Data Protection Notice
As Portsan Mermer A.Ş., we demonstrate utmost sensitivity regarding the security of your personal data. With this awareness, we attach great importance to the processing and preservation of personal data of natural persons receiving services within our Company, in compliance with the Law on the Protection of Personal Data No. 6698 (“Law”), the secondary regulations (regulations, communiqués, circulars) enacted or to be enacted under the Law, and the binding decisions taken or to be taken by the Personal Data Protection Board. Fully aware of this responsibility, we process your personal data, in the capacity of “Data Controller” as defined by the Law, within the scope of carrying out your transactions and within the limits mandated by the legislation, as explained below.
Information Regarding the Data Controller
In accordance with the Law, Portsan Mermer A.Ş., located at Çamlıca Mah. Alpaslan Türkeş Bulvarı No.463/1 Bucak/Burdur, is the Data Controller.
Personal Data Being Processed
Your personal data processed for the purpose of utilizing the services of Portsan Mermer A.Ş. includes:
Your name, surname, gender, date of birth, Turkish ID number and/or tax ID number, photograph, company logo, company title
Delivery address, company address, phone number, fax number, email address
Social media accounts, website
IBAN number
Customer transaction information: order, return and request information, invoice information, delivery transaction information
Historical transaction information: number of page views, number of clicks on the save button, average session duration, language preference
Security and technical information: username and password, IP information, device information, browser information, user and session cookie data
Application login/logout status
Voice recordings (with prior notification) during calls with customer representatives
Survey results
Requests, suggestions, complaints, and comments
Purposes of Processing Personal Data
Your personal data is processed by Portsan Mermer A.Ş. for the following purposes:
To fulfill our obligations specified in the Law on the Protection of Personal Data No. 6698 and related secondary regulations
To establish and execute contracts and to confirm that contracts are signed by authorized persons
To carry out finance and accounting processes
To provide required information to relevant public institutions and organizations, judicial or administrative authorities, and law enforcement agencies when necessary
To provide information to authorized persons, institutions, and organizations
To share your business card information entered for product use with third parties when you scan your business card
To create a user profile on our website
To carry out advertising activities upon your request
To update your personal information when necessary
To carry out logistics and cargo processes for delivery
To manage and supervise business activities of the company
To manage and supervise invoicing processes
To inform you about updates and enhancements with your explicit consent
To develop our marketing and advertising policies with your explicit consent
To increase customer satisfaction and better understand your needs
To conduct strategic analysis studies
To carry out all communication activities
To use your company as a reference for our company with your consent
To provide after-sales support
To ensure and maintain information security
To process survey results and evaluate your requests, suggestions, and complaints
In the case of using Portsan Mermer A.Ş. as an employee of another company, to allow the admin of your company to process and update your data when necessary
Your personal data will be processed within the limits stipulated by the Law, in a lawful, fair, relevant, limited, and proportionate manner for the purposes outlined above.
Transfer of Personal Data
Your personal data may be transferred in accordance with the conditions specified in Article 8/2-a and Article 9 of the Law, for the purposes listed above, to:
Employees and managers of Portsan Mermer A.Ş.
AWS, located in the Ireland region, for information security purposes
Third-party companies involved in product preparation
Cargo companies and private couriers for delivery
Consulting firms handling complaint management and risk analysis for quality control
Our business partners, financial advisors, certified public accountants, independent audit firms, customs companies, and their employees for invoicing processes
Legal advisors, attorneys, and their staff and interns for legal dispute processes
Authorized real and legal persons permitted under the legislation
Other authorized public institutions and organizations
Judicial and administrative authorities
Methods and Legal Grounds for Collecting Personal Data
Your personal data is collected by Portsan Mermer A.Ş. via email, phone, website, mobile application, paper forms, and other verbal, written, or electronic means, through automated or non-automated methods.
Processing is based on the legal grounds specified in Article 5/2 (a, c, ç, f) of the Law, including explicit stipulations in the law, necessity for the establishment or performance of a contract, and necessity for the data controller to fulfill its legal obligations.
Data Retention and Disposal Process
Your personal data, as described in this notice, will continue to be recorded, processed, and transferred as long as our customer relationship continues and to the recipients specified in Article 3 of this notice.
Your personal data is protected using an algorithm containing MD5, SHA1, and CRC32 and is stored in a converted text format. In addition, regular penetration tests are conducted.
Your personal data will be retained, stored, and transferred for the period specified by the applicable legal retention periods, and upon the expiration of these periods, it will be deleted, destroyed, or anonymized in accordance with the relevant legislation.
Rights of Data Subjects Under the Law
You may apply to Portsan Mermer A.Ş. at any time to:
Learn whether your personal data is being processed
Request information if your personal data has been processed
Learn the purpose of processing your personal data and whether it is used in accordance with its purpose
Know the third parties to whom your personal data is transferred domestically or abroad
Request the correction of your personal data if it is incomplete or incorrectly processed
Request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law
Request notification of the actions taken pursuant to subparagraphs (d) and (e) of Article 11 of the Law to third parties to whom your personal data has been transferred
Object to the occurrence of a result against you through the exclusive analysis of your processed data by automated systems
Request compensation if you suffer damage due to the unlawful processing of your personal data
To exercise your rights and for matters related to the application of the Law, you may fill out the application form available at www.portsan.com and send it with a wet signature via notary or registered mail to:
Çamlıca Mah. Alpaslan Türkeş Bulvarı No.463/1 Bucak/Burdur
Alternatively, you may submit your requests via the contact section at https://portsan.com/iletisim/, by calling +90 248 317 13 00, or by emailing portsan@portsan.com. Additionally, if you delete your user ID through our application, all your data will be deleted by us.
Portsan Mermer A.Ş. will respond to such requests in writing free of charge for up to ten pages; for requests exceeding ten pages, a processing fee of 1 Turkish Lira per additional page will be charged. If the response is provided on a recording medium such as a CD or flash drive, the fee will not exceed the cost of the recording medium.
To exercise your rights, your application must clearly and understandably state your request, relate to your personal data, and if acting on behalf of another person, you must provide a notarized power of attorney. Applications must include your name-surname, signature, Turkish ID number, residential or workplace address, email address, phone and fax number, and the subject of your request, in accordance with the “Communiqué on the Principles and Procedures for Application to the Data Controller.” Applications lacking these elements will be rejected by Portsan Mermer A.Ş.