Privacy Notice

Customer Privacy Notice under the Personal Data Protection Law

As Aries Yetkilendirilmiş Gümrük Müşavirliği Denetim ve Danışmanlık Ltd.Şti. (the Company), acting as the data controller and in recognition of the importance we attach to the security of your personal data, we process, store and transfer all personal data held by us in accordance with the Personal Data Protection Law No. 6698 (KVKK). With this awareness, we attach great importance to processing and protecting the personal data of our customers, prospective customers, employees, job applicants, interns and students, employees and representatives of suppliers and subcontractors, shareholders and partners, visitors, and other third parties whose data we process, in accordance with Law No. 6698. Aware of this responsibility, we process your personal data as the Data Controller, as defined in the Law, in the manner explained below and within the limits established by legislation. The protection of personal data is a constitutional right and one of our priorities. This privacy notice has been prepared in relation to the personal data collected, stored and processed by our Company pursuant to Article 10 of the KVKK, entitled the Obligation of the Data Controller to Inform, and the Communiqué on the Principles and Procedures to Be Followed in Fulfilment of the Obligation to Inform.

Purposes of Processing Your Personal Data

Your personal data is processed for the following limited purposes: carrying out the necessary work by our relevant business units to perform the commercial and human resources activities conducted by our Company and managing the associated business processes; planning and implementing information access authorisations for business partners and suppliers; following up finance and accounting matters; planning and conducting procurement processes; planning and conducting corporate communications and management activities; planning, auditing and conducting information security processes; following up contractual processes and legal claims; managing and maintaining relationships with business partners and suppliers; planning and conducting after-sales support activities; following up customer requests and complaints; customer relationship management; event management; planning and conducting procurement processes; conducting goods and services purchasing processes; providing after-sales support for goods and services; conducting goods and services sales processes; conducting goods and services production and operational processes; conducting customer relationship management processes; planning and conducting production and operational processes; conducting training activities; ensuring physical premises security; following up and conducting legal affairs; providing information to authorised persons, institutions and organisations; conducting management activities; conducting activities in compliance with legislation; ensuring the security of the operations of the data controller; maintaining commercial activities; conducting audit and ethics activities; conducting internal audit, investigation and intelligence activities; and ensuring the security of movable property and resources.

Transfer of Your Personal Data to Third Parties and Its Purposes

The Company complies with the provisions of Article 6 of the Law regarding the processing of special categories of personal data, the provisions of Articles 8 and 9 regarding the transfer of personal data, and the principles published by the Personal Data Protection Authority.

Within the scope of Article 5 of the Law, the Company may transfer personal data without obtaining the explicit consent of data subjects in the following circumstances:

Where the processing of personal data by our Company is directly related to and necessary for the establishment or performance of a contract.
Where the processing of personal data is necessary for our Company to fulfil its legal obligations.
Where the personal data has been made public by the data subject, provided that processing by our Company is limited to the purpose for which the data was made public.
Where the processing of personal data is necessary for the establishment, exercise or protection of the rights of our Company, the data subject or third parties.
Where processing personal data is necessary for the legitimate interests of our Company, provided that the fundamental rights and freedoms of data subjects are not harmed.

The explicit consent of the data subject must be obtained for the transfer of special categories of personal data, except for the exceptions set out in Article 6 of the Law and described below. Special categories of personal data concerning health and sexual life may be transferred without explicit consent by persons subject to a duty of confidentiality or by authorised institutions and organisations solely for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and managing healthcare services and their financing.

Within the scope of the Law and other legislation, and for the limited purposes stated above, your personal data may be transferred to the General Directorate of Security and other law enforcement agencies, the General Directorate of Population, all judicial authorities, your authorised representatives, third parties from whom we receive consultancy services including lawyers and tax and financial advisers, regulatory and supervisory institutions, official authorities, and business partners with whom we cooperate to develop or carry out the purposes stated above. Your personal data may also be transferred abroad when the necessary legal framework for such a transfer is in place. Personal data may be transferred to organisations providing services to our commercial website, group companies, consultants and advisers with whom we have contractual business relationships, service providers, public institutions where required by the legal obligations arising from our activities, and other organisations defined by legislation.

Methods and Legal Grounds for Collecting Your Personal Data

Personal data is collected through information requested directly from you in the legitimate interests of the Company; personal data contained in your CV or other documents shared with us as part of a job application; human resources organisations serving our Company; digital applications made through our websites; our telephone switchboard; your petitions; legal notices; documents and records required in legal proceedings; records made during audits; and information submitted in applications to our Company under Article 11 of the KVKK. Such data is retained for the statutory periods and as required by the nature of the work.

Your personal data is processed on the legal grounds set out in Article 5/2-c of the Personal Data Protection Law, namely that processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract; Article 5/2-ç, namely that processing is necessary for the data controller to fulfil its legal obligations; Article 5/2-e, namely that processing is necessary for the establishment, exercise or protection of a right; and the fulfilment of obligations towards the Social Security Institution and under Labour Law No. 4857.

Your Rights

By applying to our Company pursuant to Article 11 of the KVKK, you have the right to learn whether your personal data is processed; request information if your personal data has been processed; learn the purposes of processing and whether your data is used in accordance with those purposes; learn the third parties to whom your personal data is transferred within Türkiye or abroad; request the rectification of incomplete or inaccurate personal data; request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK, subject to the legal obligations of our Company; request that third parties to whom your personal data has been transferred be notified of the rectification and erasure or destruction carried out under the foregoing items (d) and (e); object to a result arising against you through the analysis of your personal data exclusively by automated systems; and request compensation if you suffer damage as a result of the unlawful processing of your personal data.

You may submit applications under Article 11 of the Law by delivering a written application bearing your handwritten signature to our Company in person, sending it through a notary, or completing the Application Form under the Personal Data Protection Law and delivering it to our Company in person. You may also submit your application to the Company at evrim@hs01.kep.tr using a secure electronic signature or mobile signature, or send it bearing a secure electronic signature from an email address previously notified to our Company and recorded in our systems.

Contact Details of the Data Controller

Telephone: 0216 442 11 88
Email: info@ariesygm.com
Registered Electronic Mail (KEP): aries@hs01.kep.tr
Office: İçerenköy Mah. Çayır Cad. Nehir Plaza No:9 Daire 10 Ataşehir/İstanbul