Privacy and Cookie Policy

This Privacy Notice has been prepared by ALFER ENGINEERING CONTRACTING TRADE AND INDUSTRY INC. ("Alfer") to inform Alfer's customers about the processing of their personal data by Alfer within the scope of Law No. 6698 on the Protection of Personal Data ("Law").

You can access detailed information about the processing of your personal data within the scope of this Privacy Notice in ALFER ENGINEERING CONTRACTING TRADE AND INDUSTRY INC. Alfer Personal Data Protection and Processing Policy available at [https://www.alfer.com.tr/].

a) Methods of Obtaining Personal Data and Legal Basis

Your personal data is collected in electronic or physical media. Your personal data collected in accordance with the legal reasons stated in this Privacy Notice may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Your personal data is processed for the purposes of customizing the products and services offered by Alfer according to the preferences, usage habits, and needs of the relevant individuals and recommending and promoting these products and services to the relevant individuals, conducting the necessary activities for the benefit of the relevant individuals from the products and services offered by Alfer and carrying out the relevant business processes, conducting the necessary activities by the relevant business units for the realization of the commercial activities carried out by Alfer and the related business processes, planning and executing the commercial and/or business strategies of Alfer, and ensuring the legal, technical, and commercial-business security of the individuals who have a business relationship with Alfer.

c) Parties with Whom Personal Data May Be Shared and Purposes of Sharing

Your personal data may be shared with Alfer's business partners and suppliers, legally authorized institutions and organizations, and legally authorized private legal entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of customizing the products and services offered by Alfer according to the preferences, usage habits, and needs of the relevant individuals and recommending and promoting these products and services to the relevant individuals, conducting the necessary activities for the benefit of the relevant individuals from the products and services offered by Alfer and carrying out the relevant business processes, conducting the necessary activities by the relevant business units for the realization of the commercial activities carried out by Alfer and the related business processes, planning and executing the commercial and/or business strategies of Alfer, and ensuring the legal, technical, and commercial-business security of the individuals who have a business relationship with Alfer.

d) Rights of Data Subjects and Exercising These Rights

As a data subject, you have the following rights in accordance with Article 11 of the Law:

1. Learning whether your personal data is being processed,
2. Requesting information if your personal data has been processed,
3. Learning the purpose of the processing of your personal data and whether your data is used in accordance with that purpose,
4. Knowing the third parties in the country or abroad to whom your personal data is transferred,
5. Requesting the correction of your personal data if it is incomplete or inaccurately processed and requesting that the transaction made in this context be notified to third parties to whom your personal data has been transferred,
6. Requesting the deletion or destruction of your personal data in the event that the reasons for its processing are no longer valid, despite being processed in accordance with the provisions of the Law, and requesting that the transaction made in this context be notified to third parties to whom your personal data has been transferred,
7. Objecting to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
8. Requesting compensation for the damages arising from the unlawful processing of your personal data.

In cases specified in Article 28, paragraph 2 of the Law, data subjects cannot exercise the above-mentioned rights in relation to the data processed for the purposes of:

1. Prevention of crime or prosecution of crime,
2. Processing of personal data that has been made public by the data subject,
3. Processing of personal data required for carrying out the inspection or regulatory duties of authorized public institutions and organizations or professional organizations with the authority to carry out audits or regulations,
4. Recording, retaining, and disclosure of personal data by official authorities and public institutions and organizations with the authority to carry out audits or regulations in accordance with the Law on Regulatory Procedures and Principles Regarding the Application to the Data Controller published in Official Gazette dated 10.03.2018 and numbered 30356.

According to the regulations, if a written response is to be provided to data subjects' applications, no fee will be charged for up to ten pages. An administrative fee of 1 Turkish Lira per page may be charged for each page beyond ten pages. If the response is to be provided in a recording medium such as a CD or flash drive, the cost of the recording medium may not exceed the administrative fee.

In cases where personal data processing is necessary for the protection of the state's economic and financial interests in relation to budget, taxation, and financial matters, the rights specified above regarding the data cannot be exercised.

According to Article 28, paragraph 1 of the Law, the data will be considered outside the scope of the Law under the following circumstances, and data subjects' requests will not be processed for such data:

• Processing of personal data by individuals solely for activities related to themselves or their family members residing in the same household, provided that the data is not disclosed to third parties and data security obligations are complied with.
• Processing of personal data for research, planning, and statistical purposes by rendering it anonymous through official statistics.
• Processing of personal data for artistic, historical, literary, or scientific purposes, or within the scope of freedom of expression, as long as it does not violate national defense, national security, public safety, public order, economic security, privacy, or personal rights, or constitute a crime.
• Processing of personal data by authorized public institutions and organizations or public institutions with a public institution status for the purposes of preventive, protective, and intelligence activities carried out within the framework of the tasks and powers assigned by law to ensure national defense, national security, public safety, public order, or economic security.
• Processing of personal data by judicial authorities or execution authorities for the purposes of investigation, prosecution, trial, or execution procedures.