GDPR Policy
Ayma Partners places utmost importance on protecting individuals’ fundamental rights and freedoms in the processing and safeguarding of personal data, with particular emphasis on the right to privacy as enshrined in Article 20 of the Constitution. In this regard, the Company ensures that personal data is protected and processed in compliance with the law, and conducts all planning and activities with this understanding.
Our Company does not consider the protection and processing of personal data—fundamental to the right to privacy—merely as a matter of legal compliance, but places the value it attaches to individuals at the core of its approach. Acting with this awareness, our Company takes all necessary administrative and technical measures to securely store personal data and to prevent unlawful processing.
a. Data Controller
Pursuant to the Personal Data Protection Law No. 6698 (“Law”), your personal data is collected and processed by Ayma Partners (“Company”) as the data controller, within the scope described below.
b. Method and Legal Basis of Collecting Personal Data
Your personal data may be collected in whole or in part, through automated or non-automated means; verbally, in writing, or electronically; via various documents submitted to our Company, job application forms, customer information forms, mail and e-mails; call center; the Company’s website; social media tools; corporate communication accounts and devices; the Company’s IT systems and devices; security cameras; group companies to which our Company provides or receives services, business partners, firms providing products/services, as well as third parties such as employment agencies and job search portals. The data is retained for as long as necessary and processed accordingly.
Your personal data is processed based on your explicit consent. However, pursuant to Article 5(2) of the Law, your personal data may also be processed without your explicit consent in the following circumstances: (i) when it is expressly provided for by law, (ii) when the personal data has been made public by the data subject, (iii) when it is necessary for the protection of the life or physical integrity of the data subject or another person who is unable to give consent due to actual impossibility, (iv) when it is necessary for the establishment or performance of a contract directly related to the personal data owner, (v) when it is necessary for our Company to fulfill its legal obligations, (vi) when it is necessary for the establishment, exercise, or protection of a right, (vii) when processing is mandatory for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the data subjects.
c. Purposes of Processing Personal Data
Your personal data is processed, provided that one of the conditions specified in Article 5(2) of the Law is met, for the following purposes: fulfillment of obligations expressly stipulated by law as well as professional and legal requirements; proper planning and execution of our commercial relations, partnerships, and strategies; ensuring the legal, commercial, and physical security of our Company and our business partners; maintaining the corporate functioning of our Company; effective planning and implementation of our human resources policies; ensuring the operability and information security of our Company’s IT systems and creating the necessary databases for this purpose; improving the services offered on our Company’s website and correcting any errors that occur; creating and monitoring visitor records; and managing requests and complaints.
If you provide your explicit consent, your personal data may be processed by our Company for the purposes of ensuring that you benefit from our products and services in the best possible way (including conducting statistics, analysis, profiling, and preference reporting) and keeping you informed (through promotions, advertisements, campaigns, announcements, and notifications); planning, developing, and carrying out corporate communication activities; and analyzing your financial profile.
ç. Recipients and Purposes of Transfer of Processed Personal Data
Your personal data may be transferred, provided that one of the conditions specified in Article 5(2) of the Law is met, and limited to the purposes set forth in paragraph 1 of section (c) of this text, to our group companies, affiliates, business partners, companies from which we receive external services (such as security, healthcare, occupational safety, legal services, etc.) in order to fulfill our contractual or legal obligations, and to authorized institutions and organizations, in accordance with the conditions set forth in Articles 8 and 9 of the Law, provided that necessary security measures are taken.
If you provide your explicit consent, your personal data may be transferred, limited to the purposes set forth in paragraph 2 of section (c) of this text, to our group companies, affiliates, and business partners.
d. Rights of the Data Subject Pursuant to Article 11 of the Law
In accordance with Article 10 of the Law, our Company informs you of your rights, provides guidance on how to exercise them, and establishes the necessary internal processes, administrative, and technical arrangements for this purpose. As a data subject, pursuant to Article 11 of the Law, you have the right to: (a) learn whether your personal data is being processed, (b) request information if your personal data has been processed, (c) learn the purpose of processing your personal data and whether it is being used in line with such purposes, (ç) know the third parties to whom your personal data has been transferred domestically or abroad, (d) request the correction of your personal data if it has been processed incompletely or inaccurately, (e) request the deletion or destruction of your personal data within the framework of the conditions set forth in Article 7 of the Law, (f) request that the transactions carried out under subparagraphs (d) and (e) be notified to third parties to whom your personal data has been transferred, (g) object to any result arising against you through the analysis of your personal data exclusively by automated systems, and (ğ) demand compensation for damages if you suffer harm due to the unlawful processing of your personal data.
You may submit your requests and applications regarding the implementation of the Law by completing the Personal Data Protection Law Data Subject Application Form and delivering it in person to the address “Başkent OSB Atatürk Bulvarı No: 19 Maliköy, Sincan / Ankara” in writing, or by sending it via Notary Public.
In your requests and applications,
Name, surname, and signature if the application is in writing,
For citizens of the Republic of Türkiye, the Turkish ID number; for foreigners, nationality and passport number
or, if available, an identification number,
Residential or workplace address for notification,
If available, e-mail address, telephone, and fax number for notification,
Subject of the request,
must be included.
Relevant information and documents concerning the matter must be attached to the application.
Our Company finalizes the requests included in the application free of charge, as soon as possible and within a maximum of thirty days, depending on the nature of the request. However, if the process requires an additional cost, the fee determined in the tariff set by the Board may be charged.
Our Company may either accept the request or reject it by providing justification, and notifies the data subject of its response in writing or electronically. If the request is accepted, our Company fulfills the requirement as soon as possible and informs the data subject. If the application arises from an error on the part of our Company, any fee collected is refunded to the data subject.
In cases where the application is rejected, the response is deemed insufficient, or no response is provided within the specified time, the data subject has the right to file a complaint with the Board within thirty days from the date of learning of the response, and in any case within sixty days from the date of application.
More detailed information on this matter can be found in our Company’s “Personal Data Protection and Processing Policy.”
