CCTV PERSONAL DATA PROCESSING NOTICE

 

IDENTITY OF THE DATA CONTROLLER

 

Under the Personal Data Protection Law No. 6698 (“Law/KVKK”), your personal data may be processed by İME Elektrik Mühendislik Taahhüt Sanayi ve Ticaret Limited Şirketi (“IME”) as the data controller within the scope explained below.

 

PURPOSES OF PROCESSING PERSONAL DATA

 

Your obtained personal data will be processed by our relevant business units for the purpose of ensuring the security of all physical premises at IME’s buildings, campuses, and construction sites; providing legal, technical, and commercial-business security of the relevant parties who are IME’s business partners, suppliers, visitors, and/or those who have business relationships with IME; conducting necessary studies to carry out the activities of IME, managing emergency processes, managing information security processes, managing activities in compliance with legislation, conducting internal audit/investigation/intelligence activities, managing business activities/control, managing the procurement process of goods/services, managing contract processes, ensuring physical premises security, providing information to authorized individuals, institutions, and organizations, managing organization and event activities, ensuring the security of movable assets and resources, and managing and controlling business processes.

 

TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA CAN BE TRANSFERRED

 

Your obtained personal data may be transferred by IME to our business partners and, if requested, to legally authorized public institutions and organizations within the framework of personal data processing conditions and purposes specified in Article 8 of the Law for the purposes stated above.

 

METHOD OF COLLECTING PERSONAL DATA AND LEGAL BASIS

 

Your personal data will be processed through closed circuit camera recording systems by IME in electronic media during the periods when you are present at IME’s buildings, campuses, and construction sites, within the framework of the conditions that data processing is mandatory for the data controller to fulfill a legal obligation stipulated in Article 5 of the Law, processing is mandatory for the establishment, use or protection of a right, mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

 

RIGHTS OF THE DATA SUBJECT LISTED IN ARTICLE 11 OF THE LAW

 

We hereby inform you, as the data subject, that you have the following rights in accordance with Article 11 of the Law:

 

To learn whether personal data is being processed or not,

To request information regarding the processing of personal data, if it has been processed,

To learn the purpose of processing personal data and whether they are being used in accordance with their intended purpose,

To know the third parties, both in-country and abroad, to whom personal data has been transferred,

To request the correction of incomplete or incorrect personal data and, in this regard, to have the third parties to whom personal data has been transferred notified of the procedures performed,

To request the deletion or destruction of personal data in the event that the reasons requiring its processing have ceased, despite being processed in accordance with the Law and other related laws, and, in this regard, to have the third parties to whom personal data has been transferred notified of the procedures performed if the personal data is incomplete or incorrect,

To object to a result that is unfavorable to the individual resulting from the exclusive analysis of the processed data through automatic systems,

To demand the compensation of damages in case of any harm caused by the unlawful processing of personal data.

 

You can submit your applications regarding the aforementioned rights by filling out the Data Subject Application Form, which you can access at www.ime.com.tr, and sending it to IME. Your requests will be concluded free of charge within the shortest possible time and no later than thirty days depending on the nature of your request; however, if the process requires any additional costs, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.