data may be processed within the personal data processing conditions set forth in Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data.

The personal data listed above may be processed in accordance with the general principles set forth in Article 4 of the Law and the processing conditions specified in Articles 5 and 6 of the Law, as well as secondary legislation, for the purposes outlined above.

2. TRANSFER OF PERSONAL DATA

Your collected personal data may be transferred, for the realization of the purposes stated above:

  • To our affiliates and business partners,
  • To authorized public institutions and organizations as required by legislation, regulatory and supervisory authorities in response to their requests, and third parties where necessary for the fulfillment of the above-mentioned purposes.

Such transfers may take place domestically or internationally within the scope of Articles 8 and 9 of the Law No. 6698 on the Protection of Personal Data and only for the purposes specified in the ACI Personal Data Protection and Processing Policy.

3. METHOD AND LEGAL BASIS FOR COLLECTING PERSONAL DATA

ACI collects and retains personal data through various communication channels and in physical and electronic environments for different legal and commercial reasons, including providing benefits to you, fulfilling internal operational requirements, maintaining and improving activities, and complying with legal obligations.

The legal grounds for processing personal data include:

  • Your explicit consent,
  • Compliance with legislation applicable to our institution, including but not limited to the Law No. 5202 on Defense Industry Security and related secondary regulations,
  • Labour Law No. 4857,
  • Turkish Commercial Code No. 6102,
  • Turkish Code of Obligations No. 6098,
  • The necessity of processing personal data belonging to the parties of a contract, provided that such processing is directly related to the establishment or performance of the contract,
  • The necessity of processing data for compliance with our legal obligations,
  • The data having been made public by the data subject,
  • The necessity of data processing for the establishment, exercise, or protection of a legal right,
  • The necessity of processing data for the legitimate interests of our institution, provided that such processing does not violate the fundamental rights and freedoms of the data subject,
  • The necessity of processing data to protect the life or physical integrity of a person who is unable to express consent due to actual impossibility or whose consent is not legally valid.

4. RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of the Law No. 6698, data subjects have the right to submit requests regarding their personal data to the Data Controller.

If the response to an application requires an additional cost, ACI may charge the fee determined by the Personal Data Protection Board. Except where additional costs arise, requests will be concluded free of charge within a maximum period of thirty (30) days, depending on the nature of the request.

Within this scope, data subjects have the right to:

  • Learn whether their personal data is being processed,
  • Request information if their personal data has been processed,
  • Learn the purpose of processing and whether the data is used in accordance with that purpose,
  • Know the third parties to whom personal data is transferred domestically or abroad,
  • Request correction of incomplete or inaccurate personal data,
  • Request deletion or destruction of personal data under the conditions set forth in Article 7 of the Law,
  • Request notification of the actions taken pursuant to the above items to third parties to whom personal data has been transferred,
  • Object to a result arising against the individual through the exclusive analysis of processed data by automated systems,
  • Request compensation for damages arising from unlawful processing of personal data.

5. RETENTION PERIOD OF PERSONAL DATA

Personal data shared with ACI through the channels specified in this Information Notice will be retained in accordance with the retention periods prescribed by the Law No. 6698 on the Protection of Personal Data and other applicable legislation.

Where retention periods are specified by law, personal data will be retained for the relevant period. If no specific retention period is prescribed, retention and destruction procedures shall be carried out in accordance with the ACI Personal Data Retention and Destruction Policy.

Pursuant to Article 13 of the Law No. 6698 titled “Application to the Data Controller”, in order to exercise the rights listed above, you must submit your request to ACI in writing or by other methods determined by the Personal Data Protection Board.

To exercise your rights, you may complete the application form below and submit the signed form together with documents verifying your identity by:

  • E-mail: bilgiedinme@aso.org.tr
  • In person or by post: Ankara Chamber of Industry, Atatürk Boulevard, ASO Towers No:193, Çankaya / Ankara, Türkiye
  • Through a notary public,
  • By other methods specified under the Law No. 6698,
  • Via registered electronic mail (KEP): aso@hs02.kep.tr using a secure electronic signature.