Privacy Notice

Transfer of Personal Data to Third Parties & Purpose of Transferring Data

Your collected personal data may, for the purposes set forth in Article 2 of this Privacy Notice, be transferred to public institutions and organizations at their request and to banks, press associations, consultancy and audit firms, customs firms, customers, insurance companies, travel and visa agencies, to business partners and companies, including suppliers, which we procure services from and work with, to group companies and databases used in common with them for the purposes of ensuring compliance with the Holding's policies and procedures, execution of operational processes, mutual support, and participation in domestic and international tenders, and to the systems of companies that provide technology services abroad, in each case limited to the extent permitted by Law and required by current circumstances.

Method & Legal Grounds for Personal Data Collection

Your personal data are collected electronically through the use of Cookies, by automated or non-automated means, for the purposes set forth in Article 2 of this Privacy Notice and in line with the principles stipulated by Law, in each case limited to the extent necessary for contract performance, fulfilling the data controller’s legal obligations, establishment, exercise or protection of any rights, and the legitimate interests pursued by the data controller, as provided for in Article 5 of the Law.

Your Rights Regarding the Protection of Personal Data

Pursuant to the legislation on the protection of personal data, you have the right to learn whether your personal data have been processed, and if yes, request information about it; learn the purpose of data processing and whether the data is used for intended purposes; get information about the third parties to whom your personal data is transferred in or outside the country; request rectification of incomplete or inaccurate personal data (if any); request deletion or destruction of your personal data after the reasons for processing your personal data have ceased; if you have requested the rectification of incomplete or inaccurate personal data or the deletion or destruction of your personal data after the reasons for processing have ceased, request that such rectification, deletion or destruction is notified to the third parties to whom your personal data was transferred; object to any outcome to your detriment as a result of your personal data being processed exclusively by automated means; and request compensation for damage incurred due to the unlawful processing of your personal data.

Data subjects’ requests for the exercise of their rights under Article 11 of the Law must be submitted to the company address in writing and together with proof of identity, either by hand delivery or by any other means defined in the “Communiqué on the Procedures and Principles of Application to the Data Controller”.

As per Article 13 of the Law, Cengiz Holding will finalize incoming requests within the shortest time reasonably possible but no later than 30 (thirty) days depending on the nature of your request.