KVKK

You can submit your requests within the scope of your rights listed in Article 11 of the Personal Data Protection Law No. 6698 to our company by filling out the Application Form completely and using one of the methods explained below.

For applications made via e-mail ;

After filling out and signing the application form, you can send an e-mail to info@puanestore.com using your e-mail address registered in our company's system. “ Application under the Personal Data Protection Law ” should be written in the subject line of the e-mail.

For applications to be made by registered mail, notification through a notary , or in person ;

After filling out and signing the application form, write " Application within the Scope of the Personal Data Protection Law " on the envelope/notification and send it to Bağlar Mah. Yalçın Koreş Cad. You can apply to Erdinç Binaları No:22 A3 Floor:2 Bağcılar / Güneşli / İSTANBUL.

In applications, it is mandatory for the applicant to document his identity.

Your applications submitted to us will be answered in writing or electronically, depending on your preference, as soon as possible and within 30 (thirty) days from the date your request reaches us.

What are your rights?

Learning whether your personal data is being processed or not.
Requesting information if your personal data has been processed.
Learning the purpose of processing your personal data and whether they are used for their intended purpose.
Knowing the third parties to whom your personal data is transferred at home or abroad,
To request correction of your personal data if it has been processed incorrectly or incompletely, and to request that the action taken in this context be notified to third parties to whom your personal data has been transferred.
Requesting the deletion or destruction of your personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred.
Object to the emergence of a result that is unfavorable to the person by analyzing your processed data exclusively through automatic systems.
Request compensation for the damage if you suffer damage due to unlawful processing of your personal data.

In accordance with the Personal Data Protection Law No. 6698

Procedure for Responding to the Relevant Person's Application to the Data Controller

Seylan Ready-made Clothing Industry and Foreign Trade Limited Company

Purpose and Scope

This procedure has been prepared to determine the procedure, basis and operation regarding the application of the relevant person to the data controller in accordance with the Personal Data Protection Law (KVKK or the Law).

Definitions

Application: It is the application made by the relevant person in accordance with Article 13 of KVKK .

Application Form : This is the form regarding the application made by the relevant person in accordance with Article 13 of KVKK .

Relevant person : The real person whose personal data is processed.

Contact Person : In accordance with the Regulation on the Registry of Data Controllers, by the data controller for real and legal persons resident in Turkey, and by the data controller representative for real and legal persons who are not resident in Turkey, in accordance with their obligations under the Law and secondary regulations to be issued based on this Law. In this regard, the real person notified during registration to the Registry in order to ensure communication with the Institution.

Secure Electronic Signature : It is an electronic signature that is exclusively linked to the signatory, created with a secure electronic signature creation tool that is only at the disposal of the signatory, enables the identification of the signatory based on a qualified electronic certificate, and enables the determination of whether any changes have been made to the signed electronic data subsequently.

Registered electronic mail (REM) address : It is a qualified form of electronic mail that provides legal evidence regarding the use of electronic messages, including their sending and delivery.

Recording medium : It refers to any environment in which personal data is processed, fully or partially, automatically or non-automatically, provided that it is part of any data recording system.

Personal data : Any information regarding an identified or identifiable natural person.

Processing of personal data : Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system, It is any operation performed on data, such as classifying or preventing its use.

Board : It is the Personal Data Protection Board.

Mobile signature : Electronic signature created using a mobile device.

Data Controller : The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for establishing and managing the data recording system.

Company : Seylan Ready-made Clothing Industry and Foreign Trade Limited Company

Right to apply

(1) Relevant persons whose personal data are processed by the company in accordance with Article 13 of KVKK ;

Learning whether their personal data is being processed or not,
Requesting personal data if they have been processed,
Requesting correction of the content of processed personal data if it is incomplete or inaccurate,
Requesting that personal data be deleted or destroyed if it has been processed unlawfully and that the actions to be taken accordingly be notified to third parties to whom the data has been disclosed,
He/she has the right to request compensation for damages caused by unlawful processing of personal data. In line with this right, the data controller may apply to the company.

(2) In order for relevant persons to exercise their rights, they must first apply to the data controller. A complaint cannot be made to the Board without exhausting this option.

(3) Relevant persons may benefit from this right, provided that they make their applications in Turkish in accordance with the Communiqué on Application Procedures and Principles to the Data Controller (Communiqué).

(4) Within the scope of this right, the relevant person can see the application methods and obtain information on our website.

Application Procedure

(1) The relevant person, within the scope of his rights specified in Article 11 of the KVKK , can submit his requests by completely filling out the application form published on the website ( Annex 1 - KVKK Application Form ) and with a wet signature,

To the company address, through a notary public or by sending registered mail,
In writing, personally to the company address,
It can be sent using the registered e-mail (REM) address, secure electronic signature, mobile signature or the e-mail address previously notified to the company and registered in the company's system.

(2) The Company may use a software or application developed for the application purpose so that the relevant person can apply.

(3) In the application;

Name, surname and signature if the application is written,
TR ID number for citizens of the Republic of Turkey, nationality, passport number or identification number, if any, for foreigners,
Residence or workplace address subject to notification,
E-mail address and telephone number for notification, if any,
Demand

It is mandatory to be present.

(4) Information and documents regarding the subject are stated in the application form and added to the application.

(5) In written applications, the date on which the document is notified to the data controller or his representative is the application date.

(6) In applications made through other methods; The date on which the application is received by the data controller is the application date. The legal period for the response to the application starts from this moment.

(7) No financial burden not foreseen in the Law or the Communiqué may be imposed on applications made by the relevant person.

Control of Application

(1) When an application is received, first of all, the relevant person's application must be submitted to the "4th" section of this procedure. It is checked whether the person meets the conditions specified in the "Application Procedure" article and the identity information of the relevant person. As a result of these checks, if there is a deficiency in the application or the identity information of the relevant person, this situation is notified to the relevant person and the deficiencies are requested to be corrected.

(2) If there is no problem in the application procedure, the necessary investigations are carried out, taking into account the request of the relevant person. If, as a result of the investigation, it is concluded that there is no action to be taken regarding the request, this situation will be reported to the relevant person in accordance with the "6. The request of the relevant person is rejected together with the reasons, by notifying it as stated in the "Response to Application" article.

(3) As a result of the investigation, if the request of the relevant person is found to be justified, the request is fulfilled immediately and the relevant person is given the procedure "6. The answer is given as stated in the "Response to the Application" article.

Response to Application

(1) The Company is obliged to take all necessary administrative and technical measures to ensure that the applications made by the relevant person are concluded effectively, in accordance with the law and the rule of honesty.

(2) The company accepts the application or rejects it by explaining the reason. It is important to explain the reason for the rejection decision in order to protect the rights of the persons concerned more effectively. If the request of the relevant person is accepted by the company, the company must fulfill the requirements of the request directly and immediately. Although the request is accepted, if the requirements are not met, it is assumed that the company rejects the request.

(3) The company notifies the relevant person of its response in writing or electronically. Annex 2 - Answer Text is used for answering.

(4) If the relevant person has specified a response notification method in his application, the relevant person must be responded to using this method.

(5) The minimum information that should be included in the response letter;

Information about the data controller company,
The applicant; name and surname, TR ID number for citizens of the Republic of Turkey, nationality for foreigners, passport number or ID number, if any, residence or workplace address for notification, e-mail address, telephone and fax number for notification, if any,
Demand,
The company's statements regarding the application.

(6) The Company finalizes the requests in the application free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee specified in Article 6 may be charged. If the application arises from the error of the data controller, the fee collected will be refunded to the relevant party.

(6) If the request of the relevant person is accepted, the data controller fulfills the request as soon as possible and the relevant person is informed.

(7) If the application is not responded to within thirty (30) days, the application is deemed rejected by the company. In this case, the relevant person has the right to complain to the Board.

Fee

(1) If the application of the person concerned will be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages.

(2) If the answer to the application is given on a CD, flash memory or similar recording medium, the fee that may be requested by the company cannot exceed the cost of the recording medium.

(3) If the application is caused by the company's error, the fee received is refunded to the relevant person.

Internal Responsibility and Operation

(1) The KVKK Contact Person and the KVKK Committee, if established within the company, are responsible for the management and operation of the process regarding the application of the relevant person within the scope of the Law.

Personality Rights and Application for Legal Remedies

(1) Relevant persons whose personal rights have been violated have the right to compensation in accordance with general provisions. The person concerned can both file a complaint with the Board and take direct legal action. In other words, there is no obligation to apply to the data controller before the matter is referred to the judiciary.

Relevant Policies and Procedures

This Procedure should be considered together with all policies and procedures put into effect regarding the protection and processing of personal data within the Company.

Effectiveness, Change and Update

This procedure comes into force as of the date it is approved by the Company's legal representative. Any changes or updates to this procedure will come into force as of the date the change or update is approved. Changes to the legislation are implemented immediately, even if the procedure has not been updated.

Annex 1 – KVKK Application Form

Annex 2 – Answer Text

Sample Board Decisions

Decision of the Personal Data Protection Board dated 01/10/2019 and numbered 2019/296 regarding "The application made to the Board regarding the rejection of an operator company's application made by the relevant person on the website on the grounds that it could not confirm the identity"

“TC Ziraat Bankası A.Ş., which did not respond to the application made by the relevant person and whose clarification text published on its website did not meet the conditions regulated in the legislation. "About" Decision of the Personal Data Protection Board dated 02/05/2019 and numbered 2019/122

Decision of the Personal Data Protection Board dated 24/12/2018 and numbered 2018/156 "About applications made to the Authority regarding matters within the jurisdiction of the judicial authorities"

Decision of the Personal Data Protection Board dated 14/05/2020 and numbered 2020/379 regarding "The data controller medical center's failure to respond to the application of the relevant person whose visual and audio personal data are processed within the video promotion section of a medical center's website"

Decision of the Personal Data Protection Board dated 11/08/2020 and numbered 2020/622 regarding the application to the data controller by the father of the relevant person for the destruction of the health report of the relevant person who has not reached the age of 18 and the relevant person himself making a complaint to our Institution upon receiving no response.